Fonality trixbox – ‘index.php’ Remote Code Execution
source: https://www.securityfocus.com/bid/68719/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Fonality trixbox – ‘endpointcfg.php’ Directory Traversal
source: https://www.securityfocus.com/bid/68719/info
Fonality trixbox – ‘repo.php’ Directory Traversal
source: https://www.securityfocus.com/bid/68719/info
Fonality trixbox – ‘asterisk_info.php’ Directory Traversal
source: https://www.securityfocus.com/bid/68719/info
Fonality trixbox – ‘index.php’ Directory Traversal
source: https://www.securityfocus.com/bid/68719/info
Fonality trixbox – ‘endpoint_generic.php’ SQL Injection
source: https://www.securityfocus.com/bid/68720/info
OL-Commerce – ‘/OL-Commerce/admin/create_account.php?entry_country_id’ SQL Injection
source: https://www.securityfocus.com/bid/68719/info
OL-Commerce – ‘/OL-Commerce/create_account.php?country’ SQL Injection
source: https://www.securityfocus.com/bid/68719/info
OL-Commerce – ‘/OL-Commerce/affiliate_show_banner.php?affiliate_banner_id’ SQL Injection
source: https://www.securityfocus.com/bid/68719/info
OL-Commerce – ‘/OL-Commerce/affiliate_signup.php?a_country’ SQL Injection
source: https://www.securityfocus.com/bid/68719/info
Omeka 2.2 – Cross-Site Request Forgery / Persistent Cross-Site Scripting
Omeka 2.2 CSRF And Stored XSS Vulnerability
Bilboplanet 2.0 – Multiple Cross-Site Scripting Vulnerabilities
# Exploit Title: Multiple XSS vulnerabilities in Bilboplanet application
Joomla! Component Youtube Gallery 4.1.7 – SQL Injection
# Exploit Title: Joomla component com_youtubegallery - SQL Injection
WEBMIS CMS – Arbitrary File Upload
source: https://www.securityfocus.com/bid/68658/info
WordPress Plugin CopySafe PDF Protection – Arbitrary File Upload
source: https://www.securityfocus.com/bid/68656/info
Shopizer 1.1.5 – Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE-----
WordPress Plugin DZS-VideoGallery – Cross-Site Scripting / Command Injection
source: https://www.securityfocus.com/bid/68525/info
Aerohive HiveOS 5.1r5 < 6.1r5 - Multiple Vulnerabilities
# Exploit Title: Aerohive HiveOS XSS and (limited) LFI
WeBid – Multiple Cross-Site Scripting / LDAP Injection Vulnerabilities
source: https://www.securityfocus.com/bid/68519/info
C99Shell (Web Shell) – ‘c99.php’ Authentication Bypass
# Exploit Title: C99 Shell Authentication Bypass via Backdoor
WordPress Plugin BSK PDF Manager – ‘/wp-admin/admin.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/68488/info
Dolibarr ERP/CRM 3.5.3 – Multiple Vulnerabilities
Vulnerability Name: SQL injection
xClassified – ‘ads.php’ SQL Injection
source: https://www.securityfocus.com/bid/68438/info
AtomCMS – SQL Injection / Arbitrary File Upload
source: https://www.securityfocus.com/bid/68437/info
Frog CMS 0.9.5 – Arbitrary File Upload
Exploit Title: Arbitrary File Upload in Frog CMS 0.9.5
Kerio Control 8.3.1 – Blind SQL Injection
Document Title:
Zurmo CRM – Persistent Cross-Site Scripting
# Affected software: Zurmo CRM
Lunar CMS 3.3 – Remote Command Execution
#!/usr/bin/env python
ZeusCart – ‘prodid’ SQL Injection
source: https://www.securityfocus.com/bid/68182/info
Multiple WordPress Plugins (TimThumb 2.8.13 / WordThumb 1.07) – ‘WebShot’ Remote Code Execution
######################################################################
ZeroCMS 1.0 – ‘zero_transact_article.php’ SQL Injection
ZeroCMS v1.0 SQL Injection Vulnerability (zero_transact_article.php article_id POST parameter)
web2Project 3.1 – Multiple Vulnerabilities
Advisory ID: HTB23213
Cacti Superlinks Plugin 1.4-2 – SQL Injection
$$$$$$\ $$\ $$\ $$$$$$\
ZeroCMS 1.0 – ‘zero_transact_user.php’ Handling Privilege Escalation
import sys,getopt,cookielib,urllib2,urllib
SHOUTcast DNAS 2.2.1 – Persistent Cross-Site Scripting
# Exploit Title: SHOUTcast DNAS v2.2.1 win32 XSS\HTML Injection in Song history (other version may be also affected)
WordPress Plugin Featured Comments – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/67955/info
WordPress Plugin JW Player for Flash & HTML5 Video – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/67954/info
ZeroCMS 1.0 – ‘zero_view_article.php’ SQL Injection
ZeroCMS 1.0 (article_id) SQL Injection Vulnerability
WebTitan 4.01 (Build 68) – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20140606-0 >
eFront 3.6.14.4 – ‘surname’ Persistent Cross-Site Scripting
# Exploit Title: Persistent Cross Site Scripting Vulnerability in eFront
WordPress Theme Elegance – ‘/elegance/lib/scripts/dl-skin.php’ Local File Disclosure
source: https://www.securityfocus.com/bid/67935/info
WordPress Theme Infocus – ‘/infocus/lib/scripts/dl-skin.php’ Local File Disclosure
source: https://www.securityfocus.com/bid/67934/info
Madness Pro 1.14 – SQL Injection
#!/usr/bin/env python2
Madness Pro 1.14 – Persistent Cross-Site Scripting
#!/usr/bin/env python2
PHPBTTracker+ 2.2 – SQL Injection
# Exploit Title: PHPBTTracker+ 2.2 SQL Injection
WordPress Plugin Participants Database 1.5.4.8 – SQL Injection
Yarubo #1: Arbitrary SQL Execution in Participants Database for Wordpress
WordPress Plugin HDW Player – ‘/wp-admin/admin.php’ SQL Injection
source: https://www.securityfocus.com/bid/69105/info