Coppermine Photo Gallery 1.5.10 – ‘help.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/45600/info
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 405
Coppermine Photo Gallery 1.5.10 – ‘searchnew.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/45600/info
pecio CMS 2.0.5 – Cross-Site Request Forgery (Add Admin)
#Title : pecio CMS v2.0.5 > tnt-r00t
OpenEMR 3.2.0 – SQL Injection / Cross-Site Scripting
# Exploit Title: OpenEMR v3.2.0 Multiple Vulnerabilities
Web@all 1.1 – Remote Admin Settings Change
===========================================
Pligg CMS 1.1.3 – ‘range’ SQL Injection
source: https://www.securityfocus.com/bid/45578/info
LiveZilla 3.2.0.2 – ‘Track’ Module ‘server.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/45586/info
Sigma Portal – ‘ShowObjectPicture.aspx’ Denial of Service
source: https://www.securityfocus.com/bid/45588/info
Mongoose 2.11 – ‘Content-Length’ HTTP Header Remote Denial of Service
source: https://www.securityfocus.com/bid/45602/info
Interact 2.4.1 – SQL Injection
# Title: Interact 2.4.1 SQL Injection
Kolibri 2.0 – ‘HEAD’ Remote Buffer Overflow RET (SEH)
#!/usr/bin/env python
CruxCMS 3.0 – Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/45594/info
Pligg CMS 1.1.2 – Blind SQL Injection / Cross-Site Scripting
Credit: Michael Brooks
openauto 1.6.3 – Multiple Vulnerabilities
Credit:Michael Brooks
Traidnt Up 3.0 – Cross-Site Request Forgery
#Title : TRAIDNT UP Version 3.0 - CSRF Add Admin
Joomla! Component com_idoblog – SQL Injection
# Exploit Title: joomla com_idoblog /SQL injection Vulnerability
Vacation Rental Script 4.0 – Cross-Site Request Forgery
# Exploit Title: Vacation Rental Script v4.0 XSRF VULNERABILTY
Social Engine 4.x (Music Plugin) – Arbitrary File Upload
###########################################################################
LoveCMS 1.6.2 Final – Multiple Local File Inclusions
LoveCMS 1.6.2 Final Multiple Local File Inclusion Vulnerabilities
iDevSpot iDevCart 1.10 – Multiple Local File Inclusions
) ) ) ( ( ( ( ( ) )
Joomla! Component com_xmovie 1.0 – Local File Inclusion
# Exploit Title: Joomla Component com_xmovie 1.0 Local File Inclusion Vulnerability
SquareCMS 0.3.1 – ‘post.php’ SQL Injection
SquareCMS 0.3.1 (post.php) Remote SQL Injection Vulnerability
HttpBlitz Web Server – Denial of Service
#!/usr/bin/python
CubeCart 3.0.6 – Cross-Site Request Forgery (Add Admin)
#Title : CubeCart 3.0.4 > tnt-r00t
IBM Tivoli Access Manager 6.1.1 for E-Business – Directory Traversal
source: https://www.securityfocus.com/bid/45582/info
D-Link WBR-1310 – Authentication Bypass
# Exploit Title: D-Link WBR-1310 Authentication Bypass Vulnerability
Built2Go PHP Shopping – SQL Injection
Script Name: Built2Go PHP Shopping ( version )
Ypninc Realty Classifieds – SQL Injection
Script Name: Ypninc Realty Classifieds
IPN Development Handler 2.0 – Multiple Vulnerabilities
IPN Development Handler v2.0 CSRF (Change Admin Account)
Joomla! Component com_ponygallery – Remote File Inclusion
Joomla Component com_ponygallery Multiple Remote File Include
Joomla! Component com_adsmanager – Remote File Inclusion
Joomla Component com_adsmanager Remote File Include
CubeCart 3.0.4 – SQL Injection
/////////////////(())//////////////
MyBB 1.6 – ‘search.php?keywords’ SQL Injection
source: https://www.securityfocus.com/bid/45565/info
MyBB 1.6 – ‘private.php?keywords’ SQL Injection
source: https://www.securityfocus.com/bid/45565/info
Social Share – ‘search’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/45566/info
Appweb Web Server 3.2.2-1 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/45568/info
Citrix Access Gateway – Command Injection
-----BEGIN PGP SIGNED MESSAGE-----
Mitel AWC – Command Execution
http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-14
WordPress Plugin Accept Signups 0.1 – Cross-Site Scripting
# Exploit Title: WORDPRESS Plugin Accept Signups PERSISTENT XSS
Microsoft WMITools – ActiveX Remote Command Execution
Exploit-DB Notes:
Joomla! Component Classified – SQL Injection
source: https://www.securityfocus.com/bid/45545/info
WordPress Plugin Accept Signups 0.1 – ’email’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/45548/info
S9Y Serendipity 1.5.4 – Arbitrary File Upload
In The Name Of GOD
Hycus CMS – Multiple Vulnerabilities
Vulnerability ID: HTB22737
Injader CMS – Multiple Vulnerabilities
Vulnerability ID: HTB22745
Habari Blog – Multiple Vulnerabilities
Vulnerability ID: HTB22732
html-edit CMS – Multiple Vulnerabilities
Vulnerability ID: HTB22734