Exploits

Getsimple CMS 2.01 – ‘changedata.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43593/info

AtomatiCMS – Upload Arbitrary File

'''

JE CMS 1.0.0 – Authentication Bypass

'''

e107 0.7.23 – SQL Injection

Vulnerability ID: HTB22604

Aleza Portal 1.6 – Insecure SQL Injection / Cookie Handling

Aleza Portal v1.6 - Insecure (SQLi) Cookie Handling

Achievo 1.4.3 – Multiple Authorisation Vulnerabilities

Advisory Name: Multiple Authorization Flaws in Achievo 1.4.3

Achievo 1.4.3 – Cross-Site Request Forgery

Advisory Name: Cross Site Request Forgery in Achievo 1.4.3

Micro CMS 1.0 b1 – Persistent Cross-Site Scripting

##############################################################################

Microsoft DNS RPC Service – ‘extractQuotedChar()’ Remote Overflow ‘SMB’ (MS07-029) (Metasploit)

##

Microsoft Internet Explorer – ‘Winhlp32.exe’ MsgBox Code Execution (MS10-023) (Metasploit)

##

Micro CMS 1.0 – ‘name’ HTML Injection (1)

source: https://www.securityfocus.com/bid/43556/info

PHPMyFAQ 2.6.x – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43560/info

pbboard 2.1.1 – Multiple Vulnerabilities

==================================================

Microsoft Internet Explorer – MSHTML Findtext Processing

Abysssec

ndCMS – SQL Injection

'''

Entrans – SQL Injection

# Exploit Title: Entrans SQLi vulnerablility

Allpc 2.5 osCommerce – SQL Injection / Cross-Site Scripting

[+]Title Allpc 2.5 osCommerce SQL-i/XSS Multiple Vulnerabilities

Barracuda Networks Spam & Virus Firewall 4.1.1.021 – Remote Configuration Retrieval

#!/bin/bash

Fox Audio Player 0.8.0 – ‘.m3u’ Denial of Service

#

iworkstation 9.3.2.1.4 – Local Overflow (SEH)

#iworkstation Version 9.3.2.1.4 seh exploit

Digital Music Pad 8.2.3.3.4 – Local Overflow (SEH) (Metasploit)

#Digital Music Pad Version 8.2.3.3.4 SEH overflow Metasploit Module

Car Portal 2.0 – Blind SQL Injection

[+]Title Car Portal v2.0 BLIND SQL Injection Vulnerability

Java – RMIConnectionImpl Deserialization Privilege Escalation (Metasploit)

##

VirIT eXplorer 6.7.43 – ‘tg-scan.dll’ DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/43506/info

MySITE – SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/43510/info

Horde IMP Webmail 4.3.7 – ‘fetchmailprefs.php’ HTML Injection

source: https://www.securityfocus.com/bid/43515/info

NetArt Media Car Portal 2.0 – ‘car’ SQL Injection

source: https://www.securityfocus.com/bid/43536/info

Microsoft Cinepak Codec CVDecompress – Heap Overflow (MS10-055)

'''

ZenPhoto – Config Update / Command Execution

gokhun asp stok 1.0 – Multiple Vulnerabilities

============================================

PEEL Premium 5.71 – SQL Injection

============================================

Blue River Mura CMS – Directory Traversal

Sep 24, 2010

BS.Player 2.56 – ‘.m3u’ / ‘.pls’ File Processing Multiple Remote Denial of Service Vulnerabilities

# source: https://www.securityfocus.com/bid/43502/info

VMware Workstation 7.1.1 – ‘VMkbd.sys’ Denial of Service

#!/usr/bin/python

Mozilla Firefox CSS – font-face Remote Code Execution

'''

VisualSite CMS 1.3 – Multiple Vulnerabilities

'''

E-Xoopport Samsara 3.1 (eCal Module) – Blind SQL Injection

#!/usr/bin/perl

Adobe CoolType – SING Table ‘uniqueName’ Local Stack Buffer Overflow (Metasploit) (2)

##

Adobe – U3D CLODProgressiveMeshDeclaration Array Overrun (Metasploit) (2)

##

Adobe – ‘Doc.media.newPlayer’ Use-After-Free (Metasploit) (2)

##

Adobe – ‘util.printf()’ Local Buffer Overflow (Metasploit) (2)

##

Microsoft Excel – Malformed FEATHEADER Record (MS09-067) (Metasploit)

##

Microsoft HTML Help Workshop 4.74 – ‘.hhp’ Index Buffer Overflow (Metasploit) (3)

##

ACDSee – ‘.XPM’ File Section Buffer Overflow (Metasploit)

##

Free Download Manager 3.0 Build 844 – Torrent Parsing Buffer Overflow (Metasploit)

##

Millenium MP3 Studio 2.0 – ‘.pls’ Local Stack Buffer Overflow (Metasploit)

##

DjVu – ‘DjVu_ActiveX_MSOffice.dll’ ActiveX Component Buffer Overflow (Metasploit)

##

SasCam Webcam Server 2.6.5 – ‘Get()’ Method Buffer Overflow (Metasploit)

##

URSoft W32Dasm 8.93 – Disassembler Function Buffer Overflow (Metasploit)

##

Microsoft HTML Help Workshop 4.74 – ‘.hhp’ Cotent Buffer Overflow (Metasploit) (2)

##