Cloud Security

  Title: WordPress WP Glossary plugin SQL Injection Vulnerability Author: longrifle0x www.2cto.com Program: Wordpress : Http://wordpress.org/extend/plugins/wp-glossary/ Test Tool: SQLMAP ######################################## ##############

    /* -------------------------------------------------------------------- AidiCMS v3.55 (ajax_create_folder.php) Remote Code Execution Exploit -------------------------------------------------------------------- Author: Egidio Romano aka EgiX www.

  // APP/Controller/Admincp. php Function actionliulan () { // Administrator Information $ Nowindex = $ _ GET ['page']? $ _ GET ['page']: 1; // Obtain the data starting from the nth Query $ Page = $ _ GET ['page']? ($ _ GET ['page']-1) * 6: 0; //

  I thought it was an ASCII code encrypted. 114,133,114,112,130,129,114, 45,127,114,126,130,114,128,129, 75. All digits minus 13, and then decimal decryption The Code obtained after running is   From WebShell's Blog

  Brief description: This is an old vulnerability that was previously reported. After consulting wooyun, I replied that I could submit the vulnerability. So I submitted the vulnerability and wanted to earn Rank!   Vulnerability: QQ mail does not

  Brief description: allows users to top or bottom a video without restrictions. Detailed Description: unlimited top or step on a video Proof of vulnerability: http://v.youku.com/v_show/id_XMzE1ODYzOTEy.html First, check the current top and top

  Registered users, Go to the member center and click the "member information" page to modify the information. Attackers can perform brute-force data operations in any form. Violence administrator ID: L', Name = Cstr (DLookUp ('memberid', 'admin'

  Upload, and then call the CMD you uploaded to execute the command ......   I wanted to give a graphic tutorial, but it was too simple to explain it clearly.     1. Open ASP webmaster assistant 6.0 and click the command prompt to display "no

  Brief description: stored XSS, which can easily cause worms and infections. Detailed Description: PPS Weibo The stored XSS vulnerability can cause worms to spread and cause serious harm. Demo address: Http://y.pps. TV /154193789

  ------------------------------------------ # Xoops 2.5.4 Blind SQL Injection ------------------------------------------ : Http://sourceforge.net/projects/xoops/ Author: blkhtc0rp www.2cto.com blkhtc0rp [at] yahoo [dot] com Test Platform:

  Title: ====== AppRain CMF v0.1.5-Multiple Web Vulnerabilities Overview: ================== AppRain is one of the first officially released Opensource Content Management Framework (CMF ). CMF is a new web engineering concept where CMS (Content

Recently encountered ColdFusion Environment At the beginning, the suffix of various egresses was in cfm format. Basically, I have never touched or understood this concept. At first, I thought I 'd go to the source code to find database connect

Title: Posse Sports SQL Injection VulnerabilitiyPrepared by: H4ckCity Security Team farbodmahini www.2cto.com WwW. H4ckCity. OrgProgram address: www.possesports.comAll versions affectedTest Platform: GNU/Linux Ubuntu-Windows Server-win7##############

Member/getpassword. php and admin/getpassword. php files If ($ p) {$ array = explode ('. ', base64_decode ($ p); $ SQL = "SELECT * FROM $ met_admin_table WHERE admin_id = '". $ array [0]. "'"; $ sqlarray = $ db-> get_one ($ SQL );  The

Several ecshop vulnerabilities have been discovered before, but the passwords cannot be cracked, even though the background is known. Next, let's share my experience. I am a cainiao master !!User Password admin: d03a7617433c2826976062fec%a434 ecshop

Apply a sentence from someone: You can change the homepage.1. First, open the website and check that the asp site, without him, still miss the first love Scan Edit Editor, roar... You know 2. You don't have to look at the background database

I. CSRFExample: a website that is under attack in the login status sends a request to the Security site. Solution: Use @ Html. AntiForgeryToken () in the view and add the [ValidateAntiForgeryToken] feature to the Action. When The request is sent

View user business cards Url: http://weixin.qq.com/cgi-bin/showcard? T = weixin_card & muin = your QQ number & fuin = Your/your friend's QQ number # a logon prompt will be prompted when accessing the QQ client of a higher version. You can directly

Exp: URL: Email:  Replace localhost with the domain name and email address of the target site. Enter your email address and click Submit. The teenager will go to the email address you just filled in and click the link to set the account

There are multiple CSRF, which can be modified in many ways.1. Modify the shipping address. When there is only one shipping address in the account, many people do not pay attention to the shipping address and pay directly xss. ajax ('