Ultra Marketing Enterprises CMS and Cart – Multiple SQL Injections
source: https://www.securityfocus.com/bid/47421/info
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 388
WordPress Plugin WP-StarsRateBox 1.1 – ‘j’ SQL Injection
source: https://www.securityfocus.com/bid/47423/info
Dalbum 1.43 – ‘editini.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47427/info
ChatLakTurk PHP Botlu Video – ‘ara.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47428/info
Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC – ‘/jde/E1Menu.maf?jdeowpBackButtonProtect’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47479/info
Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC – ‘/jde/E1Menu_Menu.mafService?e1.namespace’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47479/info
Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC – ‘/jde/E1Menu_OCL.mafService?e1.namespace’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47479/info
Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC – ‘/jde/MafletClose.mafService?RENDER_MAFLET’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47479/info
Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC – ‘/jde/JASMafletMafBrowserClose.mafService?jdemafjasLinkTarget’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47479/info
webSPELL 4.2.2a – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47500/info
Viola DVR VIO-4/1000 – Multiple Directory Traversal Vulnerabilities
source: https://www.securityfocus.com/bid/47509/info
Wireshark 1.4.1 < 1.4.4 - Local Overflow (SEH)
#!/usr/bin/env python
Joomla! Component com_phocadownload – Local File Inclusion
source: https://www.securityfocus.com/bid/47399/info
XOOPS 2.5 – ‘imagemanager.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/47418/info
FiSH-irssi 0.99 – Evil ircd Buffer Overflow
# FiSH IRC encryption evil ircd PoC exploit.
osPHPSite – SQL Injection
# Exploit Title: osPHPSite SQL Injection Vulnerability
SoftXMLCMS – Arbitrary File Upload
###########################################################################
Blue Hat – Sensitive Database Disclosure / SQL Injection
#(+)Exploit Title: Powered by Blue Hat Sensitive Database Disclosure Vulnerability
Bedder CMS – Blind SQL Injection
#(+)Exploit Title: Bedder CMS Blind SQL Injection Vulnerability
Shape Web Solutions CMS – SQL Injection
#####################################################################################
4Images 1.7.9 – Multiple Remote File Inclusions / SQL Injections
source: https://www.securityfocus.com/bid/47394/info
ChillyCMS 1.2.1 – Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/47395/info
cPassMan 1.82 – Arbitrary File Download
Sense of Security - Security Advisory - SOS-11-004
TextAds 2.08 Script – Cross-Site Scripting
===========================================================================
SQL-Ledger 2.8.33 – (Authenticated) Local File Inclusion / Edit
# Exploit Title: SQL-Ledger
Agahi Advertisement CMS 4.0 – ‘view_ad.php’ SQL Injection
source: https://www.securityfocus.com/bid/47371/info
RunCMS Module Partners – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/47388/info
PhoenixCMS 1.7 – Local File Inclusion / SQL Injection
source: https://www.securityfocus.com/bid/47389/info
Technicolor THOMSON TG585v7 Wireless Router – ‘url’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47390/info
NEdit 5.5 – Format String
# Exploit Title: Format string vulnerability in Nedit
EZ-Shop 1.02 – Lateral SQL Injection
[Security Advisory Details: 14/04/2011]
SimplyPlay 66 – ‘.pls’ Local Buffer Overflow
#!/usr/bin/perl
EC Software Help & Manual 5.5.1 Build 1296 – ‘ijl15.dll’ DLL Loading Arbitrary Code Execution
// source: https://www.securityfocus.com/bid/47349/info
PhpAlbum.net 0.4.1-14_fix06 – ‘var3’ Remote Command Execution
source: https://www.securityfocus.com/bid/47369/info
Qianbo Enterprise Web Site Management System – ‘Keyword’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47375/info
TinyBB 1.4 – Blind SQL Injection / Full Path Disclosure
# Exploit Title : TinyBB 1.4 Sql Injection + Path Disclosure
PlaylistMaker 1.5 – ‘.txt’ Local Buffer Overflow
#!/usr/bin/python
TOTVS ERP Microsiga Protheus 8/10 – Memory Corruption (Denial of Service)
source: https://www.securityfocus.com/bid/47342/info
Microsoft HTML Help 6.1 – Local Stack Overflow
Source: http://aluigi.org/adv/chm_1-adv.txt
Cisco Security Agent Management Console – ‘st_upload’ Remote Code Execution
#!/usr/bin/env python
OpenText FirstClass Client 11.005 – Code Execution
# Exploit Title: OpenText FirstClass Client (Delayed) Code Executiion
Wordtrainer 3.0 – ‘.ord’ Local Buffer Overflow
#!/usr/bin/python
Microsoft Host Integration Server 8.5.4224.0 – Denial of Service
Source: http://aluigi.org/adv/snabase_1-adv.txt
Microsoft Reader 2.1.1.3143 – Integer Overflow (1)
Source: http://aluigi.org/adv/msreader_1-adv.txt
Microsoft Reader 2.1.1.3143 – Heap Overflow
Source: http://aluigi.org/adv/msreader_2-adv.txt
Microsoft Reader 2.1.1.3143 – Integer Overflow (2)
Source: http://aluigi.org/adv/msreader_3-adv.txt
Microsoft Reader 2.1.1.3143 – Array Overflow
Source: http://aluigi.org/adv/msreader_4-adv.txt
Microsoft Reader 2.1.1.3143 – Null Byte Write
#######################################################################
Microsoft Excel – Remote Buffer Overflow
source: https://www.securityfocus.com/bid/47245/info