Persian E107 – Cross-Site Scripting
========================================================================================
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 456
Visitor Logger – ‘banned.php’ Remote File Inclusion
#-> Visitor Logger (banned.php) Remote File Include Vulnerability
Mediacoder 0.7.3.4672 – Local Overflow (SEH)
#!/usr/bin/python
Joomla! Component JS Jobs 1.0.5.8 – SQL Injection
# Exploit Title: Joomla Component com_jsjobs SQL Injection Vulnerability
MusicBox – SQL Injection
# Exploit Title: [musicbox sql injection]
Patient folder (THEME ASP) – SQL Injection
============================================================
wsCMS – ‘news.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40447/info
DM Database Server – ‘SP_DEL_BAK_EXPIRED’ Memory Corruption
source: https://www.securityfocus.com/bid/40460/info
osCommerce Online Merchant 2.2 – File Disclosure / Authentication Bypass
--------------------------------------------
IP2location.dll 1.0.0.1 – Function ‘Initialize()’ Local Buffer Overflow
IP2Location.dll v1.0.0.1 Initialize() Buffer Overflow by sinn3r
Nginx 0.6.36 – Directory Traversal
# Exploit Title: nginx [engine x] http server
Zeeways Script – Multiple Vulnerabilities
=======================================================================
CMScout – Cross-Site Scripting / HTML Injection
=======================================================================
Creato Script – SQL Injection
# Title: Creato Script SQL Injection Vulnerability
PTC Site’s – Remote Code Execution / Cross-Site Scripting
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
Symphony CMS – Local File Inclusion
=============================================================================================================
Joomla! Component com_quran – SQL Injection
[!] ===========================================================================[!]
GoAheaad WebServer – Source Code Disclosure
# Exploit Title: GoAheaad Webserver Source Code Disclosure Vulnerability
GR Board 1.8.6 – ‘page.php’ Remote File Inclusion
source: https://www.securityfocus.com/bid/40437/info
fusebox – ‘ProductList.cfm?CatDisplay’ SQL Injection
-----------------------------------------------------------------------------------------
Nucleus Plugin Gallery – Remote File Inclusion / SQL Injection
=============================================================================================================
Marketing Web Design – Multiple Vulnerabilities
=======================================================================
Nucleus Plugin Twitter – Remote File Inclusion
=============================================================================================================
Aim Web Design – Multiple Vulnerabilities
=======================================================================
MileHigh Creative – SQL Injection / Cross-Site Scripting / HTML Injection
=======================================================================
Cosmos Solutions CMS – SQL Injection
===============================================
Cosmos Solutions CMS – ‘id=’ / ‘page=’ SQL Injection
####################################################
Joomla! Component BF Quiz 1.0 – SQL Injection (2)
#!/usr/bin/python
Webiz 2004 – Local File Upload
# Exploit Title: (Webiz) local SHELL Upload Vulnerability
Webiz – SQL Injection
@@@@@@ @@ @@ @@@@@ @@@@@ @@ @@@@ @@ @@@@@@ @@@ @@@@
Realtor Real Estate Agent – ‘idproperty’ SQL Injection
) ) ) ( ( ( ( ( ) )
Home FTP Server 1.10.3 (build 144) – Denial of Service
#!/usr/bin/python
VideoLAN VLC Media Player 1.0.6 – ‘.avi’ Media File Crash (PoC)
#!/usr/bin/python
Realtor WebSite System E-Commerce – idfestival SQL Injection
-------------------------------------------------------------------------------------------
Realtor Real Estate Agent – ‘news.php’ SQL Injection
) ) ) ( ( ( ( ( ) )
Joomla! Component My Car 1.0 – Multiple Vulnerabilities
# Exploit Title: Joomla Component My Car Multiple Vulnerabilities
Joomla! Component BF Quiz 1.3.0 – SQL Injection (1)
# Exploit Title: Joomla Component BF Quiz SQL Injection Vulnerability
Joomla! Component JE Poll – ‘pollid’ SQL Injection
) ) ) ( ( ( ( ( ) )
Joomla! Component JE Job 1.0 – ‘catid’ SQL Injection
) ) ) ( ( ( ( ( ) )
YourArcadeScript 2.0b1 – Blind SQL Injection
#!/usr/bin/perl
Core FTP Server 1.0.343 – Directory Traversal
source: https://www.securityfocus.com/bid/40422/info
osCommerce Visitor Web Stats AddOn – ‘Accept-Language’ Header SQL Injection
source: https://www.securityfocus.com/bid/40425/info
ImpressPages CMS 1.0x – ‘admin.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/40431/info
CMScout 2.08 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/40442/info
FreeBSD 8.0 – ‘ftpd’ (FreeBSD-SA-10:05) Off-By-One (PoC)
# FreeBSD 8.0 ftpd off-by one PoC (FreeBSD-SA-10:05)
File Share scriptFile share – SQL Injection
# ----------------------oOO---(_)---OOo-----------------------
parlic Design – SQL Injection / Cross-Site Scripting / HTML Injection
=======================================================================