Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 390
Eleanor CMS – Cross-Site Scripting / Multiple SQL Injections
source: https://www.securityfocus.com/bid/47164/info
UseBB 1.0.11 – ‘admin.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/47166/info
python-feedparser 5.0 – ‘/feedparser/feedparser.py’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47177/info
DoceboLms 4.0.4 – Multiple Persistent Cross-Site Scripting Vulnerabilities
DoceboLMS 4.0.4 Multiple Stored XSS Vulnerabilities
Yaws-Wiki 1.88-1 (Erlang) – Persistent / Reflective Cross-Site Scripting
Application: yaws-wiki
Encore ENPS-2012 – Cross-Site Scripting
GotGeek Labs
TP-Link TL-PS110U / TL-PS110P – Cross-Site Scripting
GotGeek Labs
Planex Mini-300PU & Mini100s – Cross-Site Scripting
GotGeek Labs
Planet FPS-1101 – Cross-Site Scripting
GotGeek Labs
PHP-Fusion – ‘article_id’ SQL Injection
source: https://www.securityfocus.com/bid/47128/info
MyBB 1.4/1.6 – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/47131/info
WordPress Plugin WPwizz AdWizz Plugin 1.0 – ‘link’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47141/info
Gazelle CMS 1.0 – Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/47157/info
Yaws-Wiki 1.88-1 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/47158/info
XOOPS 2.5 – ‘banners.php’ Multiple Local File Inclusions
source: https://www.securityfocus.com/bid/47174/info
Advanced Image Hosting 2.2 – ‘index.php’ SQL Injection
==========================================
RealNetworks RealGames StubbyUtil.ShellCtl.1 – ActiveX Control Multiple Remote Command Executions
RealNetworks RealGames StubbyUtil.ShellCtl.1 ActiveX Control
RealNetworks RealGames StubbyUtil.ProcessMgr.1 – ActiveX Control Multiple Remote Command Executions
RealNetworks RealGames StubbyUtil.ProcessMgr.1 ActiveX Control
Rash CMS – SQL Injection
==========================================
Banner Ad Management Script – SQL Injection
####################################################################
RealNetworks GameHouse ‘InstallerDlg.dll’ 2.6.0.445 ActiveX Control – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/47133/info
WordPress Plugin Placester 0.1 – ‘ajax_action’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47142/info
EasyPHP 5.3.5.0 – ‘index.php’ Arbitrary File Download
source: https://www.securityfocus.com/bid/47145/info
DoceboLms 4.0.4 – ‘index.php’ Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/47150/info
spidaNews 1.0 – ‘news.php?id’ SQL Injection
----------------------------Information------------------------------------------------
ilchClan 1.0.5 – ‘regist.php’ SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Anzeigenmarkt 2011 – ‘index.php’ SQL Injection
----------------------------Information------------------------------------------------
Word List Builder – Local Buffer Overflow (SEH)
# Exploit Title: Word List Builder Buffer Overflow Exploit(SEH)
Allomani E-Store 1.0 – Cross-Site Request Forgery (Add Admin) (2)
E-Store 1.0 XSRF Vulnerability (Add Admin)
Allomani News 1.0 – Cross-Site Request Forgery (Add Admin)
News 1.0 XSRF Vulnerability (Add Admin)
Allomani Movies Library 2.0 – Cross-Site Request Forgery (Add Admin)
Movies Library 2.0 XSRF Vulnerability (Add Admin)
Allomani Web Links 1.0 – Cross-Site Request Forgery (Add Admin)
Web Links 1.0 XSRF Vulnerability (Add Admin)
Allomani Audio and Video Library 2.7.0 – Cross-Site Request Forgery (Add Admin)
Audio & Video Library 2.7.0 XSRF Vulnerability (Add Admin)
Allomani Super MultiMedia Library 2.5.0 – Cross-Site Request Forgery (Add Admin)
Super Multimedia Library 2.5.0 XSRF Vulnerability (Add Admin)
IPComp – encapsulation Kernel Memory Corruption
// source: http://lists.grok.org.uk/pipermail/full-disclosure/2011-April/080031.html
InTerra Blog Machine 1.84 – Cross-Site Scripting
Vulnerability ID: HTB22931
Feng Office 1.7.3.3 – Cross-Site Request Forgery
Vulnerability ID: HTB22910
AWCM 2.x – ‘search.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47126/info
InTerra Blog Machine 1.84 – ‘subject’ HTML Injection
source: https://www.securityfocus.com/bid/47104/info
Collabtive 0.6.5 – Multiple Remote Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/47105/info
MoviePlay 4.82 – ‘.avi’ Buffer Overflow
source: https://www.securityfocus.com/bid/47111/info
Microsoft Windows Media Player 11.0.5721.5145 – ‘.avi’ Buffer Overflow
source: https://www.securityfocus.com/bid/47112/info