Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 447
WebDM CMS – SQL Injection
WebDM CMS SQL Injection Vulnerability
PHP Bible Search – ‘bible.php?chapter’ SQL Injection
source: https://www.securityfocus.com/bid/41197/info
PHP Bible Search – ‘bible.php?chapter’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41197/info
CANDID – ‘/image/view.php?image_id’ SQL Injection
source: https://www.securityfocus.com/bid/41216/info
CANDID – ‘/image/view.php?image_id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41216/info
Iatek PortalApp 3.3/4.0 – ‘login.asp’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/41224/info
Grafik CMS – ‘/admin.php’ SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/41227/info
Miyabi CGI Tools 1.02 – ‘index.pl’ Remote Command Execution
source: https://www.securityfocus.com/bid/41228/info
Kryn.cms 6.0 – Cross-Site Request Forgery / HTML Injection
source: https://www.securityfocus.com/bid/41229/info
TornadoStore 1.4.3 – SQL Injection / HTML Injection
source: https://www.securityfocus.com/bid/41233/info
Qt 4.6.3 – Remote Denial of Service
source: https://www.securityfocus.com/bid/41250/info
Mumble Murmur 1.2 – Denial of Service
source: https://www.securityfocus.com/bid/41251/info
ArcademSX 2.904 – ‘cat’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41252/info
iNet Online Community – Blind SQL Injection
# Exploit Title: iNet Online Community Blind SQLi Vulnerability
PTCPay GEN4 – ‘buyupg.php’ SQL Injection
=====================================================
PageDirector CMS – Multiple Vulnerabilities
###################################################################################
UFO: Alien Invasion 2.2.1 (OSX) – Remote Code Execution
#!/usr/bin/python
Netartmedia iBoutique.MALL – SQL Injection
Name : Netartmedia iBoutique.MALL SQLi Vulnerability
I-net Multi User Email Script – SQL Injection
Name : I-net Multi User Email Script SQLi Vulnerability
CMSQLite / CMySQLite 1.3 – Cross-Site Request Forgery
# Title: CMSQlite & CMySQLite CSRF Vulnerability
GSM SIM Utility 5.15 – ‘.sms’ File Local Buffer Overflow (SEH)
# Exploit Title : GSM SIM Utility sms file Local SEH BoF
MemDb – Multiple Remote Denial of Service Vulnerabilities
#!/usr/bin/python
Subdreamer Pro 3.0.4 – CMS Upload
__________ __ __ .__
Winamp 5.571 – ‘.avi’ Denial of Service
# Tested on Windows 7 and Winamp v5.571(x86)
Applicure dotDefender 4.01-3 – Persistent Cross-Site Scripting
An advisory by EnableSecurity.
Customer Paradigm PageDirector – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/41184/info
D-Link DAP-1160 Wireless Access Point – DCC Protocol Security Bypass
source: https://www.securityfocus.com/bid/41187/info
BlaherTech Placeto CMS – ‘Username’ SQL Injection
source: https://www.securityfocus.com/bid/41190/info
MySpace Clone 2010 – SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/41199/info
eBay Clone Script 2010 – ‘showcategory.php’ SQL Injection
source: https://www.securityfocus.com/bid/41200/info
Clix’N’Cash Clone 2010 – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/41202/info
V-EVA Classified Script 5.1 – ‘classified_img.php’ SQL Injection
source: https://www.securityfocus.com/bid/41204/info
2DayBiz Matrimonial Script – ‘smartresult.php’ SQL Injection
----------------------------Information------------------------------------------------
2DayBiz ybiz Polls Script – SQL Injection
----------------------------Information------------------------------------------------
2DayBiz ybiz Freelance Script – SQL Injection
----------------------------Information------------------------------------------------
2DayBiz Photo Sharing Script – SQL Injection (2)
----------------------------Information------------------------------------------------
Bilder Upload Script Datei Upload 1.09 – Arbitrary File Upload
[~]######################################### InformatioN
i-netsolution Job Search Engine – SQL Injection
1 ########################################## 1
I-Net MLM Script Engine – SQL Injection
1 ########################################## 1
RM Downloader 3.1.3 – Local Buffer Overflow (SEH)
#!/usr/bin/perl
Scite Text Editor 1.76 – Local Buffer Overflow (PoC)
# Exploit Title: Scite text editor :Local Buffer Overflow (PoC)
Swoopo Clone 2010 – SQL Injection
1 ########################################## 1
Ceica-GW – ‘login.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40917/info
Joomla! Component com_sef – Remote File Inclusion
==========================================================
Clicker CMS – Blind SQL Injection
# Exploit Title: Clicker CMS Blind SQL Injection Vulnerability
WordPress Plugin Cimy Counter – Full Path Disclosure / Redirector / Cross-Site Scripting / HTTP Response Spitting
----------------------------