WordPress Plugin Tera Charts (tera-charts) – ‘/charts/zoomabletreemap.php?fn’ Directory Traversal
source: https://www.securityfocus.com/bid/68662/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WordPress Plugin Tera Charts (tera-charts) – ‘/charts/treemap.php?fn’ Directory Traversal
source: https://www.securityfocus.com/bid/68662/info
WordPress Plugin ENL NewsLetter – ‘/wp-admin/admin.php’ SQL Injection
source: https://www.securityfocus.com/bid/68558/info
WordPress Plugin WP Rss Poster – ‘/wp-admin/admin.php’ SQL Injection
source: https://www.securityfocus.com/bid/68557/info
WordPress Plugin BookX 1.7 – ‘bookx_export.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/68556/info
webEdition CMS – ‘we_fs.php’ SQL Injection
source: https://www.securityfocus.com/bid/67689/info
Sharetronix 3.3 – Multiple Vulnerabilities
Advisory ID: HTB23214
AuraCMS 3.0 – Multiple Vulnerabilities
# Exploit Title: AuraCMS 3.0 Multiple Vulnerabilities
Videos Tube 1.0 – Multiple SQL Injections
# Exploit Title: Videos Tube SQL Injection and Remote Code Execution
User Cake – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/67604/info
PHP-Nuke ‘Submit_News’ Component – SQL Injection
source: https://www.securityfocus.com/bid/67656/info
WordPress Plugin Booking System (Booking Calendar) – ‘booking_form_id’ SQL Injection
source: https://www.securityfocus.com/bid/67535/info
Clipperz Password Manager – ‘/backend/PHP/src/setup/rpc.php’ Remote Code Execution
source: https://www.securityfocus.com/bid/67498/info
Wiser Backup – Information Disclosure
source: https://www.securityfocus.com/bid/67481/info
WordPress Plugin NextGEN Gallery 1.9.1 – ‘photocrati_ajax’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/68414/info
Softmatica SMART iPBX – Multiple SQL Injections
source: https://www.securityfocus.com/bid/67465/info
XOOPS Glossaire Module – ‘/modules/glossaire/glossaire-aff.php’ SQL Injection
source: https://www.securityfocus.com/bid/67460/info
SPIP CMS < 2.0.23/ 2.1.22/3.0.9 - Privilege Escalation
#!/usr/bin/env python
WordPress Plugin cnhk-Slideshow – Arbitrary File Upload
source: https://www.securityfocus.com/bid/67469/info
eGroupWare 1.8.006 – Multiple Vulnerabilities
Advisory ID: HTB23212
Seo Panel – ‘file’ Directory Traversal
source: https://www.securityfocus.com/bid/67911/info
Alienvault Open Source SIEM (OSSIM) 4.6.1 – (Authenticated) SQL Injection (Metasploit)
Exploit Title: AlienVault newpolicyform.php SQLi
CMS Touch – ‘news.php?News_ID’ SQL Injection
source: https://www.securityfocus.com/bid/67377/info
CMS Touch – ‘pages.php?Page_ID’ SQL Injection
source: https://www.securityfocus.com/bid/67377/info
TOA – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/67291/info
Cobbler 2.4.x < 2.6.x - Local File Inclusion
# Exploit Title: Local File Inclusion vulnerability in cobbler
Collabtive 1.2 – Persistent Cross-Site Scripting
Vulnerability title: Stored XSS vulnerability in Collabtive application
Collabtive 1.2 – SQL Injection
Vulnerability title: SQL Injection / SQL Error message in Collabtive
Caldera – ‘/costview2/printers.php?tr’ SQL Injection
source: https://www.securityfocus.com/bid/67256/info
Caldera – ‘/costview2/jobs.php?tr’ SQL Injection
source: https://www.securityfocus.com/bid/67256/info
PrestaShop – ‘getSimilarManufacturer.php?id_manufacturer’ SQL Injection
source: https://www.securityfocus.com/bid/67249/info
TeamHelpdesk Customer Web Service (CWS) 8.3.5 & Technician Web Access (TWA) 8.3.5 – Remote User Credential Dump
# Exploit Title: Team Helpdesk Customer Web Service (CWS) Remote User Credential Dump exploit
Crime24 Stealer Panel 1.0 – Multiple Vulnerabilities
#=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
NULL NUKE CMS 2.2 – Multiple Vulnerabilities
NULL NUKE CMS v2.2 Multiple Vulnerabilities
GeoCore MAX DB Ver. 7.3.3 – Blind SQL Injection
###########################################################################################
Adem 0.5.1 – Local File Inclusion
----------[exploit Debut]
ApPHP MicroBlog 1.0.1 – Remote Command Execution
#!/usr/bin/python
ApPHP MicroBlog 1.0.1 – Multiple Vulnerabilities
----------[exploit Debut]
Alienvault 4.3.1 – SQL Injection / Cross-Site Scripting
AlienVault 4.3.1 Unauthenticated SQL Injection
WD Arkeia Virtual Appliance 10.2.9 – Local File Inclusion
SEC Consult Vulnerability Lab Security Advisory < 20140423-0 >
dompdf 0.6.0 – ‘dompdf.php?read’ Arbitrary File Read
Vulnerability title: Arbitrary file read in dompdf
WordPress Plugin Work-The-Flow 1.2.1 – Arbitrary File Upload
# Author: nopesled
Bonefire 0.7.1 – Reinstall Admin Account
#!/usr/bin/env python
iDevAffiliate – ‘idevads.php’ SQL Injection
source: https://www.securityfocus.com/bid/67031/info
kitForm CRM Extension 0.43 – ‘sorter.ph?sorter_value’ SQL Injection
-----BEGIN PGP SIGNED MESSAGE-----
PTCeffect 4.6 – Local File Inclusion / SQL Injection
# Exploit Title: PTCeffect LFI & SQL Injection Vulnerabilities
CMSimple 4.4/4.4.2 – Remote File Inclusion
=============================================================================================================