PHP-Nuke 8.2 – Arbitrary File Upload
# Title : PHPnuke 8.2 Remote Upload File Exploit
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 448
Joomla! Component JE Awd Song – Persistent Cross-Site Scripting
Critical Level : HIGH
Joomla! Component JE Media Player – Local File Inclusion
Name : Joomla je-media-player LFI Vulnerability
Joomla! Component jeeventcalendar – Local File Inclusion
Critical Level : HIGH
Joomla! Component com_jejob – Local File Inclusion
Name : Joomla com_jejob LFI Vulnerability
Joomla! Component jesectionfinder – Local File Inclusion
Name : Joomla jesectionfinder LFI Vulnerability
Winamp 5.572 (Windows 7) – Local Buffer Overflow (ASLR + DEP Bypass)
#!/usr/bin/python
Speedy 1.0 – Arbitrary File Upload
# Author: ViRuS Qalaa
FoxPlayer 2 – ‘.m3u’ Local Buffer Overflow (PoC)
###########################################################################
WM Downloader 2.9.2 – Local Stack Buffer Overflow
#!/usr/bin/perl
FieldNotes 32 5.0 – Local Buffer Overflow (SEH)
#!/usr/bin/python
2DayBiz Matrimonial Script – SQL Injection / Cross-Site Scripting
$-------------------------------------------------------------------------------------------------------------------
2DayBiz – Multiple SQL Injections
$-------------------------------------------------------------------------------------------------------------------
Allomani Songs & Clips 2.7.0 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Allomani & Clips v2.7.0 - [CSRF] Add Admin Account
ARSC Really Simple Chat 3.3 – Remote File Inclusion / Cross-Site Scripting
=> ARSC Really Simple Chat V3.3 Remote File Inclsion & Cross Site Scripting Vulnerability
2DayBiz B2B Portal Script – ‘selling_buy_leads1.php’ SQL Injection
# Exploit Title: 2daybiz B2B Portal Script Sql Injection
snipe Gallery Script – SQL Injection
# Exploit Title: snipe gallery Script Sql Injection
Joomla! Component jesubmit 1.4 – SQL Injection
Exploit Title: Joomla JE Story submit SQL Injection
AbleSpace 1.0 – ‘news.php’ SQL Injection
source: https://www.securityfocus.com/bid/41139/info
Cisco Adaptive Security Response – HTTP Response Splitting
source: https://www.securityfocus.com/bid/41159/info
feh 1.7 – ‘–wget-Timestamp’ Remote Code Execution
source: https://www.securityfocus.com/bid/41161/info
Novell iManager – Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE-----
OpenEMR Electronic Medical Record Software 3.2 – Multiple Vulnerabilities
Redspin Security Notice -- RSN-2010-01
Weborf HTTP Server – Denial of Service
[DCA-0012]
UFO: Alien Invasion 2.2.1 – Arbitrary Code Execution
Remote Arbitrary Code Execution Vulnerability in UFO: Alien Invasion
2DayBiz Photo Sharing Script – SQL Injection (1)
# Exploit Title: photo sharing script SQL injection Vulnerability
AdaptCMS 2.0.0 Beta – ‘init.php’ Remote File Inclusion
) ) ) ( ( ( ( ( ) )
Joomla! Component Realtyna Translator 1.0.15 – Local File Inclusion (2)
=================================================
2DayBiz Video Community Portal – ‘user-profile.php’ SQL Injection
$-------------------------------------------------------------------------------------------------------------------
2DayBiz Real Estate Portal – ‘viewpropertydetails.php’ SQL Injection
$-------------------------------------------------------------------------------------------------------------------
2DayBiz The Web Template Software – SQL Injection / Cross-Site Scripting
$-------------------------------------------------------------------------------------------------------------------
2DayBiz Job Site Script – SQL Injection
$-------------------------------------------------------------------------------------------------------------------
AbleDating script – SQL Injection
# Exploit Title: AbleDating script SQL injection Vulnerability
ActiveCollab 2.3.0 – Local File Inclusion / Directory Traversal
============================================================
2DayBiz B2B Portal Script – SQL Injection
# Exploit Title: 2daybiz B2B Portal Script SQL injection Vulnerability
PHPortal 1.2 – ‘gunaysoft.php’ Remote File Inclusion
# Tilte: phportal_1.2 (gunaysoft.php) Remote File Include Vulnerability
Winstats – ‘.fma’ Local Buffer Overflow (PoC)
###################################################################
Big Forum 5.2 – Arbitrary File Upload / Local File Inclusion
=> Big Forum 5.2v Arbitrary File Upload & Local File Inclusion Vulnerability
Wincalc 2 – ‘.num’ Local Buffer Overflow (PoC)
#!/usr/bin/perl
Big Forum – ‘forum.php?id’ SQL Injection
:::::::::::::::::::::::::
Geomau 7 – ‘.wg2’ Local Buffer Overflow (PoC)
#!/usr/bin/perl
Plotwn 18 – ‘.wp2’ Local Buffer Overflow (PoC)
#!/usr/bin/perl
Lois Software WebDB 2.0A Script – Multiple SQL Injections
source: https://www.securityfocus.com/bid/41124/info
Limny 2.1 – ‘q’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41152/info
OneCMS 2.6.1 – ‘cat’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41194/info
OneCMS 2.6.1 – ‘search’ SQL Injection
source: https://www.securityfocus.com/bid/41194/info
OneCMS 2.6.1 – ‘short1’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41194/info
Boat Classifieds – ‘printdetail.asp?Id’ SQL Injection
##################################################################################################
PreProject Multi-Vendor Shopping Malls – ‘products.php?sid’ SQL Injection
##################################################################################################