Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 341

Vanilla FirstLastNames 1.3.2 Plugin – Persistent Cross-Site Scripting

# Title: Vanilla FirstLastNames 1.3.2 Plugin Persistant XSS Vulnerability

2012-05-21 Henry Hoggard webapps

Supernews 2.6.1 – SQL Injection

2012-05-21 WhiteCollarGroup webapps

Acuity CMS 2.6.2 – ‘/admin/file_manager/file_upload_submit.asp’ Multiple Arbitrary File Upload / Code Executions

source: https://www.securityfocus.com/bid/53616/info

2012-05-21 Aung Khant webapps

Acuity CMS 2.6.2 – ‘/admin/file_manager/browse.asp?path’ Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/53616/info

2012-05-21 Aung Khant webapps

Yandex.Server 2010 9.0 – ‘text’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53622/info

2012-05-21 MustLive webapps

PHPhq.Net phAlbum 1.5.1 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53648/info

2012-05-21 Eyup CELIK webapps

Concrete CMS < 5.5.21 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/53640/info

2012-05-20 AkaStep webapps

Concrete5 CMS FlashUploader – Arbitrary ‘.SWF’ File Upload

source: https://www.securityfocus.com/bid/53640/info

2012-05-20 AkaStep webapps

AZ Photo Album – Cross-Site Scripting / Arbitrary File Upload

source: https://www.securityfocus.com/bid/53641/info

2012-05-20 Eyup CELIK webapps

Squiggle 1.7 – SVG Browser Java Code Execution (Metasploit)

##

2012-05-19 Metasploit remote

Oracle Weblogic Apache Connector – POST Buffer Overflow (Metasploit)

##

2012-05-19 Metasploit remote

Active Collab ‘chat module’ < 2.3.8 - Remote PHP Code Injection (Metasploit)

##

2012-05-19 Metasploit remote

PHP Address Book 7.0.0 – Multiple Vulnerabilities

##################################################################################

2012-05-19 Stefan Schurtz webapps

FreeNAC 3.02 – SQL Injection / Cross-Site Scripting

FreeNAC version 3.02 SQL Injection and XSS Vulnerabilties

2012-05-19 blake webapps

Microsoft Windows XP – Keyboard Layouts Pool Corruption (PoC) (MS12-034)

===========

2012-05-18 Cr4sh dos

Vanilla Forums LatestComment 1.1 Plugin – Persistent Cross-Site Scripting

# Title: Vanilla LatestComment 1.1 Plugin Persistant XSS Vulnerability

2012-05-18 Henry Hoggard webapps

SkinCrafter ActiveX Control 3.0 – Local Buffer Overflow

# Software : SkinCrafter from NMSoft Technologies

2012-05-17 saurabh sharma local

ArtiPHP 5.5.0 Neo – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53586/info

2012-05-17 Gjoko Krstic webapps

Atlassian Tempo 6.4.3 / JIRA 5.0.0 / Gliffy 3.7.0 – XML Parsing Denial of Service

source: https://www.securityfocus.com/bid/53595/info

2012-05-17 anonymous dos

PHP Address Book 7.0 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53598/info

2012-05-17 Stefan Schurtz webapps

Atlassian JIRA FishEye 2.5.7 / Crucible 2.5.7 Plugins – XML Parsing Security

source: https://www.securityfocus.com/bid/53603/info

2012-05-17 anonymous webapps

Axous 1.1.1 – Cross-Site Request Forgery / Persistent Cross-Site Scripting

+-----------------------------------------------------------------------------------------------------------+

2012-05-16 Ivano Binetti webapps

Artiphp CMS 5.5.0 – Database Backup Disclosure

2012-05-16 LiquidWorm webapps

Java – Trigerring Java Code from a .SVG Image

SVG is a XML-based file format for static or animated images. Some SVG

2012-05-16 Nicolas Gregoire dos

LongTail JW Player – ‘debug’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53554/info

2012-05-16 gainover webapps

SiliSoftware PHPThumb() 1.7.11-201108081537 – ‘/demo/PHPThumb.demo.showpic.php?title’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53572/info

2012-05-16 Gjoko Krstic webapps

SiliSoftware PHPThumb() 1.7.11-201108081537 – ‘/demo/PHPThumb.demo.random.php?dir’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53572/info

2012-05-16 Gjoko Krstic webapps

backupDB() 1.2.7a – ‘onlyDB’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53575/info

2012-05-16 LiquidWorm webapps

Unijimpe Captcha – ‘captchademo.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53585/info

2012-05-16 Daniel Godoy webapps

MultiMedia Builder 4.9.8 – ‘.mef’ Denial of Service

Multimedia Builder 4.9.8 Malicious mef File Denial of service

2012-05-15 Ahmed Elhady Mohamed dos

b2ePms 1.0 – Authentication Bypass

#################################################

2012-05-15 Jean Pascal Pereira webapps