Zen Time Tracking 2.2 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/38153/info
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 490
VideoDB 3.0.3 – ‘login.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38155/info
Linux Kernel 2.6.18 – ‘move_pages()’ Information Leak
Bug NOT discovered by Marcus Meissner of SuSE security
httpdx 1.5.2 – Remote Denial of Service (PoC)
# Title: httpdx v1.5.2 Remote Pre-Authentication DoS (PoC crash)
WSN Guest – Database Disclosure
####################################################################
Zen Tracking 2.2 – Authentication Bypass
[+] Zen Tracking
Baal Systems 3.8 – Authentication Bypass
[+] Baal Systems
DA Mailing List System 2 – Multiple Vulnerabilities
#######################################################################
Exponent CMS 0.96.3 – ‘articlemodule’ SQL Injection
Exponent CMS 0.96.3 (articlemodule) Sql Injection Vulnerability
Belkatalog CMS – SQL Injection
#Title:Belkatalog CMS--- sql injection vulnerability
Joomla! Component com_productbook – SQL Injection
Joomla Component "com_productbook" SQL Injection Vulnerability
Croogo 1.2.1 – Multiple Cross-Site Request Forgery Vulnerabilities
[#-----------------------------------------------------------------------------------------------#]
Killmonster 2.1 – Authentication Bypass
[+] Killmonster
EncapsCMS 0.3.6 – ‘config[path]’ Remote File Inclusion
[+] EncapsCMS 0){
Rostermain 1.1 – Authentication Bypass
[+] Rostermain
Uiga Business Portal – SQL Injection / Cross-Site Scripting
# Exploit Title: Uiga Business Portal SQL/ XSS Vulnerability
TinyMCE WYSIWYG Editor – Multiple Vulnerabilities
[+] Vurnerebility: *Js tiny_mce/tiny_mce WYSIWYG{java script} vurnerebility xss-->popup
Mozilla Firefox 3.5.x and SeaMonkey 2.0.1 – Remote Denial of Service
source: https://www.securityfocus.com/bid/38132/info
Apple Safari 4.0.4 – Remote Denial of Service
source: https://www.securityfocus.com/bid/38133/info
Open Bulletin Board – Multiple Blind SQL Injections
Open Bulletin Board Multiple Blind Sql Injection Vulnerability
Joomla! Component com_photoblog – Blind SQL Injection
Joomla (com_photoblog) Blind Sql Injection Vulnerability
X-lite SIP 3.0 – ‘wav’ memory Corruption Heap Buffer Overflow
#!/usr/bin/python
Arab Network Tech. (ANT) CMS – SQL Injection
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
odlican.net CMS 1.5 – Arbitrary File Upload
#odlican.net cms v.1.5 remote file upload vulnerability
ShopEx Single 4.5.1 – Multiple Vulnerabilities
# Exploit Title: ShopEx
SQLite Browser 2.0b1 – Local Denial of Service
# Exploit Title: SQLite Browser 2.0b1 Local DoS Vulnerability
ShopEx Single 4.5.1 – ‘errinfo’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39941/info
Opera 10.10 – Remote Code Execution Denial of Service
#!/usr/bin/perl
FoxPlayer 1.7.0 – ‘.m3u’ Local Buffer Overflow
#!/usr/bin/perl
Audistats 1.3 – SQL Injection
###################################################################################
Oracle 10g – Multiple Privilege Escalation Vulnerabilities
source: https://www.securityfocus.com/bid/38115/info
Oracle 11g – Multiple Privilege Escalation Vulnerabilities
source: https://www.securityfocus.com/bid/38115/info
evalSMSI 2.1.3 – Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/38116/info
LANDesk Management Gateway 4.x – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/38119/info
SystemTap 1.0/1.1 – ‘__get_argv()’ / ‘__get_compat_argv()’ Local Memory Corruption
source: https://www.securityfocus.com/bid/38120/info
ASCET Interactive Huski CMS – ‘i’ Local File Inclusion
source: https://www.securityfocus.com/bid/38126/info
ASCET Interactive Huski Retail – Multiple SQL Injections
source: https://www.securityfocus.com/bid/38129/info
UplusFTP Server 1.7.0.12 – Remote Buffer Overflow
#!/usr/bin/python
MASA2EL Music City 1.0 – SQL Injection
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
ManageEngine OpUtils 5 – ‘Login.DO’ SQL Injection
================================================================================
Ipswitch IMAIL 11.01 – Reversible Encryption + weak ACL
|------------------------------------------------------------------|
Interspire Knowledge Manager < 5.1.3 - Multiple Remote Vulnerabilities
source: https://www.securityfocus.com/bid/38090/info
KnowGate hipergate 4.0.12 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/38094/info
Data 1 Systems UltraBB 1.17 – ‘view_post.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38097/info
Samba 3.4.5 – Symlink Directory Traversal (Metasploit)
source: https://www.securityfocus.com/bid/38111/info
Samba 3.4.5 – Symlink Directory Traversal
source: https://www.securityfocus.com/bid/38111/info
Sterlite SAM300 AX Router – ‘Stat_Radio’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39928/info
KubeLance 1.7.6 – Cross-Site Request Forgery (Add Admin)
[#-----------------------------------------------------------------------------------------------#]