Exploits

mailtraq 2.17.3.3150 – Persistent Cross-Site Scripting

#!/usr/bin/python

PHP IRC Bot pbot – ‘eval()’ Remote Code Execution (Metasploit)

##

Plixer Scrutinizer NetFlow and sFlow Analyzer 9 – Default MySQL Credential (Metasploit)

##

ManageEngine ServiceDesk Plus 8.1 – Persistent Cross-Site Scripting

#!/usr/bin/python

Alt-N MDaemon free 12.5.4 – Persistent Cross-Site Scripting

#!/usr/bin/python

WordPress Plugin mini mail Dashboard widget 1.42 – Persistent Cross-Site Scripting

#!/usr/bin/python

OTRS Open Technology Real Services 3.1.4 – Persistent Cross-Site Scripting

#!/usr/bin/python

WordPress Plugin postie 1.4.3 – Persistent Cross-Site Scripting

#!/usr/bin/python

WordPress Plugin simplemail 1.0.6 – Persistent Cross-Site Scripting

#!/usr/bin/python

smartermail free 9.2 – Persistent Cross-Site Scripting

#!/usr/bin/python

T-dah Webmail Client 3.2.0-2.3 – Persistent Cross-Site Scripting

#!/usr/bin/python

Surgemail 6.0a4 – Persistent Cross-Site Scripting

#!/usr/bin/python

WordPress Plugin ThreeWP Email Reflector 1.13 – Persistent Cross-Site Scripting

#!/usr/bin/python

winwebmail server 3.8.1.6 – Persistent Cross-Site Scripting

#!/usr/bin/python

xeams email server 4.4 build 5720 – Persistent Cross-Site Scripting

#!/usr/bin/python

IBM Proventia Network Mail Security System 2.5 – POST File Read

#!/usr/bin/python

ConcourseSuite – Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/54881/info

phpList 2.10.18 – ‘unconfirmed’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54887/info

AraDown – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/54891/info

phpList 2.10.18 – ‘index.php’ SQL Injection

source: https://www.securityfocus.com/bid/54912/info

PBBoard – ‘index.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/54916/info

PBBoard – ‘member_id’ Validation Password Manipulation

source: https://www.securityfocus.com/bid/54916/info

PBBoard – ‘admin.php?xml_name’ Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/54916/info

dirLIST 0.3.0 – Local File Inclusion

source: https://www.securityfocus.com/bid/54933/info

Oracle Business Transaction Management Server 12.1.0.2.7 – FlashTunnelService WriteToFile Message Remote Code Execution

Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService

Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService – Remote File Deletion

Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService

Zoho BugTracker – Multiple Persistent Cross-Site Scripting Vulnerabilities

Zoho BugTracker Multiple Stored XSS Vulnerabilities

Alligra Calligra – Heap Buffer Overflow

source: https://www.securityfocus.com/bid/54816/info

Dir2web – ‘/system/src/dispatcher.php?oid’ SQL Injection

source: https://www.securityfocus.com/bid/54845/info

TCExam 11.2.x – ‘/admin/code/tce_edit_answer.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/54861/info

TCExam 11.2.x – ‘/admin/code/tce_edit_question.php?subject_module_id’ SQL Injection

source: https://www.securityfocus.com/bid/54861/info

PBBoard – Authentication Bypass

source: https://www.securityfocus.com/bid/54862/info

Getsimple CMS 3.1.2 – ‘path’ Local File Inclusion

source: https://www.securityfocus.com/bid/54866/info

AOL Products downloadUpdater2 Plugin – ‘SRC’ Remote Code Execution

AOL Products downloadUpdater2 Plugin SRC Parameter Remote Code Execution

CoolPlayer+ Portable 2.19.2 – Local Buffer Overflow (ASLR Bypass)

#!/usr/bin/ruby

Oracle AutoVue – ActiveX Control SetMarkupMode Buffer Overflow (Metasploit)

##

Worksforweb iAuto – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/54812/info

Joomla! Component com_photo – Multiple SQL Injections

source: https://www.securityfocus.com/bid/54814/info

YT-Videos Script – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/54859/info

Islamnt Islam Forum Script 1.2 – Blind SQL Injection

CoolPlayer Portable 2.19.2 – Local Buffer Overflow (ASLR Bypass) (2)

# Buffer overflow that bypasses ASLR by using a non-aslr module

Tickets CAD 2.20G – Multiple Vulnerabilities

# Exploit Title: Tickets CAD 2.20G Multiple Vulnerabilities

WordPress Plugin Effective Lead Management 3.0.0 – Persistent Cross-Site Scripting

# Exploit Title: WP Lead Management v3.0.0 Persistent XSS

PolarisCMS – ‘WebForm_OnSubmit()’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54817/info

Mibew Messenger 1.6.4 – ‘threadid’ SQL Injection

source: https://www.securityfocus.com/bid/54857/info

Open Constructor – ‘/users/users.php?keyword’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54822/info

Open Constructor – ‘/data/file/edit.php?result’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54822/info

Open Constructor – ‘confirm.php?q’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54822/info

Wiki Web Help – ‘configpath’ Remote File Inclusion

source: https://www.securityfocus.com/bid/55387/info

Cisco Linksys PlayerPT – ActiveX Control SetSource sURL argument Buffer Overflow (Metasploit)

##