Alex Guestbook – Multiple Vulnerabilities
==============================================================================
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 496
CMScontrol 7.x – Arbitrary File Upload
#############################################################
Nuked KLan 1.7.7 & SP4 – Denial of Service
#!/bin/bash
gridcc script 1.0 – SQL Injection / Cross-Site Scripting
+===================================================================================+
Audiotran 1.4.1 – ‘.pls’ Local Stack Overflow (Metasploit)
require 'msf/core'
Image Hosting Script – Arbitrary File Upload
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
FAQEngine 4.24.00 – Remote File Inclusion
###################################################################################
HTMLDOC 1.9.x-r1629 (Windows x86) – ‘.html’ Local Buffer Overflow
download: http://www.htmldoc.org/software.php?VERSION=1.9.x-r1629&FILE=htmldoc/snapshots/htmldoc-1.9.x-r1629.tar.bz2
tincan ltd – ‘section’ SQL Injection
+/=============================================\+
Alwjeez Script – Database Backup
::::::::::::::::Exploit:::::::::::
2^6 TCP Control Bit – Fuzzer (No ECN or CWR)
#!/usr/bin/perl
DELTAScripts PHP Links 1.0 – ’email’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37700/info
Jamit Job Board – ‘post_id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37701/info
@lex Guestbook 5.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37706/info
Active Calendar 1.2 – ‘$_SERVER[‘PHP_SELF’]’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37709/info
Ruby 1.9.1 – WEBrick ‘Terminal Escape Sequence in Logs’ Command Injection
source: https://www.securityfocus.com/bid/37710/info
Nginx 0.7.64 – Terminal Escape Sequence in Logs Command Injection
source: https://www.securityfocus.com/bid/37711/info
AOLServer Terminal 4.5.1 – Escape Sequence in Logs Command Injection
source: https://www.securityfocus.com/bid/37712/info
Varnish 2.0.6 – ‘Terminal Escape Sequence in Logs’ Command Injection
source: https://www.securityfocus.com/bid/37713/info
thttpd 2.24 – HTTP Request Escape Sequence Terminal Command Injection
source: https://www.securityfocus.com/bid/37714/info
mini_httpd 1.18 – HTTP Request Escape Sequence Terminal Command Injection
source: https://www.securityfocus.com/bid/37714/info
Cherokee 0.99.30 – Terminal Escape Sequence in Logs Command Injection
source: https://www.securityfocus.com/bid/37715/info
Yaws 1.55 – ‘Logs’ Terminal Escape Sequence Command Injection
source: https://www.securityfocus.com/bid/37716/info
Orion Application Server 2.0.7 – ‘Terminal Escape Sequence in Logs’ Command Injection
source: https://www.securityfocus.com/bid/37717/info
BOA Web Server 0.94.x – Terminal Escape Sequence in Logs Command Injection
source: https://www.securityfocus.com/bid/37718/info
ProArcadeScript to Game – SQL Injection
# Software Link: proarcadescript.com
TermiSBloG 1.0 – SQL Injections
#############################################################
PHPCalendars – Multiple Vulnerabilities
==============================================================================
phpMDJ 1.0.3 – SQL Injection
,--------------------------------------------------------------,
Real Player – Local Crash (PoC)
#!/user/bin/perl
Joomla! Component com_dashboard – Directory Traversal
@~~=======================================~~@
ZeeWays Script – SQL Injection
# Exploit Title: ZeEwAyS ScRiPt SQL Injection Vulnerability
Joomla! Component com_jcollection – Directory Traversal
@~~=======================================~~@
Joomla! Component com_jvideodirect – Directory Traversal
@~~=======================================~~@
Joomla! Component com_jashowcase – Directory Traversal
@~~=======================================~~@
Soritong 1.0 – Universal Buffer Overflow (SEH) (Metasploit)
# Exploit Title: [Soritong v1.0 Universal BOF-SEH (META)]
Simply Classified 0.2 – Cross-Site Scripting / Cross-Site Request Forgery
#################################################################
YPOPS! 0.9.7.3 – Buffer Overflow (SEH)
# Version:0.9.7.3
ABB 1.1 – Forum Remote Database Disclosure
==============================================================================
Egreetings 1.0b – Remote Database Disclosure
========================================================================
E-membres 1.0 – Remote Database Disclosure
==============================================================================
D-Link Routers – Authentication Bypass (2)
Multiple D-Link routers suffer from insecure implementations of the Home Network Administration
VideoLAN VLC Media Player 0.8.6i – ActiveX Denial of Service (PoC)
exploit:[vlc ActiveX remote buffer overflow poc]
DigitalHive – ‘mt’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37697/info
Sun Java System Directory Server 7.0 – ‘core_get_proxyauth_dn’ Denial of Service
source: https://www.securityfocus.com/bid/37699/info
Smart Statistics 1.0 – ‘smart_Statistics_admin.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40468/info
ProfitCode Shopping Cart – Multiple Local/Remote File Inclusion Vulnerabilities
# Author: Zer0 Thunder
PPVChat – Multiple Vulnerabilities
##########################[andresg888]##########################
Apple Safari 4.0.4 – Style Sheet redirection Information Disclosure
source: https://www.securityfocus.com/bid/37925/info