Joomla! Component com_joomdocs – Cross-Site Scripting
Date : june, 18 2010
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 451
Joomla! Component Answers 2.3beta – Multiple Vulnerabilities
# Exploit Title: Joomla Component Answers v2.3beta Multiple Vulnerabilities
Joomla! Component Ozio Gallery 2 – Multiple Vulnerabilities
Ozio Gallery 2
Joomla! Component com_listbingo 1.3 – Multiple Vulnerabilities
# Exploit Title: Joomla Component Listbingo 1.3 Multiple Vulnerabilities
MarketSaz – Arbitrary File Upload
==========================================
Banner Management Script – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Shopping Cart Script with Affiliate Program – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
KubeLance 1.7.6 – ‘profile.php’ SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
(Gabriel’s FTP Server) Open & Compact FTP Server 1.2 – Full System Access
# Exploit Title: Open&Compact Ftp Server
Joomla! Component Gallery XML 1.1 – SQL Injection / Local File Inclusion
source: https://www.securityfocus.com/bid/40964/info
KubeSupport – ‘lang’ SQL Injection
source: https://www.securityfocus.com/bid/40970/info
DMSEasy 0.9.7 – ‘FCKeditor’ Arbitrary File Upload
#!/usr/bin/perl
Pithcms 0.9.5 – Local File Inclusion
[~] Pithcms 0.9.5 Local Include ExploitPithcms 0.9.5 Local Include Exploit
Easy Travel Portal – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
PenPals – Authentication Bypass
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Ananda Image Gallery – SQL Injection
Exploit Title:Ananda Image Gallery SQL Vulnerable
File Sharing Wizard 1.5.0 – Remote Overflow (SEH)
#!/usr/bin/python
Planet 1.1 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Planet 1.1 - [CSRF] Add Admin Account
Netware – SMB Remote Stack Overflow (PoC)
===============================================================================
Winamp 5.572 – Local Buffer Overflow (EIP + SEH) (DEP Bypass)
#!/usr/bin/python
Live CMS – SQL Injection
[-] Live CMS SQL Injection Vulnerability [-]
Havij 1.10 – Persistent Cross-Site Scripting
# Exploit Title: Havij Persistent XSS (
PHP-Nuke Module print 6.0 – ‘print&sid’ SQL Injection
PHP-Nuke Module print 6.0 (print&sid) SQL Injection Vulnerability
TurboFTP Server 1.20.745 – Directory Traversal
source: https://www.securityfocus.com/bid/40919/info
Firebook – Multiple Cross-Site Scripting / Directory Traversal Vulnerabilities
source: https://www.securityfocus.com/bid/40941/info
Chrome Engine 4 – Denial of Service
source: https://www.securityfocus.com/bid/40945/info
Nakid CMS 0.5.2 – Remote File Inclusion
[~] Nakid CMS 0.5.2 Remote Include Exploit
EZPX Photoblog 1.2 Beta – Remote File Inclusion
[~] EZPX photoblog 1.2 beta Remote Include Exploit
AspTR EXtended – Cross-Site Request Forgery
##################################################################################
PHPAuctionSystem – Arbitrary File Upload
Name : PHPAuctionSystem Upload Vulnerability
2DayBiz Online Classified System – SQL Injection / Cross-Site Scripting
Name : 2daybiz online classified system SQLi AND XSS Vulnerability
Rosoft Audio Converter 4.4.4 – Local Buffer Overflow
# Exploit Title: Rosoft Audio Converter 4.4.4 Buffer Overflow
Real Estate – SQL Injection
Description
Adobe SVG Viewer 3.0 – Circle Transform Remote Code Execution
source: https://www.securityfocus.com/bid/40885/info
2DayBiz ybiz Network Community Script – SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/40913/info
File Sharing Wizard 1.5.0 – Buffer Overflow (PoC)
#!/usr/bin/python
Smart ASP Survey – Cross-Site Scripting / SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0
Pre Job Board Pro – Authentication Bypass
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0
SAS Hotel Management System – ‘notfound’ SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0
Business Classified Listing – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Restaurant Listing with Online Ordering – SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0
Acuity CMS 2.7.1 – SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0
IISWorks FileMan – fileman.mdb Remote User Database Disclosure
# Exploit Title: IISWorks FileMan fileman.mdb Remote User Database
Winplot 2010 – Buffer Overflow (PoC)
DISCLAIMER
SasCam 2.6.5 – Remote HTTP Server Crash
DISCLAIMER