Cloud Security

By Maksymilian Arciemowicz www.2cto.com http://cxsecurity.com/ CVE:CVE-2011-4153 (zend_strndup) Organization connection:Http://cxsecurity.com/research/103  [--- 1. Multiple NULL Pointer Dereference with zend_strndup ()[CVE-2011-4153] ---]As we can

Title: EasyPage SQL Injection VulnerabilityAuthor: Red Security TEAMDeveloper: http://karait.com/www.2cto.comTest Platform: Windows Server 2008 (Microsoft-IIS/7.5)Test method:# Http://www.bkjia.com/default. aspx? Page = Document & app = Documents &

The term DEDECMS is a special one. When I first started my website, I used DEDECMS, which I used since I switched to PHP, it is only useless today. It can be said that it has created many small and medium webmasters, and is the gospel of Small and

At the invitation of the administrator today, the Administrator first opened the website to check whether there was a vulnerability on the official website. After reading the website interface, the page is still very good, that is, the loaded

By: a real gray wolf man   First come addressHttp://extsjz.my012.com: 8008 First, Let's explain what the legendary 7 Verification login method is. First of all, I have the account password for this company's ERP system, but here only the account

Brief description: Android uses sqlite as a database. For database queries, if the developer constructs an SQL statement using string connection, SQL injection is generated.  Detailed description:  Android implements an sqlite operation class

Brief description: The SQL injection vulnerability exists on the DNT official website, Powered by Discuz! NT 3.9.913 BetaInjection address:Http://nt.discuz.net/space/manage/ajax.aspx? AjaxTemplate =.../../admin/usercontrols/ajaxtopicinfo. ascx &

Many people may have encountered such a web. config connection string.     No SQL id or pwd Searched for information In this way, the user name and password are not required to connect to the SQL Server, and the windows user is used for verification

Title: 4PSA cms SQL Injection VulnerabilitiesAuthor: # BHG Security Center www.2cto.com Nitrojen90Development Program Official Website: http://www.4psa.com/Affected Version: Latest VersionRisk Level: highTest Platform: GNU/Linux-WindowsExample: Http:

Brief description: The eWebEditor editor does not strictly filter the files and directly uploads the files to the shell. It is renamed as jpg. However, the backend supports database backup. You can directly create a. asp folder and use the iis

1. Storage Type xss caused by insufficient FilteringDetailed description:  Vulnerability proof: arbitrary tags and characters can be inserted hereSolution: filter out tags <> and remove single double quotation marks.2.Blog is a very old program. You

Multiple SQL injection vulnerabilities in the IT168 substation, SQL Injection also exists in the background login, database structure, background management information leakage, host-related information leakage, resulting in information leakage. The

Similar to the SQL Injection principle in the wap module, variables are retrieved from $ _ SERVER ['query _ string'], which leads to bypassing filtering. In the in_result function of the/interface/search. php file: function in_result() { .

The wscript. shell and shell. application components are used to execute the program. Therefore, they are the least secure component. Currently, many asp Trojans use wscript. shell to execute commands, ignoring shell. application. We can first

If order by injection exists on a large scale in the background, search for $ _ REQUEST ['sort _ by'] or $ _ REQUEST ['sort _ order'] involving more than 30 files... My days. More than 30 !! Do ec developers all copy code ?? Let's talk about the

 1. Client verification Bypass It's easy. Just use webscarab or burp to modify the suffix. 2. Server verification bypass-Content-type Detection If the server detects the file type as the Content-type value, it is also very easy to modify the Content-

Espcms V5.6.13.04.22 an injection vulnerability exists in an official UTF8 file, allowing you to obtain the Administrator account and password. Vulnerability file: \ interface \ membermain. php $ Zipcode = trim ($ this-> fun-> accept ('zipcode', 'P'

GET can send Weibo !!!!! Weibo still inserts csrf images through packet capture !!! No need to click to view Weibo, it will automatically become a worm !!!!!Detailed Description: The vulnerability exists in the micro-activity forwarding area. It was

In the results of views. there is a problem with the asp file. If there is an injection, we can see that: hw_id = Request ("hw_id") hw_id does not have any filtering, or request requests, it will be cool at first glance, the old vulnerabilities in

When you log on to the student management system, if the user name you add does not match the data in your database, a form will pop up to tell you that you do not have this user; however, if you enter a number or letter in the user name plus a pair