php

Joomla! Component com_simplephotogallery 1.0 – Arbitrary File Upload

######################################################################

GeniXCMS 0.0.1 – Multiple Vulnerabilities

GeniXCMS v0.0.1 Remote Unauthenticated SQL Injection Exploit

CodoForum 2.5.1 – Arbitrary File Download

# Exploit Title: Codoforum 2.5.1 Arbitrary File Download

WordPress Plugin Reflex Gallery 3.1.3 – Arbitrary File Upload

# Exploit Title: Wordpress Plugin Reflex Gallery - Arbitrary File Upload

Elastix 2.x – Blind SQL Injection

# Title: Elastix v2.x Blind SQL Injection Vulnerability

PHP Betoffice (Betster) 1.0.4 – Authentication Bypass / SQL Injection

ProjectSend r561 – SQL Injection

#Vulnerability title: ProjectSend r561 - SQL injection vulnerability

WordPress Theme DesignFolio Plus 1.2 – Arbitrary File Upload

#########################################################

BEdita CMS 3.5.0 – Multiple Vulnerabilities

BEdita CMS - XSS & CSRF Vulnerability in Version 3.5.0

Seagate Business NAS – Remote Command Execution (Metasploit)

##

PHPMoAdmin – Unauthorized Remote Code Execution

######################################################################

WordPress Plugin cp-multi-view-calendar 1.1.4 – SQL Injection

# Exploit Title: WordPress: cp-multi-view-calendar.1.1.4 [SQL Injection

WordPress Theme Photocrati 4.x – SQL Injection / Cross-Site Scripting

# Exploit Title: [ wordpress theme photocrati 4.X.X SQL INJECTION ]

vBulletin vBSEO 4.x – ‘visitormessage.php’ Remote Code Injection

#################################################################################################################

WordPress Plugin Calculated Fields Form 1.0.10 – SQL Injection

[+] Calculated Fields Form Wordpress Plugin

GoAutoDial CE 2.0 – Arbitrary File Upload

# Title : GoAutoDial CE 2.0 Shell Upload

WordPress Plugin Easy Social Icons 1.2.2 – Cross-Site Request Forgery

====================================================

phpBugTracker 1.6.0 – Multiple Vulnerabilities

Advisory: Multiple SQLi, stored/reflecting XSS- and CSRF-vulnerabilities in

Zeuscart 4.0 – Multiple Vulnerabilities

Advisory: Multiple reflecting XSS-, SQLi and

PHP DateTime – Use-After-Free

Use After Free Vulnerability in unserialize() with DateTime* [CVE-2015-0273]

Zabbix 2.0.5 – Cleartext ldap_bind_Password Password Disclosure (Metasploit)

##

Clipbucket 2.7 RC3 0.9 – Blind SQL Injection

# Exploit Title : Clipbucket 2.7 RC3 0.9 Blind SQL Injection

WeBid 1.1.1 – Unrestricted Arbitrary File Upload

Beehive Forum 1.4.4 – Persistent Cross-Site Scripting

Document Title:

Piwigo 2.7.3 – Multiple Vulnerabilities

Advisory: Reflecting XSS- and SQL Injection vulnerability in CMS Piwigo

Piwigo 2.7.3 – SQL Injection

[CVE-2015-1517] Piwigo - SQL Injection in Version 2.7.3

jQuery – jui_filter_rules PHP Code Execution

-----BEGIN PGP SIGNED MESSAGE-----

WordPress Plugin Duplicator 0.5.8 – Privilege Escalation

# Exploit Title: Duplicator 0.5.8 Privilege Escalation

GuppY CMS 5.0.9 < 5.00.10 - Multiple Cross-Site Request Forgery Vulnerabilities

Guppy CMS 5.0.9/5.00.10 – Authentication Bypass/Change Email

GuppY CMS 5.0.9 & 5.00.10 Authentication bypass/Change email. Other versions may be vulnerable but weren't tested.

eTouch SamePage 4.4.0.0.239 – Multiple Vulnerabilities

eTouch SamePage v4.4.0.0.239 multiple vulnerabilities

WordPress Plugin Fancybox 3.0.2 – Persistent Cross-Site Scripting

# Exploit Title: Wordpress plugin Fancybox-for-WordPress Stored XSS

WordPress Plugin WonderPlugin Audio Player 2.0 – Blind SQL Injection / Cross-Site Scripting

# Exploit Title: WonderPlugin Audio Player 2.0 Blind SQL Injection and XSS

WordPress Plugin Webdorado Spider Event Calendar 1.4.9 – SQL Injection

Exponent CMS 2.3.1 – Multiple Cross-Site Scripting Vulnerabilities

######################

WordPress Plugin Video Gallery 2.7.0 – SQL Injection

######################

Pandora FMS 5.1 SP1 – SQL Injection

Document Title:

WordPress Plugin Survey and Poll 1.1 – Blind SQL Injection

#################################################################

WordPress Plugin WP EasyCart – Unrestricted Arbitrary File Upload (Metasploit)

##

Fork CMS 3.8.5 – SQL Injection

[CVE-2015-1467] Fork CMS - SQL Injection in Version 3.8.5

Chamilo LMS 1.9.8 – Blind SQL Injection

# Exploit Title: Chamilo LMS 1.9.8 Blind SQL Injection

StaMPi – Local File Inclusion

# Exploit Title: StaMPi - Local File Inclusion

u5CMS 3.9.3 – Multiple Persistent Cross-Site Scripting / Reflected Cross-Site Scripting Vulnerabilities

u5CMS 3.9.3 Multiple Stored And Reflected XSS Vulnerabilities

u5CMS 3.9.3 – ‘thumb.php’ Local File Inclusion

u5CMS 3.9.3 (thumb.php) Local File Inclusion Vulnerability

u5CMS 3.9.3 – Multiple SQL Injections

u5CMS 3.9.3 Multiple SQL Injection Vulnerabilities

u5CMS 3.9.3 – ‘deletefile.php’ Arbitrary File Deletion

u5CMS 3.9.3 (deletefile.php) Arbitrary File Deletion Vulnerability

RedaxScript CMS 2.2.0 – SQL Injection

# Exploit Title: Radexscript CMS 2.2.0 - SQL Injection vulnerability

Magento Server MAGMI Plugin – Multiple Vulnerabilities

Exploit Title: Magento Server MAGMI Plugin Local File Inclusion And Cross Site Scripting

Pragyan CMS 3.0 – SQL Injection

Advisory: SQL injection vulnerability in Pragyan CMS v.3.0

Sefrengo CMS 1.6.1 – Multiple SQL Injections

# Exploit Title: Sefrengo CMS v1.6.1 - Multiple SQL Injection Vulnerabilities