Majoda CMS – Authentication Bypass
------------------------------------------------------
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 485
TRUC 0.11 – ‘login_reset_password_page.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38445/info
Open Educational System 0.1 Beta – ‘CONF_INCLUDE_PATH’ Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/38449/info
DZ Erotik Auktionshaus 4.rgo – ‘news.php’ SQL Injection
----------------------------Information------------------------------------------------
Gravity Board X 2.0 Beta (Public Release 3) – SQL Injection
#!/usr/bin/perl
Project Man 1.0 – Authentication Bypass
##############################################################
phpCDB 1.0 – Local File Inclusion
##############################################################
phpRAINCHECK 1.0.1 – SQL Injection
##############################################################
ProMan 0.1.1 – Multiple File Inclusions
##############################################################
phpMySite – Cross-Site Scripting / SQL Injection
=================================================================
Pre Classified Listings – SQL Injection
=================================================================
Scripts Feed Business Directory – SQL Injection
==============================================================================
Uiga Fan Club 1.0 – Authentication Bypass
# Uiga Fan Club
Slaed CMS 4.0 – Multiple Vulnerabilities
========================================================================================
SLAED CMS 4 – Installation Script Unauthorized Access
source: https://www.securityfocus.com/bid/38453/info
FileExecutive 1 – Multiple Vulnerabilities
==============================================================================
Orbital Viewer 1.04 – ‘.orb’ File Local Universal Overflow (SEH)
#!/usr/bin/python
PHP 5.3.1 – LCG Entropy Security
source: https://www.securityfocus.com/bid/38430/info
ARISg 5.0 – ‘wflogin.jsp’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38441/info
Softbiz Recipes Portal Script – ‘showcats.php’ SQL Injection
----------------------------Information------------------------------------------------
GameScript 3.0 – SQL Injection
Author : FormatXformat
Joomla! Component com_Joomlaconnect_be – Blind Injection
#!/usr/bin/php
WebAdministrator Lite CMS – SQL Injection
============ { Ariko-Security - Advisory #5/2/2010 } =============
IBM (Multiple Products) – Login Page Cross-Site Scripting
source: https://www.securityfocus.com/bid/38412/info
Newbie CMS 0.0.2 – Insecure Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/38421/info
Max’s Photo Album – Arbitrary File Upload
========================================================================================
MySmartBB 1.0.0 – Cross-Site Scripting
========================================================================================
Article Friendly – Cross-Site Request Forgery
=======================================================================
WikyBlog 1.7.3rc2 – Multiple Vulnerabilities
========================================================================================
Mozilla Firefox 3.6 – URL Spoofing
# Tested on: Windows XP SP2/3
ShortCMS 1.11F(B) (con) – SQL Injection
ShortCMS v. 1.11F(B) (con) SQL Injection Vulnerability
PHPCOIN 1.2.1 – ‘mod.php’ SQL Injection
phpCOIN 1.2.1 (mod.php) SQL Injection Vulnerability
Apple Safari 4.0.4 / Google Chrome 4.0.249 – CSS style Stack Overflow Denial of Service (PoC)
Apple Safari 4.0.4 & Google Chrome 4.0.249 CSS style Stack Overflow
Softbiz Auktios Script – Multiple SQL Injections
----------------------------Information------------------------------------------------
Web Server Creator Web Portal 0.1 – Multiple Vulnerabilities
========================================================================================
PBBoard 2.0.5 – Multiple Vulnerabilities
========================================================================================
Maian Uploader 4.0 – Arbitrary File Upload
========================================================================================
Mediacoder 0.7.3.4605 – Local Buffer Overflow
Download: http://www.mediacoderhq.com/download.htm
iPhone – ‘WebCore::CSSSelector()’ Remote Crash
#!/usr/bin/python
Softbiz Classifieds PLUS – Multiple SQL Injections
----------------------------Information------------------------------------------------
MySmartBB 1.7 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/38385/info
Kojoney 0.0.4.1 – ‘urllib.urlopen()’ Remote Denial of Service
source: https://www.securityfocus.com/bid/38395/info
Joomla! Component HD FLV Player – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/38401/info
OpenInferno OI.Blogs 1.0 – Multiple Local File Inclusions
source: https://www.securityfocus.com/bid/38402/info
n-cms-equipe 1.1c.Debug – Multiple Local File Inclusions
source: https://www.securityfocus.com/bid/39298/info
rbot 0.9.14 – ‘!react’ Unauthorized Access
source: https://www.securityfocus.com/bid/39915/info
Softbiz Jobs – Cross-Site Request Forgery
=======================================================================
Joomla! Component com_ice – Blind SQL Injection
#!/usr/bin/php