Discuz漏洞

不再关注网络安全

2014-02-17 更新 2014-02-17

Discuz X1.5 X2.5 X3 用uc_key getshell

一、Discuz X1.5 X2.5 X3用uc_key来get webshell uc_key是UC客户端与服务端通信的通信密钥。因此使用uc_key来fetshell只能获取UCenter Cl...

2013-04-23 更新 2013-04-23

DZ交友插件漏洞jiaoyou.php?pid=1 有的注入需要登录，注入代码如下： ' or @' and(select 1 from(select count(*),concat((sele...

2012-12-10

/uc_server/control/admin/db.php /source/plugin/myrepeats/table/table_myrepeats.php /install/include/install_lang.php

2012-07-21 更新 2012-08-04

Dork : Powered by UCenter inurl:shop.php?ac=view Dork 2 : inurl:shop.php?ac=view&shopid= Vuln file : Shop.php ============...