Cloud Security

# Author: Miroslav Stampar (miroslav. stampar (at) gmail.com @ stamparm)# Software Link: http://downloads.wordpress.org/plugin/proplayer.4.7.7.zip# Version: 4.7.7

# Exploit Title: Social Slider # Date: 2011-08-05# Author: Miroslav Stampar (miroslav. stampar (at) gmail.com @ stamparm)# Software Link: http://downloads.wordpress.org/plugin/social-slider-2.zip# Version: 5.6.5 (tested) ---------------PoC (POST

Title: WordPress UnGallery plugin Author: Miroslav Stampar (miroslav. stampar (at) gmail.com @ stamparm): Http://downloads.wordpress.org/plugin/ungallery.1.5.8.zipTested version: 1.5.8 ---Test Method---#! /Bin/python Import urllib2 FILEPATH =

Title: WordPress MM Duplicate plugin Author: Miroslav Stampar (miroslav. stampar (at) gmail.com @ stamparm www.2cto.com): Http://downloads.wordpress.org/plugin/mm-duplicate.zipTest version: 1.2 (tested) ---Test Method---A http://www.bkjia.com/index.

Title: WordPress SendIt plugin Keyword: inurl: "wp-content/plugins/sendit/submit. php"Author: evilsocket (evilsocket [at] gmail [dot] com) www.2cto.com: Http://wordpress.org/extend/plugins/sendit/Tested version: 1.5.9 (tested with magic quotes OFF)  

By Mr. DzY from www.0855. TV This system directory traversal problem was released some time ago. The official version has been revised after feedback.Today, a new version of Yothshop mall system was discovered.Insert a sentence into the database

Title: WordPress oQey Gallery plugin Author: Miroslav Stampar (miroslav. stampar (at) gmail.com @ stamparm): Http://downloads.wordpress.org/plugin/oqey-gallery.0.4.8.zipAffected Version: 0.4.8 (tested)Prerequisites: magic_quotes has to be turned off 

  By: xiaoCon Don't shoot bricks for the first time.   The following is a reference clip: // Search word preprocessing $ Searchword = empty ($ searchword )? ": Cutstr (trim ($ searchword), 50 ,"); $ _ Da ['searchword'] = $ searchword; If ($

  Title: Concrete5 Author: Ryan Dewhurst (ryandewhurst at gmail) www.2cto.com (@ ethicalhack3r) Http://sourceforge.net/projects/concretecms/files/concrete5/5.4.2.1/ Affected Version: 5.4.2.1 (tested)   1. defect description   Multiple SQL Injection,

  Title: Simple Free PHP Forum Script Author: Skraps, Jackie Craig Sparks (www.2cto.com) : Http://www.phpforumscript.com /? Page_id = 11 Affected Versions: 1 (tested)   This script is riddled of unsanitized REQUEST variables that allows multiple

Title: [1024 CMS Version 1.1.0 beta (/complete-modules/forcedownload/force_download.php) Local File compression sion Vulnerability]Author: [Sangyun YOO] [I2SEC] www.2cto.com Email: yoosy0302 at naver dot comSoftware connection:

[Waraxe-2013-SA #103]-Multiple Vulnerabilities in phpMyAdmin ===============================================================================   Author: Janek Vind "waraxe" Date: 25. April 2013 Location: Estonia, Tartu Web:

Test environment: two accounts: Account A: abbbc Account B: abbbbc first, log on to account B, go to the data modification page, and click Modify bind email.In this case, if you capture A packet and change username to account A, it is equivalent to

On the street network, you can change the unverified token in the mailbox. You can use a specially crafted form by the attacker to modify the email address of the attacker, and then you can retrieve the password for hijacking. Because the mailbox

During video sharing, the video image URL of the form processing program on the server is not directly from a third-party interface, but is displayed to netizens after the server first calls the third-party video information through the interface,

1. user input output as is Method of exploits: xss attacks are carried out directly at the output location. Solution: to filter, the most common such as filtering, the following content input: http://xxx.com /? Umod = commentsoutlet & act = count &

Method of exploits: first register. Add any item to the shopping cart. On the page of filling in the delivery address, select a region, select a region, and copy the address to exp. EXP: simple EXP [Silic Group Hacker Army] 11' and (select 1

The social comments of the Lamu are http://www.denglu.cc/the social comments of the lamps are directly scriptless, but you can find that they allow the insertion of images. They only support html and then try on ~ Currently, various cookies can be

1. Anti-SQL Injection Baidu has written a PHP script against SQL Injection in 360.cn. Use GPC for detection. Some code: $ getfilter = "'| (and | or) \ B. +? (>||| $ value) {StopAttack ($ key, $ value, $ getfilter);} foreach ($ _ POST as $ key => $

(This is for beginners. Please bypass it.) First, let's get a simple example to let everyone know.My database and table data are as follows: mysql> use testDatabase changedmysql> select * from test;+----+------+-----------------------+-------+| id |