SePortal 2.5 – SQL Injection (2)
####################################################################
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
osCMax 2.5 – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/66272/info
Joomla! Component AJAX Shoutbox 1.6 – SQL Injection
###################################################################################
OpenSupports 2.0 – Blind SQL Injection
Open Support Blind SQL Injection v2.0 Vulnerability
OpenSupports 2.x – Authentication Bypass / Cross-Site Request Forgery
[+] Author: TUNISIAN CYBER
OpenX 2.8.x – Multiple Cross-Site Request Forgery Vulnerabilities
source: https://www.securityfocus.com/bid/66251/info
Church Edit – Blind SQL Injection
Exploit Title: Church Edit Blind SQL Injection
Fonality trixbox – ‘mac’ Remote Code Injection
# App : Trixbox all versions
Fonality trixbox – SQL Injection
# Exploit Title: SQL injection in Trixbox All Versions
FreePBX 2.11.0 – Remote Command Execution
#!/usr/bin/perl
vTiger CRM 5.4.0/6.0 RC/6.0.0 GA – ‘browse.php’ Local File Inclusion
CVE: CVE-2014-1222
LuxCal 3.2.2 – Cross-Site Request Forgery / Blind SQL Injection
[+] Author: TUNISIAN CYBER
GNUPanel 0.3.5_R4 – Multiple Vulnerabilities
# Exploit Title :GNUpanel 0.3.5_R4 - Multiple Vulnerabilities
MeiuPic 2.1.2 – ‘ctl’ Local File Inclusion
source: https://www.securityfocus.com/bid/66317/info
ClipSharePro 4.1 – Local File Inclusion
# Exploit Title : ClipSharePro 0){ $config_file = $_GET['config_file']; }
Professional Designer E-Store – ‘id’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/66100/info
Ajax File Manager – Directory Traversal
# Exploit Title: Ajax File Manager DirectoryTraversal
WordPress Plugin Premium Gallery Manager – Arbitrary File Upload
source: https://www.securityfocus.com/bid/66044/info
Cory Jobs Search – ‘cid’ SQL Injection
source: https://www.securityfocus.com/bid/65969/info
Ilch CMS 2.0 – Persistent Cross-Site Scripting
Advisory ID: HTB23203
OpenDocMan 1.2.7 – Multiple Vulnerabilities
Advisory ID: HTB23202
WordPress Plugin Relevanssi – ‘category_name’ SQL Injection
source: https://www.securityfocus.com/bid/65960/info
SpagoBI 4.0 – Arbitrary Cross-Site Scripting / Arbitrary File Upload
###################################################
SpagoBI 4.0 – Persistent HTML Script Insertion
###################################################
SpagoBI 4.0 – Persistent Cross-Site Scripting
###################################################
couponPHP CMS 1.0 – Multiple Persistent Cross-Site Scripting / SQL Injections
couponPHP CMS 1.0 Multiple Stored XSS and SQL Injection Vulnerabilities
webERP 4.11.3 – ‘SalesInquiry.php?SortBy’ SQL Injection
# ==============================================================
WordPress Plugin VideoWhisper 4.27.3 – Multiple Vulnerabilities
Advisory ID: HTB23199
Webuzo 2.1.3 – Multiple Vulnerabilities
# Exploit Title: Webuzo Multiple Vulnerabilities
PHP Ticket System Beta 1 – ‘get_all_created_by_user.php?id’ SQL Injection
# ==============================================================
PHP-CMDB 0.7.3 – Multiple Vulnerabilities
# ==============================================================
GDL 4.2 – Multiple Vulnerabilities
-> Title : GDL 4.2 Multiple Vulnerabilities
POSH 3.1.x – ‘addtoapplication.php’ SQL Injection
source: https://www.securityfocus.com/bid/65817/info
Piwigo 2.6.1 – Cross-Site Request Forgery
# Exploit Title: piwigo 2.6.1 - CSRF
Sendy 1.1.8.4 – SQL Injection
# Exploit Title: Sendy SqlInject
ATutor – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/65744/info
WordPress Plugin AdRotate 3.9.4 – ‘clicktracker.ph?track’ SQL Injection
Advisory ID: HTB23201
ILIAS 4.4.1 – Multiple Vulnerabilities
# ==============================================================
Jorjweb – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/66377/info
Stark CRM 1.0 – Multiple Vulnerabilities
Stark CRM v1.0 Multiple Script Injection And Session Riding Vulnerabilities
WordPress Plugin NextGEN Gallery – ‘jqueryFileTree.php’ Directory Traversal
source: https://www.securityfocus.com/bid/65637/info
MODx Evogallery Module – ‘Uploadify.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/65646/info
Concrete5 CMS 5.6.2.1 – ‘index.php?cID’ SQL Injection
# Exploit Title: Concrete5 sql injection
Pina CMS – Multiple Vulnerabilities
############################################################################
Joomla! Component com_wire_immogest – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/65606/info
i-doit Pro – ‘objID’ SQL Injection
source: https://www.securityfocus.com/bid/65557/info