PHP Car Rental-Script – Authentication Bypass
Name : PHP Car Rental-Script (Auth Bypass) SQL Injection
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 491
Hipergate 4.0.12 – Multiple Vulnerabilities
Permanent XSS:
RealAdmin – ‘detail.php’ Blind SQL Injection
RealAdmin (detail.php) Blind Sql Injection Vulnerability
cityadmin – ‘links.php’ Blind SQL Injection
cityadmin (links.php) Blind Sql Injection Vulnerability
myBusinessAdmin – ‘content.php’ Blind SQL Injection
myBusinessAdmin (content.php) Blind Sql Injection Vulnerability
Interspire Knowledge Manager 5 – ‘callback.snipshot.php’ Arbitrary File Creation
source: https://www.securityfocus.com/bid/38186/info
TVUPlayer 2.4.4.9beta1 – ‘PlayerOcx.ocx’ ActiveX Control Arbitrary File Overwrite
source: https://www.securityfocus.com/bid/39956/info
CoreFTP 2.1 b1637 – Password field Universal Buffer Overflow
#!/usr/bin/python
DeepBurner pro 1.9.0.228 – ‘.dbr’ file Buffer Overflow (Universal)
[~]This is buffer: {[header] 253 bytes + (junk+ next seh + seh addr) + [tail] 957 bytes} dbr/dbi file
GCP 2.0 datasets provided as BioCASE Web services – Local File Inclusion
========================================================================
Qihoo 360 Security Guard 6.1.5.1009 – breg device drivers Privilege Escalation
# Software Link: [http://sd.360.cn/sd_download1.html?src=360home]
Dlili Script – SQL Injection
==============================================================================
MYRE Classified – ‘cat’ SQL Injection
###################################################################################
Digital Amp MP3 3.1 – ‘.mp3’ Local Crash (PoC)
#!/usr/bin/perl
MobPartner Chat – Multiple SQL Injections
MobPartner Chat Multiple Sql Injection Vulnerability
lighttpd 1.4/1.5 – Slow Request Handling Remote Denial of Service
source: https://www.securityfocus.com/bid/38036/info
Linux Kernel 2.6.x – KVM ‘pit_ioport_read()’ Local Denial of Service
source: https://www.securityfocus.com/bid/38038/info
ShoutCMS – ‘content.php’ Blind SQL Injection
Shout! (content.php) Blind Sql Injection Vulnerability
Evernew Free Joke Script – ‘viewjokes.php’ SQL Injection
Name : Evernew Free Joke Script (viewjokes.php) SQL Injection
Joomla! Component Job – SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Joomla! Component Yelp – SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Snif 1.5.2 – Any Filetype Download
--------------------------------------------
RaakCMS – Multiple Vulnerabilities
#################################################################
Home Of AlegroCart 1.1 – Cross-Site Request Forgery (Change Administrator Password)
[#]----------------------------------------------------------------[#]
Linux Kernel 2.6.x (x64) – Personality Handling Local Denial of Service
source: https://www.securityfocus.com/bid/38027/info
Joomla! Component com_gambling – ‘gamblingEvent’ SQL Injection
source: https://www.securityfocus.com/bid/38033/info
Joomla! Component AutartiTarot – Directory Traversal
source: https://www.securityfocus.com/bid/38034/info
EmiratesHost – Insecure Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/39963/info
crownweb – ‘page.cfm’ SQL Injection
crownweb (page.cfm) Sql Injection Vulnerability
Creative SplashWorks-SplashSite – ‘page.php’ Blind SQL Injection
####################################################################
Maian Greetings 2.1 – Arbitrary File Upload
========================================================================================
Saman Portal – SQL Injection
#################################################################
Joomla! Component com_rsgallery2 2.0 – ‘catid’ SQL Injection
source: https://www.securityfocus.com/bid/38009/info
IBM DB2 – ‘kuddb2’ Remote Denial of Service
source: https://www.securityfocus.com/bid/38018/info
Last Wizardz – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/39968/info
Site Manager 3.0 – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/39973/info
HAWHAW – ‘newsread.php’ SQL Injection
source: https://www.securityfocus.com/bid/39978/info
Joomla! Component com_dms 2.5.1 – SQL Injection
[~] Joomla Component com_dms Remote SQL injection vulnerability - (category_id)
phpunity.newsmanager – Local File Inclusion
#############################################################################################################
Xerox Workcenter 4150 – Remote Buffer Overflow (PoC)
#####################################################################################
Joomla! Component JE Event Calendar – SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Vermillion FTP Deamon 1.31 – Remote Buffer Overflow
# Exploit Title: Vermillion FTP Deamon Remote BOF Exploit
Joomla! Component com_simplefaq – ‘catid’ Blind SQL Injection
Joomla Component com_simplefaq (catid) Blind Sql Injection Vulnerability
ThinkAdmin – ‘page.php’ SQL Injection
==========================================================
IPB (nv2) Awards < 1.1.0 - SQL Injection
#################################################
dotProject 2.1.3 – Cross-Site Scripting / Improper Permissions
# Exploit Title: dotProject 2.1.3 XSS and Improper Permissions
Joomla! Component Jreservation – Blind SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Joomla! Component JE Quiz – ‘eid’ Blind SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Wireshark 1.2.5 – ‘LWRES getaddrbyname’ Stack Buffer Overflow (PoC)
#!/usr/bin/env python