Cloud Security

Author: zhimaLobularForum:Http://www.sinhack.comToday I met a site with injection points, but smartManualInjection, because it is an accessDatabase, Open SourceProgram,ManagementIf you modify the name of a management table and leave a false value,

Release date: 2011-01.26Author: LinkEr Affected Version: V1.7 static versionHttp://www.strongfire.cn/ Vulnerability Type: design defectVulnerability Description: Fengshen news management static edition 1.7 has multiple

PHP is a great language for rapidly developing dynamic web pages. PHP is also friendly to junior programmers. For example, PHP does not need to be declared dynamically. However, these features may cause a programmer to inadvertently intrude security

FROM http://www.st999.cn/blog By wandering Program: carefree Shopping System ASP fashion Edition Vulnerability: There is a backdoor. You can directly log on to the shell. I don't know if this backdoor exists or is added by someone else. I didn't pay

About utf7-BOM string injectionAt one timeMario HeiderichDuring the communication, he asked me if I knew "+/v8". At that time, I knew nothing about this, so he sent me a bull.Gareth HeyesA paper 《XSS Lightsabre techniquesOn the 34 pages of the

Mysql 5. x introduces a system function. This function can execute system commands. when mysql logs in as root, it can be used to execute commands, of course, within the permitted range.Generally, after obtaining the mysql root Password, we connect

Author: Knife 1. Find Writable Directories This is very important. The writable directories outside of the stars have actually summarized the toast. However, it has been updated recently outside of the stars... C: 7i24. The old comiissafelog is

DISCUZX1.5 local file inclusion, of course, is conditional, is to use the file as the cache.Config_global.php$ _ Config [cache] [type] = file; Function cachedata ($ cachenames ){......$ Isfilecache = getglobal (config/cache/type) = file;......If ($

Alcassofts SOPHIA is an international and powerful content management system. The dsp_page.cfm file in Alcassofts SOPHIA has the SQL injection vulnerability, which may cause leakage of sensitive information. [+] Info:~~~~~~~~~ Title: Alcassofts

DO-CMS is a user-friendly Content Management System for Small and Medium-sized applications. Multiple SQL injection vulnerabilities in the DO-CMS may cause sensitive information leakage. [+] Info:~~~~~~~~~DO-CMS Multiple SQL Injection Vulnerability

Readmore Systems Script is a news Script system. The news. php file in Readmore Systems Script has the SQL injection vulnerability, which may cause sensitive information leakage. [+] Info:~~~~~~~~~ # Exploit Title: [SQL injextion]# Google Dork:

Vulnerability Description: QuarkMail is an email system launched by Beijing xiongzhi weiye Technology Co., Ltd. It is widely used in e-mail solutions in various fields. Its webmail is partially compiled using perl cgi, however, 80sec has discovered

 I didn't see the front-end. A friend threw it to me. admin is the default backend.Go in and read it. Analyzed the webshell method. 1. admin/UpPicFile. asp? Path = ../Include traverse the whole site 2. admin/UpFileSave. asp has no verification.

Com_booklibrary is a Joomla plug-in. com_booklibrary has the SQL injection vulnerability, which may cause sensitive information leakage. [+] Info:~~~~~~~~~ # Exploit Title: SQL Injection in component com_booklibrary for Joomla# Date: [172.163.2011]#

CnCxzSec's Blog Today, I saw an article Exploitation of "Self-Only" XSS in Google Code in exploit-db, which is about the "cross-Self XSS" on Google Code ". In the past, I found that some mainstream domestic mailboxes "only cross-user XSS" were found.

 ######################################## ########################### Title: Web Wiz Forum Injection Vulnerability## Author: eXeSoul## Home: www. indishell. in or www.andhrahackers.com## Email: exe.soul@live.com## Date: 23/3/2011## D0rk: [I] Powered

Release date: 2011-03.24Author: tenzy Affected Version: PHPCMS.Http://www.phpcms.cn Vulnerability Type: design defect Vulnerability Description: You can directly register a VIP member through a pass.  Detailed description:  If ($ action = member_add)

Love letter Today, a website with the same server as the target site has very low Webshell permissions. It is also very powerful to kill software and cannot be Elevation of Privilege. The terminal cannot be connected. In addition, the IP addresses

Vulnerable To Blind SQL Injection # By Jackh4xor @ W4ck1ng-Http://www.jackh4xor.com/ Http://www.hackerregiment.com/mysql-com-vulnerable-to-blind-sql-injection.html The Mysql website offers database software, services and support for your business,

PHPBoost is a content management system. PHPBoost has a Remote File Download Vulnerability, which may cause remote download of. SQL files for backup. [+] Info:~~~~~~~~~ # Title: PHPBoost 3.0 Remote Download Backup Vulnerability# Author: KedAns-Dz# E-