Exploits

MiniWebsvr 0.0.10 – Directory Traversal / Listing

###################################################################

Zervit Web Server 0.4 – Source Disclosure/Download

###################################################################

Zervit Web Server 0.4 – Directory Traversals

###################################################################

e-webtech – ‘fixed_page.asp’ SQL Injection

####################################################

PolyPager 1.0rc10 – ‘FCKeditor’ Arbitrary File Upload

4Images 1.7.7 – ‘image_utils.php’ Remote Command Execution

|| || | ||

TomatoCMS 2.0.x – SQL Injection

source: https://www.securityfocus.com/bid/40108/info

Microsoft Windows Outlook Express and Windows Mail – Integer Overflow

Application: Microsoft Outlook Express

724CMS Enterprise 4.59 – ‘section.php’ Local File Inclusion

-------------------------------------------------------------------------------------------

724CMS Enterprise 4.59 – ‘section.php’ SQL Injection

-------------------------------------------------------------------------------------------

Aqar Script 1.0 – Remote Bypass

========================================================================================

Digital College 1.0 – Arbitrary File Upload

========================================================================================

Fast Free Media 1.3 Adult Site – Arbitrary File Upload

========================================================================================

Uploader 0.1.5 – Multiple Vulnerabilities

========================================================================================

e-webtech – ‘page.asp’ SQL Injection

-------------------------------------------------------------------------------------------

Free Advertisment CMS – ‘user_info.php’ SQL Injection

=========================================================

Apple Safari 4.0.5 – ‘parent.close()’ Memory Corruption Code Execution

Alt + F4 :)

Joomla! Component mod_VisitorData 1.1 – Remote code Execution

Joomla Module Camp26 Visitor Data 1.1 Remote code Execution

Marinet CMS – SQL Injection

=========================================================

Woodall Creative – SQL Injection

=========================================================

Marinet CMS – SQL Injection / Cross-Site Scripting / HTML Injection

-------------------------------------------------------------------------------------------

AgentX++ Master – AgentX::receive_agentx Stack Buffer Overflow (Metasploit)

##

Affiliate Store Builder – ‘edit_cms.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/40058/info

Saurus CMS 4.7 – ‘edit.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/40059/info

Hyplay 1.2.326.1 – ‘.asx’ Local Denial of Service Crash (PoC)

#/usr/bin/perl

e-webtech – ‘new.asp?id=’ SQL Injection

************************************************************ ** (new.asp?id=) SQL Injection Vulnerability *****************...

Netvidade engine 1.0 – Multiple Vulnerabilities

#!/usr/bin/perl -w

Spaceacre – Multiple SQL Injections

#Spaceacre Multiple SQL Injection Vulnerability

tekno.Portal 0.1b – ‘makale.php?id’ SQL Injection

-------------------------------------------------------------------------------------------

Dark Hart Portal – ‘login.php’ Remote File Inclusion

-------------------------------------------------------------------------------------

MiniManager For Mangos/Trinity Server – Denial of Service

=========================================================

Pargoon CMS – Denial of Service

#################################################################

Tadbir CMS – ‘FCKeditor’ Arbitrary File Upload

#################################################################

family connections 2.2.3 – Multiple Vulnerabilities

Family Connections 2.2.3 Multiple Remote Vulnerabilities

29o3 CMS – ‘LibDir’ Multiple Remote File Inclusions

================================================

724CMS Enterprise 4.59 – SQL Injection

# 724CMS Enterprise Version 4.59 SQL Injection Vulnerability

PHPKB Knowledge Base Software 2.0 – Multilanguage Support Multiple SQL Injections

[+] {In The Name Of Allah The Mercifull}

Waibrasil – Local/Remote File Inclusion

# Title: Waibrasil Remote / Local File Inclusion

Fiomental & Coolsis Backoffice – Multiple Vulnerabilities

______ _ _ _

Xitami 5.0 – ‘/AUX’ Request Remote Denial of Service

source: https://www.securityfocus.com/bid/40027/info

EasyPublish CMS 23.04.2010 – URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/40037/info

Advanced Poll 2.0 – ‘mysql_host’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/40045/info

Hyplay 1.2.0326.1 – ‘.asx’ Remote Denial of Service

source: https://www.securityfocus.com/bid/40048/info

Dolphin 2.0 – ‘.elf’ Local Denial of Service

phpscripte24 Shop System – SQL Injection

----------------------------Information------------------------------------------------

Alibaba Clone 3.0 (Special) – SQL Injection

----------------------------Information------------------------------------------------

Alibaba Clone Diamond Version – SQL Injection

----------------------------Information------------------------------------------------

phpscripte24 Live Shopping Multi Portal System – SQL Injection

----------------------------Information---------------------------------------------------

SapLPD 6.28 – Remote Buffer Overflow (Metasploit)

##

Oracle Secure Backup – NDMP_CONNECT_CLIENT_AUTH Buffer Overflow (Metasploit)

##