SLTechnology News&Howtos › Network Security ›

Web vulnerability Detection and repair Scheme

Shulou Source: shulou.com Published: 2022-06-01 04:01:15 10月05日 Update

1. Injection vulnerability

1.1 SQL injection vulnerability

1.2 XSS vulnerabilities

1.3 Command injection vulnerability

1.4 HTTP response header injection vulnerability

1.5 Jump vulnerability

1.6 XML injection vulnerability

two。 Information disclosure loophole

2.1 PHPInfo () Information Disclosure vulnerability

2.2 the test page leaked in the public network.

2.3 backup files leaked in the public network

2.4 version management tool file information disclosure vulnerability

2.5 HTTP authentication leak vulnerability

2.6 manage background leak vulnerabilities

2.7 leaking employee email loopholes and extension numbers

2.8 error details leak vulnerability

3. Request forgery vulnerability

3.1 CSRF vulnerabilities

3.2 JSON-hijackin vulnerabilities

4. Access control vulnerability

4.1 File upload vulnerability

4.2 improperly configured crossdomain.xml vulnerability

4.3 vulnerability in improper configuration of flash tags

4.4 vulnerability in improper configuration of embed tags

4.5 concurrency vulnerabilities

4.6 Cookie security vulnerabilities

4.7 Frame-proxy*** vulnerabilities