U.S.Robotics USR5463 0.06 Firmware – ‘setup_ddns.exe’ HTML Injection
source: https://www.securityfocus.com/bid/40292/info
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 459
Lisk CMS 4.4 – ‘id’ Multiple Cross-Site Scripting / SQL Injections
source: https://www.securityfocus.com/bid/40314/info
NPDS REvolution 10.02 – ‘admin.php’ Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/40331/info
Battle Scrypt – Arbitrary File Upload
# Exploit Title: Battle Scrypt Shell Upload Vulnerability
Google Chrome 4.1.249.1059 – Cross Origin Bypass in Google URL (GURL)
# Google Chrome 4.1.249.1059 Cross Origin Bypass in Google URL (GURL)
McAfee Email Gateway – Web Administration Broken Access Control
Advisory Name:Web Administration Broken Access Control in McAfee Email Gateway (formerly IronMail)
DB[CMS] – ‘section.php’ SQL Injection
-------------------------------------------------------------------------------------------
Palo Alto Network Vulnerability – Cross-Site Scripting
Palo Alto Network Vulnerability - Cross-Site Scripting (XSS)
DBCart – ‘article.php’ SQL Injection
) ) ) ( ( ( ( ( ) )
SyncBack Freeware 3.2.20.0 – Local Overflow (SEH)
#!/usr/bin/ruby
C99Shell 1.0 Pre-Release build 16 (Web Shell) – ‘ch99.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40134/info
Joomla! Component Percha Image Attach 1.1 – ‘Controller’ Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/40244/info
Joomla! Component Percha Fields Attach 1.0 – ‘Controller’ Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/40244/info
Joomla! Component Percha Downloads Attach 1.1 – ‘Controller’ Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/40244/info
Joomla! Component Percha Gallery 1.6 Beta – ‘Controller’ Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/40244/info
Joomla! Component Percha Multicategory Article 0.6 – ‘Controller’ Arbitrary File Access
source: https://www.securityfocus.com/bid/40244/info
Shopzilla Affiliate Script PHP – ‘search.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40246/info
Caucho Resin Professional 3.1.5 – ‘/resin-admin/digest.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/40251/info
McAfee Email Gateway 6.7.1 – ‘systemWebAdminConfig.do’ Remote Security Bypass
source: https://www.securityfocus.com/bid/40255/info
SoftDirec 1.05 – ‘delete_confirm.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40269/info
Joomla! Component com_horses – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/40308/info
phpMyAdmin 2.6.3-pl1 – Cross-Site Scripting / Full Path
# Exploit Title: phpMyAdmin 2.6.3-pl1 Cross Site Scripting and Full Path
ChillyCMS – Blind SQL Injection
#!/usr/bin/hybris
WebJaxe – SQL Injection
###############################################################################
TS Special Edition 7.0 – Multiple Vulnerabilities
##############################################################################################
B-Hind CMS (tiny_mce) – Arbitrary File Upload
####################################################
Webloader 7 < 8 - 'vid' SQL Injection
[*]~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(...
Joomla! Component com_packages – SQL Injection
[+] Title : Joomla Component com_packages SQL Injection Vulnerability
Attachmate Reflection Standard Suite 2008 – ActiveX Buffer Overflow (PoC)
# Exploit Title: Attachmate Reflection Standard Suite 2008 activex buffer overflow
Lokomedia CMS – ‘sukaCMS’ Local File Disclosure
# Software Link: http://bukulokomedia.com
DB[CMS] 2.0.1 – SQL Injection
# Exploit Title: DB[CMS] Sql Injection Vulnerability
QtWeb Browser 3.3 – Denial of Service
# Title: QtWeb Browser version 3.3 Dos based in Xss
ecoCMS 18.4.2010 – ‘admin.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39901/info
NPDS REvolution 10.02 – ‘download.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40227/info
Joomla! Component JComments 2.1 – ‘ComntrNam’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40230/info
Linux Kernel 2.6.x – Btrfs Cloned File Security Bypass
source: https://www.securityfocus.com/bid/40241/info
TeamViewer 5.0.8232 – Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/40242/info
gpEasy CMS 1.6.2 – ‘editing_files.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40330/info
Tainos Webdesign (All Scripts) – SQL Injection / Cross-Site Scripting / HTML Injection
-------------------------------------------------------------------------------------------
Joomla! Component com_crowdsource – SQL Injection
[!] Title: Joomla Component com_crowdsource SQL Injection
Joomla! Component com_event – Multiple Vulnerabilities
####################################################################
PHP-Fusion 4.01 – SQL Injection
# Exploit Title: PHP-Fusion v4.01 SQL INJECTION Vulnerabilities
MidiCart PHP/ASP – Arbitrary File Upload
# Exploit Title: MidiCart PHP,ASP Shell Upload Vulnerability
MyNews CMS 1.0 – SQL Injection / Local File Inclusion / Cross-Site Scripting
MyNews v1.0 CMS - Sql Injection, local file inclusion and XSS Vulnerabilities
Joomla! Component com_event – SQL Injection
# Exploit Title: Joomla Component com_event another sql injection vuln
Abyss Web Server X1 – Cross-Site Request Forgery
http://osvdb.org/show/osvdb/64693