Shulou(Shulou.com)06/01 Report--

1. Injection vulnerability

1.1 SQL injection vulnerability

1.2 XSS vulnerabilities

1.3 Command injection vulnerability

1.4 HTTP response header injection vulnerability

1.5 Jump vulnerability

1.6 XML injection vulnerability

two。 Information disclosure loophole

2.1 PHPInfo () Information Disclosure vulnerability

2.2 the test page leaked in the public network.

2.3 backup files leaked in the public network

2.4 version management tool file information disclosure vulnerability

2.5 HTTP authentication leak vulnerability

2.6 manage background leak vulnerabilities

2.7 leaking employee email loopholes and extension numbers

2.8 error details leak vulnerability

3. Request forgery vulnerability

3.1 CSRF vulnerabilities

3.2 JSON-hijackin vulnerabilities

4. Access control vulnerability

4.1 File upload vulnerability

4.2 improperly configured crossdomain.xml vulnerability

4.3 vulnerability in improper configuration of flash tags

4.4 vulnerability in improper configuration of embed tags

4.5 concurrency vulnerabilities

4.6 Cookie security vulnerabilities

4.7 Frame-proxy*** vulnerabilities

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.