G5 Scripts Guestbook PHP 1.2.8 – Cross-Site Scripting
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 469
Apple Mac OSX 10.6 – HFS FileSystem (Denial of Service)
// -----BEGIN PGP SIGNED MESSAGE-----
PowerEasy 2006 – ‘ComeUrl’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39696/info
memorial Web site script – ‘id’ SQL Injection
) ) ) ( ( ( ( ( ) )
EPay Enterprise 4.13 – ‘cid’ SQL Injection
) ) ) ( ( ( ( ( ) )
NKINFOWEB – SQL Injection
# Software Link: http://jaist.dl.sourceforge.net/project/nkinfoweb/FunctionNkinfoweb_v.species.rar
Excitemedia CMS – SQL Injection
#!/usr/bin/perl -w
CommView 6.1 (Build 636) – Local Blue Screen of Death (Denial of Service)
# Exploit Title : CommView Version 6.1 (Build 636) Local Denial Of Service (BSOD)
Memorial Web Site Script – Reset Password / Insecure Cookie Handling
-----------------------------------------------------------------------
Memorial Web Site Script – Multiple Arbitrary Delete Vulnerabilities
-----------------------------------------------------------------------------------------
Template Seller Pro 3.25 – ‘tempid’ SQL Injection
#!/usr/bin/perl -w
lanewsfactory – Multiple Vulnerabilities
LaNewsFactory Multiple Remote Vulnerabilities
Xftp client 3.0 – ‘PWD’ Remote Overflow
# Exploit Title: Xftp client 3.0 PWD Remote Exploit
cms (id) 5.0 – SQL Injection
-----------------------------------------------------------------------
OpenSSL – Remote Denial of Service
#include
Microsoft Windows XP/2000/2003 – ‘win32k.sys’ SfnLOGONNOTIFY Local kernel Denial of Service
Windows 2000/XP/2003 win32k.sys SfnLOGONNOTIFY local kernel Denial of Service Vulnerability
Microsoft Windows XP/2000/2003 – ‘win32k.sys’ SfnINSTRING Local kernel Denial of Service
Windows 2000/XP/2003 win32k.sys SfnINSTRING local kernel Denial of Service Vulnerability
Cacti 0.8.7e – SQL Injection
CVSSv2 Score: 9 (AV:N/AC:L/Au:S/C:C/I:C/A:C)
Cacti 0.8.7e – OS Command Injection
CVSSv2 Score: 9 (AV:N/AC:L/Au:S/C:C/I:C/A:C)
EDraw Flowchart ActiveX Control 2.3 – ‘EDImage.ocx’ Remote Denial of Service (IE)
######################
Apache Tomcat 5.5.0 < 5.5.29 / 6.0.0 < 6.0.26 - Information Disclosure
CVE-2010-1157: Apache Tomcat information disclosure vulnerability
phpGreetCards 3.7 – Cross-Site Scripting
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
AJ Matrix 3.1 – ‘id’ Multiple SQL Injections
) ) ) ( ( ( ( ( ) )
AJ Shopping Cart 1.0 (maincatid) – SQL Injection
) ) ) ( ( ( ( ( ) )
Apache ActiveMQ 5.2/5.3 – Source Code Information Disclosure
source: https://www.securityfocus.com/bid/39636/info
Huawei EchoLife HG520 3.10.18.5-1.0.5.0 – Remote Information Disclosure
source: https://www.securityfocus.com/bid/39646/info
FlashCard 2.6.5 – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39648/info
v2marketplacescript Upload_images Script (-7777) – Arbitrary File Upload
======================================================================
Joomla! Component WMI 1.5.0 – Local File Inclusion
================================================================================================
Joomla! Component OrgChart 1.0.0 – Local File Inclusion
==============================================================================================================
Joomla! Component MMS Blog 2.3.0 – Local File Inclusion
=============================================================================================================
e107 CMS 0.7.19 – Cross-Site Request Forgery
Vulnerability ID: HTB22344
Viscom Software Movie Player Pro SDK ActiveX 6.8 – Remote Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE-----
LightNEasy 3.1.x – Multiple Vulnerabilities
##############################################################################
wb news (webmobo) 2.3.3 – Persistent Cross-Site Scripting
#####################################################################################
Multiple Browsers – Audio Tag Denial of Service
#!/usr/bin/python
Joomla! Component com_portfolio – Local File Disclosure
Joomla compnent com_portfolio Local File Disclosure
ZipGenius 6.3.1.2552 – ‘zgtips.dll’ Local Stack Buffer Overflow
# Exploit Title : ZipGenius zgtips.dll Stack Buffer Overflow
CactuShop – User Invoices Persistent Cross-Site Scripting
User Invoices Persistent XSS Vulnerability in CactuShop
Apache OFBiz – Multiple Cross-Site Scripting Vulnerabilities
Bonsai Information Security - Advisory
e107 0.7.x – ‘/e107_admin/banner.php’ SQL Injection
source: https://www.securityfocus.com/bid/39609/info
DBSite wb CMS – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/39613/info
Multi-Threaded HTTP Server 1.1 – Directory Traversal (1)
################################################################################
Joomla! Component Online News Paper Manager 1.0 – ‘cid’ SQL Injection
[!] Joomla com_jnewspaper (cid) SQL Injection Vulnerability
Joomla! Component JTM Reseller 1.9 Beta – SQL Injection
[!]===========================================================================[!]
Multi-Threaded HTTP Server 1.1 – Source Disclosure
################################################################