Cloud Security

Release date: 2011-01.26Author: LinkEr Affected Version: V1.7 static versionHttp://www.strongfire.cn/ Vulnerability Type: design defectVulnerability Description: Fengshen news management static edition 1.7 has multiple

By kxlzx http://www.inbreak.net This article uses the discuz session fixation vulnerability as an example to describe how to use Session Fixation to attack WAP websites. The Session Fixation vulnerability indicates that the web application does not

/** Author blog: http://87year.info* Article address: http://87year.info/2011/03/09/pseudo-build httpheader x-forwarded-forincoming Ticket/* Note: Please bypass science popularization.*/Background:The kids shoes gave a website a ticket. After

Not to explain, very powerful programmers. If you design the program in this way, it will be much safer. Hackers cannot log on even if they get the correct password. Because he does not know the calculation method. In addition, the Security Password

Use remote storage to organize the Getshell logic. Ewebeditor is quite simple to use SHELL, but sometimes it finds that uploading and modifying cer, cdx, asa, php, and Other types are not good. The webmaster may have handled some security risks,

Violent Field LengthOrder by num /* Matching FieldAnd 1 = 1 union select 1, 2, 4, 5 ....... N /* Violent field locationAnd 1 = 2 union select 1, 2, 3, 4, 5 ..... N /* Using built-in function brute-force database informationVersion () database ()

CMS Lokomedia is a php-based content management system. CMS Lokomedia 1.5 has the Arbitrary File Upload Vulnerability, which may cause attackers to obtain the website shell. [+] Info:~~~~~~~~~CMS Lokomedia 1.5 Arbitary file upload

PHP-fusion is a content management system. The article. PHP in php-fusion has the SQL injection vulnerability, which may cause leakage of sensitive information. [+] Info:~~~~~~~~~# Title: PHP-fusion (articles. php) SQL Injection Exploit# Author:

Brief description: The application is not configured for security. You can remotely access the system.Description: The jmx-console can be accessed anonymously. You can then use the default vulnerability configuration. Finally, you can smoothly

Lostwolf In short, all directories that can be accessed cannot be written except for the site directory.Support asp.net. iisspy can be used by a senior iisspy (it was an it teacher who had been selling a Space recently). If the server wants to find

1. For example, a Web horse url path http://www.bkjia.com/aa.asp/1.txt Then, after entering the web Trojan password, the submitted page is http://www.bkjia.com/aa.asp, and the result is no more. In fact, we can see that the action of the Form in

I would like to briefly describe this site. The ASPX type site does not find the injection vulnerability and is configured securely. This system is actually open source code, so generally there will be fewer system vulnerabilities, I have

OrangeHRM is a human resource management system. The PluginController. php file in OrangeHRM 2.6.3 has a local file inclusion vulnerability, which may cause sensitive information leakage. [+] Info:~~~~~~~~~OrangeHRM 2.6.3 (PluginController. php)

 Brief description: There is a reflection-type XSS vulnerability in Glutinous Rice. This vulnerability is caused by the absence of verification of hidden fields in the form. Attackers exploit this vulnerability to steal user cookies.Detailed

Most of the passwords of webpage Trojans are in plain text, but md5 is also useful, which can be easily cracked. The most important reason is that they are not encrypted by standard network horses. Generally, after the passwords are encrypted, only

Vulnerability Description: A Critical administrator bypass vulnerability exists in the Unified conference system. If this vulnerability is not fixed, attackers can simply use or = or to bypass the background verification restrictions, the

Brief description: Xin Tong huashun Network Information Co., Ltd. provides mobile WAP access to the website for financial information access. SQL Injection exists on multiple pages.Detailed description: Databases on the SQL Injection page of the

 OsCommerce is an open-source e-commerce program. The banner_manager.php in osCommerce 2.3.1 has a file upload vulnerability, which may cause attackers to directly obtain webshells. [+] Info:~~~~~~~~~OsCommerce 2.3.1 (banner_manager.php) Remote

I made a website for others last week and accidentally found many vulnerabilities in my work. In just 20 seconds, I was able to use SQL injection. I checked some information about SQL injection and hoped to share it with new users. experts laughed!  

Judge version: Http://www.bkjia.com/7747.php? Id = 352 & wsid = 1% 20and % 20 () % 3E (select % 20 count (*), concat (select % 20 @ version % 20), 0x3a, floor (rand () * 2) % 20x % 20 from % 20 (select % 201% 20 union % 20 select % 202) % 20a % 20