Exploits

JE CMS 1.1 – SQL Injection

=====================================================================================================================...

Platnik 8.1.1 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/40201/info

PonVFTP – Insecure Cookie Authentication Bypass

source: https://www.securityfocus.com/bid/40207/info

File Thingie 2.5.5 – File Security Bypass

Title: File Thingie v2.5.5 File Security Bypass

Joomla! Component simpledownload 0.9.5 – Local File Inclusion

[!]===========================================================================[!]

Cybertek CMS – Local File Inclusion

=======================================================

The iceberg – ‘Content Management System’ SQL Injection

==========================================================

Shellzip 3.0 Beta 3 – ‘.zip’ Local Stack Buffer Overflow

#***********************************************************************************

Joomla! Component simpledownload 0.9.5 – Local File Disclosure

[!]==========================================[!]

LinPHA 1.3.2 – ‘rotate.php’ Remote Command Execution

__ __ ___

EgO 0.7b – ‘FCKeditor’ Arbitrary File Upload

##########################################################

Tainos – Multiple Vulnerabilities

=======================================================

I-Vision CMS – Cross-Site Scripting / SQL Injection

# Title: [XSS, SQL injection vulnerability in I-Vision CMS]

Joomla! Component MS Comment 0.8.0b – Local File Inclusion

[!]===========================================================================[!]

Alibaba Clone Platinum – ‘about_us.php’ SQL Injection

-------------------------------------------------------------------------------------------

CompactCMS 1.4.0 – ‘tiny_mce’ Arbitrary File Upload

##########################################################

Apple Safari 4.0.5 – ‘parent.close()’ Memory Corruption (ASLR + DEP Bypass)

Download:

Joomla! Component com_camp – SQL Injection

[+] Title : Joomla Component com_camp SQL Injection Vulnerability

Link Bid Script – ‘links.php’ SQL Injection

######################{In The Name Of Allah The Mercifull} ######################

Press Release Script – ‘page.php?id’ SQL Injection

######################{In The Name Of Allah The Mercifull} ######################

JE Ajax Event Calendar – Local File Inclusion

# Exploit Title: JE Ajax Event Calendar Local File Inclusion Vulnerability

Heaven Soft CMS 4.7 – SQL Injection

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Joomla! Component JE Job 1.0 – Local File Inclusion

# Exploit Title: Joomla Component JE Job Local File Inclusion Vulnerability

Mozilla Firefox 3.6.3 / Safari 4.0.5 – Access Violation Exception and Unknown Exception

//var a=

SmallFTPd 1.0.3 – ‘DELE’ Denial of Service

# Tested on: Windows XP, SP2 (EN)

TYPSoft FTP Server 1.10 – ‘RETR’ Denial of Service (1)

# Tested on: Windows XP, SP2 (EN)

IncrediMail – ‘ImShExtU.dll’ ActiveX Memory Corruption

IncrediMail ImShExtU.dll ActiveX Memory Corruption

SelfComposer CMS – SQL Injection

All the input passed via "idprod", "idpadrerif", "idreferenza",

Joomla! Component JE Quotation Form 1.0b1 – Local File Inclusion

####################################################################

Heaven Soft CMS 4.7 – ‘photogallery_open.php’ SQL Injection

-------------------------------------------------------------------------------------------

Alibaba Clone Platinum – ‘/buyer/index.php’ SQL Injection

# Title: Alibaba Clone Platinum (buyer/index.php) SQL Injection Vulnerability

VMware View Portal 3.1 – Cross-Site Scripting

[DSECRG-09-058] Vmware View - XSS vulnerability

PHP 5.3.x < 5.3.2 - 'ext/phar/stream.c' / 'ext/phar/dirstream.c' Multiple Format String Vulnerabilities

source: https://www.securityfocus.com/bid/40173/info

Planet Script 1.x – ‘idomains.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/40203/info

Invision Power Board 3.0.1 – SQL Injection

WFTPD Server 3.30 – Multiple Vulnerabilities

#include

Samba 3.4.7/3.5.1 – Denial of Service

===============================================================================

Joomla! Component Komento 1.0.0 – ‘sid’ SQL Injection

-------------------------------------------------------------------------

BlaB! Lite 0.5 – Remote File Inclusion

\#'#/

Joomla! Component aardvertiser 2.0 – Local File Inclusion

========================================================================

damianov.net Shoutbox – Cross-Site Scripting

# Exploit Title: damianov.net Shoutbox XSS Vulnerability

Joomla! Component com_sebercart – ‘getPic.php’ Local File Disclosure

=========================================================================================================

Joomla! Component FDione Form Wizard 1.0.2 – Local File Inclusion

-----------------------------------------------------------------------------------------

Symantec Alert Management System Intel Alert Originator Service – Remote Buffer Overflow (Metasploit)

##

GameCore 2.5 – ‘GameID’ Integer Overflow

source: https://www.securityfocus.com/bid/40155/info

NPDS REvolution 10.02 – ‘download.php’ SQL Injection

source: https://www.securityfocus.com/bid/40156/info

NPDS REvolution 10.02 – ‘topic’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/40157/info

JForum 2.08 – BBCode Color Tag HTML Injection

source: https://www.securityfocus.com/bid/42414/info

Adobe Shockwave Player 11.5.6.606 – ‘DIR’ Multiple Memory Vulnerabilities

Title: Adobe Shockwave Player 11.5.6.606 (DIR) Multiple Memory Vulnerabilities

Joomla! Component com_PHP 0.1 – Local File Inclusion

Joomla Custom PHP Pages Component LFI Vulnerability