Adobe ColdFusion 8 – Remote Command Execution (RCE)
# Exploit Title: Adobe ColdFusion 8 - Remote Command Execution (RCE)
cfm
cfm 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Symantec Advanced Secure Gateway (ASG) / ProxySG – Unrestricted File Upload
===========Security Intelligence============
Mura CMS < 6.2 - Server-Side Request Forgery / XML External Entity Injection
# Exploit Title: Mura CMS before 6.2 SSRF + XXE
BlueDragon CFChart Servlet 7.1.1.17759 – Arbitrary File Retrieval/Deletion
Vulnerability title: Arbitrary File Retrieval + Deletion In New Atlanta BlueDragon CFChart Servlet
Adobe ColdFusion 7 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/49787/info
Adobe ColdFusion – ‘probe.cfm’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/49220/info
Alcassoft’s SOPHIA CMS – SQL Injection
Title : Alcassoft's SOPHIA CMS Vulnerable to SQL Injection
Lingxia I.C.E CMS – Blind SQL Injection
#!/usr/bin/python
ActiveWeb Professional 3.0 – Arbitrary File Upload
source: https://www.securityfocus.com/bid/45985/info
Mura CMS – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/45384/info
Blue River Mura CMS – Directory Traversal
Sep 24, 2010
Mango Blog 1.4.1 – ‘/archives.cfm/search’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39864/info
Site Manager 3.0 – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/39973/info
CommonSpot Server – ‘/utilities/longproc.cfm’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37986/info