Cloud Security

Affected Versions:MolyX Board 2.81 Vulnerability description:MolyX Board is one of the Magic Series of Web application software products. MolyX Studios, after years of market technology research and research, based on the advantages of many Forum

Text/nintyI learned from BS Daniel, and then I made a little research and wrote some notes ..Let's take a look at the following code: Set Conn = Server. CreateObject ("ADODB. Connection ")Conn. open "Driver = {SQL Server}; Server = MICROSOF-17A8A8;

Author: nuclear attackWhen browsing news yesterday, Baidu news found the following defects:Normal page:Http://news.baidu.com/n? Cmd = 2 & am... m & cls = civilnewsBug page ("% 23" is submitted after the url (in hexadecimal format ):Http://news.baidu.

Sentiment blog Skysky download site is a famous download site in China. It provides the latest free software and shared software downloads at home and abroad. China tietong, China Unicom, China Telecom, and information port all over the country have

5up3rh3iblog Today, I saw a blog html "target = _ blank>Http://hi.baidu.com/toby57/blog/item/abec95514dccdc2942a75b96.htmlThe "php parsing encoding" problem mentioned in:$ A = Future is similar;$ B =; phpinfo ();//;?>So I went to ryat to discuss

Release date: 2010-08-23 Affected Version: eimsBlog_v2.1 Vulnerability Description: Cross-Site vulnerability Author: m4r10 http://www.bhst.org reprint Please Note Copyright Vulnerability Analysis: Article. asp ----------------------------------------

Detailed description:The injection URL for the power game site in Silicon Valley is:Http:/games.enet.com.cn/zhuanti/zx/action/article_v.shtml? Id = 102929Use the union query to find out that eight fields are replaced with null, which can be used to

Author: Mosquitoes A few days ago, I saw a legendary anti-deletion Trojan, encrypted, and decrypted. It was time to break it and I don't remember it. If you are idle, consider how to implement it. First, consider the attribute issue. Deleting a file

About a year ago, I discovered the Cookie spoofing vulnerability in the Access edition of the image management system: any user can modify the Cookie to get the administrator privilege. In February June this year, I sent an email to IOT platform

CVE-2010-3081 and 3301 these two are X86_64 Kernel in 32-bit support vulnerability, it is said that 07 years when there was a problem, then patch, but I don't know why I lost this patch when I updated it in. Similar problems appear not only on the

Author: Shu Cheng Li Yin♂[Dream]★Swordsman]Recently, the mobile network 8.0 was found to have a vulnerability, so I drove Internet Explorer to the mobile network official website to see if there was any patch. I found no patch in a circle. I

Vulnerability Analysis: Version 2.0-2.2 FCKeditor/editor/filemanager/upload/php/upload. php # $ SType = isset ($ _ GET [Type])? $ _ GET [Type]: File; # # // Get the allowed and denied extensions arrays. # $ ArAllowed = $ Config [AllowedExtensions] [$

Author: k3nz0 This lessons is devided into 3 parts:[1] Introduction[2] Types of filters[3] Conclusion [1] Introduction:Nowadays, most of "securised" websites, make filters to dont allow cross site scripting "injections", however, we can bypassThese

In order to facilitate the handwriting of An SQL. php injection point. If the classic id is not filtered, the SQL statement is inserted into the parameter for injection. You can import the database file test. SQL. Injection Using the

Historical proof: A branch of narrow web security has entered the php era from the asp era. As the operating platform is becoming more diversified from the win series, server Security has also started to spread from windows to Unix/Linux. Security

Corridor 1.8.9 is an upgraded version of corridor 1.8.8,This mainly includes the Chinese and other language files provided on this site,Fixed some security issues, supplemented the deletion function of Forum posts, and interrupted output exercises

Blind injection vulnerability in Weedcms v4.0 sp1 to the latest 5.0 Lunar New Year USER_AGENT Program Description: Weedcms is based on the PHP + MYSQL architecture. The innovative content management mode allows you to define the content model after

OSS 8.2.0 does not allow you to upload files with extensions such as asp, asa, cer, and htr. Even if you add files of this type to the background, they cannot be uploaded successfully! However, files with the. php suffix can be uploaded! Go to the

Some time ago, a small station on the server was infected with Trojans. Centos + nginx + php used by the server, and Didcuz and UChome used by the program. This website has no access traffic, and hackers are still eyeing it. Fortunately, backups are

Text/figure Peng YiThe file association method was implemented earlier by the "glacier" program. For self-protection purposes, "glacier" associates TXT files with EXE files. ). The specific implementation is to modify the REG_EXPAND_SZ type value of