WordPress Plugin MiwoFTP 1.0.5 – Multiple Cross-Site Request Forgery / Cross-Site Scripting Vulnerabilities
WordPress MiwoFTP Plugin 1.0.5 Multiple CSRF XSS Vulnerabilities
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WordPress Plugin MiwoFTP 1.0.5 – Cross-Site Request Forgery / Arbitrary File Deletion
WordPress MiwoFTP Plugin 1.0.5 CSRF Arbitrary File Deletion Exploit
WordPress Plugin Video Gallery 2.8 – SQL Injection
######################
Traidnt Up 3.0 – SQL Injection
# Exploit Title: Traidnt Up v3.0 SQL Injection
WordPress Plugin Duplicator 0.5.14 – SQL Injection / Cross-Site Request Forgery
######################
WordPress Plugin WP Mobile Edition 2.7 – Remote File Disclosure
# Exploit Title: Wordpress Plugin 'WP Mobile Edition' Remote File Disclosure Vulnerability
WordPress Plugin Windows Desktop and iPhone Photo Uploader – Arbitrary File Upload
##################################################################################################
WordPress Plugin Traffic Analyzer 3.4.2 – Blind SQL Injection
# Exploit Title: Wordpress plugin 'Traffic Analyzer' Blind SQL Injection
Balero CMS 0.7.2 – Multiple JS/HTML Injection Vulnerabilities
; path=/balerocms/";
Balero CMS 0.7.2 – Multiple Blind SQL Injections
Balero CMS v0.7.2 Multiple Blind SQL Injection Vulnerabilities
WordPress Plugin Shareaholic 7.6.0.3 – Cross-Site Scripting
# Exploit Title: Shareaholic 7.6.0.3 XSS
WordPress Plugin All In One WP Security & Firewall 3.9.0 – SQL Injection
######################
u-Auctions – Multiple Vulnerabilities
# Exploit Title: *u-Auctions Multiple Vulnerabilities*
WordPress Plugin Work The Flow File Upload 2.5.2 – Arbitrary File Upload
######################
WordPress Plugin VideoWhisper Video Conference Integration 4.91.8 – Arbitrary File Upload
Title: Remote file upload vulnerability in videowhisper-video-conference-integration wordpress plugin v4.91.8
WordPress Plugin VideoWhisper Video Presentation 3.31.17 – Arbitrary File Upload
Title: Remote file upload vulnerability in wordpress plugin videowhisper-video-presentation v3.31.17
phpSFP Schedule Facebook Posts 1.5.6 – SQL Injection
######################################################################
WordPress Plugin Simple Ads Manager – Information Disclosure
#Vulnerability title: Wordpress plugin Simple Ads Manager - Information Disclosure
WordPress Plugin Simple Ads Manager 2.5.94 – Arbitrary File Upload
#Vulnerability title: Wordpress plugin Simple Ads Manager - Arbitrary File Upload
WordPress Plugin Simple Ads Manager – Multiple SQL Injections
#Vulnerability title: Wordpress plugin Simple Ads Manager - SQL Injection
WordPress Plugin WP Easy Slideshow 1.0.3 – Multiple Vulnerabilities
# Exploit Title: Wordpress WP Easy Slideshow Plugin Multiple Vulnerabilities
Multiple WordPress UpThemes Themes – Arbitrary File Upload
# Exploit Title: Wordpress SimpleCart Theme File Upload and Execution
WordPress Plugin Video Gallery 2.8 – Multiple Cross-Site Request Forgery Vulnerabilities
# Exploit Title: Wordpress Video Gallery Plugin Multiple CSRF File Upload
Joomla! Component com_rand – SQL Injection
##################################################################################################
WordPress Plugin Business Intelligence – SQL Injection (Metasploit)
##################################################################################################
Fiyo CMS 2.0.1.8 – Multiple Vulnerabilities
# Exploit Title: FiyoCMS Multiple Vulnerabilities
WordPress Plugin SP Project & Document Manager 2.5.3 – Blind SQL Injection
# Exploit Title: WordPress SP Project & Document Manager 2.5.3 Blind SQL Injection
Joomla! Component Contact Form Maker 1.0.1 – SQL Injection
[+]Title: Joomla Contact Form Maker v1.0.1 Component - SQL injection vulnerability
Joomla! Component com_gallery_wd – SQL Injection
######################################################################
WordPress Plugin aspose-doc-exporter 1.0 – Arbitrary File Download
|*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*|
WordPress Plugin Slider REvolution 4.1.4 – Arbitrary File Download
# Exploit Title : WordPress Slider Revolution Responsive
Berta CMS – Arbitrary File Upload
Berta CMS is a web based content management system using PHP and local file storage.
pfSense 2.2 – Multiple Vulnerabilities
Advisory ID: HTB23251
WordPress Plugin Marketplace 2.4.0 – Remote Code Execution (Add Admin)
#!/usr/bin/python
WordPress Plugin Marketplace 2.4.0 – Arbitrary File Download
# Exploit Title: WP Marketplace 2.4.0 Arbitrary File Download
Joomla! Component Spider FAQ – SQL Injection
##################################################################################################
Telescope 0.9.2 – Markdown Persistent Cross-Site Scripting
# Exploit Title: Persistent XSS via Markdown on Telescope
Joomla! Component ECommerce-WD 1.2.5 – SQL Injection
Version 1.2.5 of the ECommerce-WD plugin for Joomla! has multiple
Chamilo LMS 1.9.10 – Multiple Vulnerabilities
I. Overview
Moodle 2.5.9/2.6.8/2.7.5/2.8.3 – Block Title Handler Cross-Site Scripting
Moodle 2.5.9/2.6.8/2.7.5/2.8.3 Block Title Handler Cross-Site Scripting
WordPress Plugin SEO by Yoast 1.7.3.3 – Blind SQL Injection
Title: WordPress SEO by Yoast
Smart PHP Poll – Authentication Bypass
# Exploit Title: Smart PHP Poll Auth Bypass Vulnerability
Joomla! Component com_simplephotogallery 1.0 – SQL Injection
#======================================================================================
WoltLab Community Gallery – Persistent Cross-Site Scripting
#Vulnerability title: Community Gallery - Stored Cross-Site Scripting
Codiad 2.5.3 – Local File Inclusion
[+]Title: Codiad v2.5.3 - LFI Vulnerability
CS-Cart 4.2.4 – Cross-Site Request Forgery
# Exploit Title: CS-Cart 4.2.4 CSRF