Cloud Security

The location of the mssql password in the external host registry1. HKEY_LOCAL_MACHINE \ SYSTEM \ LIWEIWENSOFT \ INSTALLFREEADMIN \ 112. HKEY_LOCAL_MACHINE \ SYSTEM \ LIWEIWENSOFT \ INSTALLFreeHost \Navicat is a popular MySQL management tool, which

Author: Qingtian Xiaozhu Test environment: discuz X1.5 + nginx 1.0Vulnerability file source/function/function_core.php, code: $ _ G ['setting'] ['domain '] ['app'] ['default'] & $ content = preg_replace ("/ Code: Http://www.bkjia.com/forum.

74cms SQL Injection VulnerabilityFunction getip (){If (getenv ('HTTP _ CLIENT_IP ')){$ Onlineip = getenv ('HTTP _ CLIENT_IP ');} Else if (getenv ('HTTP _ X_FORWARDED_FOR ')){$ Onlineip = getenv ('HTTP _ X_FORWARDED_FOR ');} Else if (getenv ('remote _

========================================================== ==============Secur-I Research Group Security Advisory [SV-2011-004]========================================================== ==============Title: NetSaro Enterprise Messenger v2.0 Multiple

[O] PlaySMS Software: PlaySMS ver 0.9.5.2Official program: http://playsms.org/Author: NoGe www.2cto.com ========================================================== ========================================================== ===========================

Title: Pluck 4.7 multiple vulnerabilities Author: Bl4k3 www.2cto.com: Http://www.pluck-cms.org /? File = downloadTest version: 4.7   1-File Inclusion: Include (ALBUMS_DIR. '/'. $ _ GET ['alipay']. '. php '); Require: If (file_exists (ALBUMS_DIR. '

  Hello everyone, I am a beginner. In the previous lecture, we learned about "Search injection, today, let's take a look at another uncommon injection method, "cookie injection". Before we talk about it, let's review the Request object knowledge in

Brief description:An excessive permission vulnerability exists in a forum of Tianya. You can modify any popular post content and embed malicious code in it.Detailed description:   Proof of vulnerability:In addition, the blog SWF jump:

  Title: EFront Public version: When 3.6.10 will be released Author: IHTeam www.2cto.com Download link: http://www.efrontlearning.net/download/download-efront.html Test Platform: efront_3.6.9_build11018 Default username and password: Student:

  Title: Nexusphp. v1.5 SQL injection Vulnerability Author: flyh4t www.2cto.com : Http://sourceforge.net/projects/nexusphp/ Affected Version: nexusphp. v1.5 Test Platform: linux + apache Nexusphp is BitTorrent private tracker scripts written in PHP  

  Title: RoundCube 0.3.1 SQL injection Author: Smith Falcon www.2cto.com : Http://roundcube.net/download Version: 0.3.1 Test Platform: Linux _ Timezone =   Is vulnerable to SQL Union Injection. "POST" data in Http://www.bkjia.com/roundcube/index.

                  Brief description: 265g.com. Game nest. 440W data causes a large amount of user information leakage due to a severe SQL vulnerability in a substation. Please fix it in time Detailed description: Http://my.265g.com/flash.php? Fgid =

  Recently, it was found that some servers occupy a very large amount of bandwidth. The traffic is usually as high as dozens or even hundreds of MB. It has been found that hackers have exploited user website vulnerabilities, uploaded the latest

Title: WHMCompleteSolution (cart. php) Local File DisclosureAuthor: Lagripe-Dz www.2cto.comDeveloper: WHMCS (WHMCompleteSolution) http://whmcs.com/Affected Versions: 3.x. x, 4.0.xTest Platform: linux + apache Defect file: cart. php--------- Code

By Huaxia small E Source code Introduction: kangcheng logistics company website system, we carefully investigated the logistics industry website, integrated with the regular sections of the logistics industry, capacity display, logistics and

  # Title: School website system 1.0 Vulnerabilities   # Time: 2011-10-30   # Team: 90sec Author: net' work www.2cto.com ######################################## ####################################   By: net' work Don't shoot bricks, Source code:

  FROM http://www.st999.cn/blog   In the past two days, I met an enterprise management system named wanbo several times. Today I downloaded it and looked at it. I found an injection vulnerability. What I was depressed about was that I had to do it

  Brief description: Sina Weibo design defects, resulting in know the password of the original account, even if the password can be changed the same as the permissions to post microblogging, ADD Attention and other operations, can refer to the http:

The Simple-Log Blog system is a blog system built in PHP + MySQL. If the install directory is not deleted, attackers can reinstall it.If the install Folder is not deleted, install/index. in php, users can submit remote mysql accounts and passwords,

SQL Injection: http://wap.uc.cn/index.php? Action = BrandPicApi & brand = nokia this site is the WAP main site of UC. It has many data projects (over 50 tables) and is successfully tested with Safe3 SQL injection tool. 1 explosion path: