WordPress Plugin Photoracer 1.0 – SQL Injection
# Exploit Title: WordPress Photoracer plugin prefix."photoracer where imgid=$imgid";
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 374
Sunway Force Control SCADA 6.1 SP3 – ‘httpsrv.exe’ Remote Overflow
# Sunway Force Control SCADA httpsvr.exe Exploit
Jcow Social Networking Script 4.2 < 5.2 - Arbitrary Code Execution (Metasploit)
# Exploit Title: Jcow CMS 4.x:4.2 [ 'Aung Khant ' ],
Mambo 4.6.5 – ‘index.php’ Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/49315/info
WordPress Plugin SendIt 1.5.9 – Blind SQL Injection
# Exploit Title: WordPress SendIt plugin get_var("SELECT COUNT(*) FROM $table_email where email ='$_POST[email_add]' ...
Zazavi 1.2.1 – ‘/FileManager/Controller.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/49309/info
Simple Machines Forum (SMF) 1.1.14/2.0 – ‘[img]’ BBCode Tag Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/49311/info
Help Desk Software 1.1g – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Help Request System 1.1g XSRF (add admin)
F-Secure (Multiple Products) – ActiveX HeapSpray Overwrite (SEH)
# Exploit Title: F-Secure Multiple Products ActiveX Remote SEH Overwrite Vulnerability(Heap Spray)
CommodityRentals Real Estate Script – ‘txtsearch’ HTML Injection
source: https://www.securityfocus.com/bid/49296/info
Tourismscripts Hotel Portal – ‘hotel_city’ HTML Injection
source: https://www.securityfocus.com/bid/49297/info
VicBlog – ‘tag’ SQL Injection
source: https://www.securityfocus.com/bid/49304/info
ManageEngine ServiceDesk Plus 8.0 – Multiple Persistent Cross-Site Scripting Vulnerabilities
ManageEngine ServiceDesk Plus 8.0 Multiple Stored XSS Vulnerabilities
Open Classifieds 1.7.2 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/49292/info
WordPress Plugin MM Duplicate 1.2 – SQL Injection
# Exploit Title: WordPress MM Duplicate plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)
Web Solutions Wcs2u – SQL Injection
[~]Title : Web Solutions Wcs2u SQL Injection Vulnerability
Bonza Digital Cart Script – SQL Injection
# Exploit Title: Bonzo Cart (E-Commerce System) SQL Injection
DV Cart Shopping Cart software – SQL Injection
# Exploit Title: DV Cart (E-Commerce System) SQL Injection
Redlab CMS – Multiple SQL Injections
[~]Title : Site by Redlab Multiple Vulnerabilities
Adobe Photoshop CS5 – ‘.gif’ Remote Code Execution
#####################################################################################
Pandora FMS 3.x – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/49261/info
TotalShopUK 1.7.2 – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/49263/info
Concrete 5.4.1 1 – ‘rcID’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/49276/info
EasySiteEdit – Remote File Inclusion
# Exploit Title: EasySiteEdit remote file include
OneFileCMS 1.1.1 – Multiple Vulnerabilities
# Exploit Title: OneFileCMS v.1.1.1 Multiple Remote Vulnerabilities
OneFileCMS 1.1.1 – ‘onefilecms.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/49257/info
Axis Commerce (E-Commerce System) – Persistent Cross-Site Scripting
# Exploit Title: Axis Commerce (E-Commerce System) Stored XSS
WordPress Plugin UnGallery 1.5.8 – Local File Disclosure
# Exploit Title: WordPress UnGallery plugin
Freefloat FTP Server – ‘ALLO’ Remote Buffer Overflow
source: https://www.securityfocus.com/bid/49265/info
Solar FTP Server 2.1.2 – PASV Buffer Overflow (Metasploit)
# Exploit Title: Solarftp v2.1.2 PASV buffer overflow
network tracker .95 – Persistent Cross-Site Scripting
# Exploit Title: Network Tracker .95 Stored XSS
PHPMyRealty 1.0.7 – SQL Injection
|=========================================================================================|
Apache – Remote Memory Exhaustion (Denial of Service)
#Apache httpd Remote Denial of Service (memory exhaustion)
PHP < 5.3.7 - Multiple Null Pointer Dereference Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/49249/info
Xlight FTP Server 3.7 – Remote Buffer Overflow
source: https://www.securityfocus.com/bid/49255/info
WordPress Plugin DS FAQ 1.3.2 – SQL Injection
# Exploit Title: WordPress WP DS FAQ plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)
WordPress Plugin Forum 1.7.8 – SQL Injection
# Exploit Title: WordPress WP Forum plugin get_row("SELECT text, author_id, date FROM $table_posts WHERE id = $id");
Elgg 1.7.10 – Multiple Vulnerabilities
# Exploit Title: Elgg 1.7.10
WordPress Plugin Ajax Gallery 3.0 – SQL Injection
# Exploit Title: WordPress Ajax Gallery plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)
WordPress Plugin Global Content Blocks 1.2 – SQL Injection
# Exploit Title: WordPress Global Content Blocks plugin 0) { // intval("1a") => 1 :)
WordPress Plugin Allow PHP in Posts and Pages 2.0.0.RC1 – SQL Injection
# Exploit Title: WordPress Allow PHP in Posts and Pages plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)
WordPress Plugin Menu Creator 1.1.7 – SQL Injection
# Exploit Title: WordPress Menu Creator plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)
Adobe ColdFusion – ‘probe.cfm’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/49220/info
Mantis Bug Tracker 1.1.8 – Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/49235/info