OneCMS 2.6.1 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42949/info
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 430
CMS WebManager-Pro – ‘c.php’ SQL Injection
source: https://www.securityfocus.com/bid/42951/info
TBDev 2.0 – Remote File Inclusion / SQL Injection
source: https://www.securityfocus.com/bid/43004/info
dompdf 0.6.0 beta1 – Remote File Inclusion
==================================
LeadTools ActiveX common dialogs 16.5 – Multiple Vulnerabilities
LEADTOOLS ActiveX Common Dialogs 16.5 Multiple Remote Vulnerabilities
TFTPDWIN 0.4.2 – Directory Traversal
+------------------------------------------------------------------------+
tftp desktop 2.5 – Directory Traversal
+------------------------------------------------------------------------+
Autodesk MapGuide Viewer – ActiveX Denial of Service
# Exploit Title: Autodesk MapGuide Viewer ActiveX(MGAXCTRL.DLL)Overflow Vulnerability
PHP Joke Site Software – ‘sbjoke_id’ SQL Injection
[#] Title: PHP Joke Site Software (sbjoke_id) SQL Injection Vuln
Novell Netware 6.5 – OpenSSH Remote Stack Overflow
#####################################################################################
Amiro.CMS 5.8.4.0 – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/42908/info
Rumba XML 2.4 – ‘index.php’ Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/42914/info
ArtGK CMS – Cross-Site Scripting / HTML Injection
source: https://www.securityfocus.com/bid/42923/info
Joomla! Component JE FAQ Pro 1.5.0 – Multiple Blind SQL Injections
---------------------------------------------------------------------------------
Web-Ideas Web Shop Standard – SQL Injection
# Exploit Title: [SQL injection in web-ideas web shop standard]
mBlogger 1.0.04 – ‘viewpost.php’ SQL Injection
#!/usr/bin/python
HP Insight Diagnostics Online Edition 8.4 – ‘parameters.php?device’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42888/info
HP Insight Diagnostics Online Edition 8.4 – ‘idstatusframe.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/42888/info
HP Insight Diagnostics Online Edition 8.4 – ‘survey.php?category’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42888/info
HP Insight Diagnostics Online Edition 8.4 – ‘globals.php?tabpage’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42888/info
HP Insight Diagnostics Online Edition 8.4 – ‘custom.php?testmode’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42888/info
Mereo 1.9.2 – Remote HTTP Server Denial of Service
#!/usr/bin/python
seagull 0.6.7 – Remote File Inclusion
=================================
Apple QuickTime – ‘_Marshaled_pUnk’ Backdoor Client-Side Arbitrary Code Execution
Original Source: http://reversemode.com/index.php?option=com_content&task=view&id=69&Itemid=1
Joomla! Component PicSell 1.0 – Local File Disclosure
# Author: Craw
UltraVNC 1.0.8.2 – DLL Loading Arbitrary Code Execution
// source: https://www.securityfocus.com/bid/42846/info
Nginx 0.6.38 – Heap Corruption
#!/usr/bin/env python
SnackAmp 3.1.2 – SMP Buffer Overflow (SEH)
# Exploit Title: SnackAmp 3.1.2 Malicious SMP Buffer Overflow Vulnerability (SEH)
SnackAmp 3.1.2 – ‘.wav’ Buffer Overflow (PoC)
# Exploit Title: SnackAmp 3.1.2 Malicious WAV Buffer Overflow Vulnerability (POC)
vBulletin 3.8.4/3.8.5 – Registration Bypass
===============================================================
Max’s Guestbook – HTML Injection / Cross-Site Scripting
================================================================
Multi-lingual E-Commerce System 0.2 – Multiple Remote File Inclusions
Multi-lingual E-Commerce System 0.2 Multiple Remote File Inclusion Vulnerabilities
CF Image Hosting Script 1.3.8 – Remote File Inclusion
=================================
Seagull 0.6.7 – SQL Injection
1 ###################################### 1
GuestBookPlus – HTML Injection / Bypass Comments Limit
=======================================================================
WebsiteKit Gbplus – ‘Name’ / ‘Body’ HTML Injection
source: https://www.securityfocus.com/bid/42842/info
DIY-CMS 1.0 – Multiple Remote File Inclusions
# Exploit Title: [DiY-CMS 1.0 Remote File Inclusion ]
textpattern CMS 4.2.0 – Remote File Inclusion
# Remote File Inclusion Vulnerability
LeadTools ActiveX Raster Twain 16.5 – ‘LtocxTwainu.dll’ Buffer Overflow (PoC)
LEADTOOLS ActiveX Raster Twain v16.5 (LtocxTwainu.dll) Remote Buffer Overflow PoC
GaleriaSHQIP 1.0 – SQL Injection
# Exploit Title: GaleriaSHQIP SQL Injection Vulnerability
Blogman 0.7.1 – ‘profile.php’ SQL Injection
#!/usr/bin/python
XOOPS 2.0.14 – ‘article.php’ SQL Injection
##################################################################
CF Image Hosting Script 1.3 – ‘settings.cdb’ Information Disclosure
### Title: CF Image Hosting script 1.3 (settings.cdb) Information Disclosure Vulnerability ###
pecio CMS 2.0.5 – Multiple Remote File Inclusions
======================================================================
Esvon Classifieds 4.0 – Multiple Vulnerabilities
1 ########################################## 1