Getsimple CMS 2.01 – ‘components.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40374/info
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 458
Ruubikcms 1.0.3 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40375/info
360 Web Manager 3.0 – ‘webpages-form-led-edit.php’ SQL Injection
source: https://www.securityfocus.com/bid/40378/info
Media Player Classic 1.3.1774.0 – ‘.rm’ Buffer Overflow (PoC)
# Exploit Title: [ Media Player Classic - v 1.3.1774.0 (.rm file) buffer Overflow poc ]
MMA Creative Design – SQL Injection
=========================================================
runt-communications Design – SQL Injection
=========================================================
webperformance eCommerce – SQL Injection
===============================================
Kingsoft Webshield ‘KAVSafe.sys’ 2010.4.14.609 (2010.5.23) – Kernel Mode Privilege Escalation
Kingsoft WebShield KAVSafe.sys ProcessParameters->ImagePathName.Length = wcslen(InstallPath) * sizeof(WCHAR);
BBMedia Design’s – SQL Injection
=========================================================
goffgrafix Design’s – SQL Injection
=========================================================
eCreo – SQL Injection
===============================================
OpenForum 2.2 b005 – ‘saveAsAttachment()’ Method Arbitrary File Creation
# source: https://www.securityfocus.com/bid/40364/info
WordPress Plugin TinyBrowser – Arbitrary File Upload
************************************************************ ** TinyBrowser Remote File upload Vulnerability ************...
Asset Manager – Arbitrary File Upload
************************************************************ ** Asset Manager Remote File upload Vulnerability ** ******...
Tochin eCommerce – Multiple Remote s
===============================================
Azimut Technologie – Admin Authentication Bypass
************************************************************ ** Azimut Technologie Admin Login Bypass vulnerability *******...
E-Commerce Group – ‘cat.php’ SQL Injection
Exploit Title: E-commerce Group (cat.php) SQL Injection Vulnerability
(Gabriel’s FTP Server) Open & Compact FTP Server 1.2 – ‘PORT’ Remote Denial of Service
=============================================================================
eWebEditor 1.x – ‘WYSIWYG’ Arbitrary File Upload
=============================================================================
DotNetNuke – Arbitrary File Upload
************************************************************ ** DotNetNuke Remote File upload Vulnerability *********...
Rave Creations/UHM – ‘artists.asp’ SQL Injection
************************************************************ ** (artists.asp) SQL Injection Vulnerability ***********...
ECShop – ‘search.php’ SQL Injection
# Exploit Title: ECShop Search.php SQL Injection Exploit
Recipes Website 1.0 – SQL Injection
[~] Script: | Recipes Website 1.0 |
cyberhost – ‘default.asp’ SQL Injection
source: https://www.securityfocus.com/bid/40357/info
Open-AudIT – Multiple Vulnerabilities
GVI-2010-02 : Multiple vulnerabilities in Open-AudIT
Rumba FTP Client ‘FTPSFtp.dll’ 4.2.0.0 – ‘OpenSession()’ Local Buffer Overflow
Rumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession() Buffer Overflow by sinn3r
3Com* iMC (Intelligent Management Center) – Traversal File Retrieval
PR10-01: Unauthenticated File Retrieval (traversal) within 3Com* iMC (Intelligent Management Center)
3Com* iMC (Intelligent Management Center) – Cross-Site Scripting / Information Disclosure Flaws
PR10-02: Various XSS and information disclosure flaws within 3Com* iMC (Intelligent Management Center)
SolarWinds TFTP Server 10.4.0.10 – Denial of Service
# Exploit Title: Solarwinds TFTP DOS
ConPresso 4.0.7 – SQL Injection
ConPresso 4.0.7 SQL Injection Vulnerability
WinDirectAudio 1.0 – ‘.wav’ (PoC)
#/usr/bin/perl
JV2 Folder Gallery 3.1 – ‘gallery.php’ Remote File Inclusion
# ----------------------oOO---(_)---OOo-----------------------
Apache Axis2 Administration Console – (Authenticated) Cross-Site Scripting
PR10-03 Authenticated Cross-Site Scripting Vulnerability (XSS) within Apache Axis2 administration console
cardinalCMS 1.2 – ‘FCKeditor’ Arbitrary File Upload
==========================================================
Sun Solaris 10 – Nested Directory Tree Local Denial of Service
source: https://www.securityfocus.com/bid/40319/info
Sun Solaris 10 – ‘in.ftpd’ Long Command Handling Security
source: https://www.securityfocus.com/bid/40320/info
Specialized Data Systems Parent Connect 2010.04.11 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/40324/info
Renista CMS – SQL Injection
Author:Amir Afghanian
IMEDIA – ‘index.php’ SQL Injection
# Exploit Titre: IMEDIA (index.php) SQL Injection Vulnerability
DB[CMS] – ‘article.php’ SQL Injection
DB[CMS] (article.php) SQL Injection Vulnerability
Entry Level Content Management System (EL CMS) – SQL Injection
[+] Contact : vir0e5[at]hackermail[dot]com
Spaw Editor 1.0/2.0 – Arbitrary File Upload
# Tilte: Spaw Editor v1.0 & 2.0 Remote File Upload .
ComponentOne VSFlexGrid 7/8 – ‘Archive()’ method Remote Buffer Overflow
# Tilte: ComponentOne VSFlexGrid v. 7 & 8 "Archive()" method Remote Buffer Overflow Exploit
webYourPhotos 6.05 – ‘index.php’ Remote File Inclusion
# ----------------------oOO---(_)---OOo-----------------------
Snipe Gallery 3.1 – ‘gallery.php?cfg_admin_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/40279/info
Snipe Gallery 3.1 – ‘image.php?cfg_admin_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/40279/info