بررسی سیستم های مدیریت محتوا

[devil's dance]

سلام
می خواستم یه برنامه ای راه بندازم البته اگه پایه باشین که بر اساس اون تمامی CMS های خارجی و ایرانی رو از لحاظ امنیتی بررسی کنیم و آسیب پذیری هاشو اینجا مطرح کنیم.
هر کی پایس بسم ا...
8-x

[devil's dance]

سلام
می خواستم یه برنامه ای راه بندازم البته اگه پایه باشین که بر اساس اون تمامی CMS های خارجی و ایرانی رو از لحاظ امنیتی بررسی کنیم و آسیب پذیری هاشو اینجا مطرح کنیم.
هر کی پایس بسم ا...
8-x

خودمم اول شروع می کنم که نگین نمیشه.
اسم سیستمش Eshopbuilde
اینم آسیب پذیریاشه:
Injection "/home-f.asp","/opinions-f.asp" in "sitebid" parameter.

[Only registered and activated users can see links]@@version
[Only registered and activated users can see links]
[Only registered and activated users can see links]

Injection "/more-f.asp" in "sitebid" ,"id","secText","client-ip" and "G_id" parameters.

[Only registered and activated users can see links]@@version
[Only registered and activated users can see links]
[Only registered and activated users can see links]
[Only registered and activated users can see links]"

other parameters("id","secText","client-ip","G_id") is similar to "sitebid" parameter.
Injection "/selectintro.asp" in "sitebid" ,"id","ma_id","mi_id","secText","client-ip" and "G_id" parameters.

[Only registered and activated users can see links]@@version
[Only registered and activated users can see links]
[Only registered and activated users can see links]

other parameters("id","ma_id","mi_id","secText","client-ip" and "G_id") is similar to "sitebid" parameter.

Injection "/advcount.asp" in "sitebid","secText","adv_code" and "client-ip" parameters.

[Only registered and activated users can see links]@@version
[Only registered and activated users can see links]
[Only registered and activated users can see links]

other parameters("secText" and "client-ip") is similar to "sitebid" parameter.

Injection "/advview.asp" in "sitebid","secText","Grp_Code","_method" and "client-ip" parameters.

[Only registered and activated users can see links]@@version
[Only registered and activated users can see links]
[Only registered and activated users can see links]

other parameters("secText","client-ip","Grp_Code","_method" and "adv_code") is similar to "sitebid" parameter.

Injection "/dis_new-f.asp" in "sitebid","secText","newsId" and "client-ip" parameters.

[Only registered and activated users can see links]@@version
[Only registered and activated users can see links]
[Only registered and activated users can see links]

other parameters("secText","newsId" and "client-ip") is similar to "sitebid" parameter.
دیگه خودتون ادامه بدین در ضمن به جای همه این Inject هایی که من دادم میتونین ...
دیگه خودتون بگیرین قضیه رو...
به امید ادامه همکاری