Command School Student Management System – ‘/sw/admin_terms.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/64707/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Command School Student Management System – ‘/sw/admin_grades.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/64707/info
Joomla! Component com_aclsfgpl – ‘index.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/64705/info
Cubic CMS – Multiple Vulnerabilities
I. BACKGROUND
Middle School Homework Page 1.3 Beta 1 – Multiple Vulnerabilities
Middle School Homework Page V1.3 Beta 1 - Multiple Vulnerabilties
WordPress Plugin Advanced Dewplayer – ‘download-file.php’ Script Directory Traversal
source: https://www.securityfocus.com/bid/64587/info
JForum ‘adminUsers’ Module – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/64540/info
AFCommerce – ‘controlheader.php’ Remote File Inclusion
source: https://www.securityfocus.com/bid/64541/info
AFCommerce – ‘adminpassword.php’ Remote File Inclusion
source: https://www.securityfocus.com/bid/64541/info
AFCommerce – ‘adblock.php’ Remote File Inclusion
source: https://www.securityfocus.com/bid/64541/info
xBoard 5.0/5.5/6.0 – ‘view.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/64619/info
WordPress Theme Persuasion 2.x – Arbitrary File Download / File Deletion
Exploit Title: Persuasion Wordpress Theme - Arbitrary File Download and File Deletion Exploit
Leed – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/64426/info
SonarQube Jenkins Plugin – Plain Text Password
###################################################
Jenkins 1.523 – Persistent HTML Code
###################################################
WordPress Core 2.0.11 – ‘/wp-admin/options-discussion.php’ Script Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/64564/info
Piwigo – ‘admin.php’ Cross-Site Request Forgery (User Creation)
source: https://www.securityfocus.com/bid/64357/info
InstantCMS 1.10.3 – Blind SQL Injection
Advisory ID: HTB23185
Ditto Forensic FieldStation 2013Oct15a – Multiple Vulnerabilities
Title: Ditto Forensic FieldStation, multiple vulnerabilities
PHP – ‘openssl_x509_parse()’ Memory Corruption
SektionEins GmbH
C2C Forward Auction Creator – ‘/auction/casp/Admin.asp’ SQL Injection (Admin Authentication Bypass)
source: https://www.securityfocus.com/bid/64329/info
C2C Forward Auction Creator 2.0 – ‘/auction/asp/list.asp?pa’ SQL Injection
source: https://www.securityfocus.com/bid/64329/info
Penny Auction 5 – SQL Injection
##################################################################################
Lowest Unique Bid Auction – SQL Injection
##################################################################################
iScripts MultiCart 2.4 – Persistent Cross-Site Scripting / Cross-Site Request Forgery / Cross-Site Scripting / Cross-Site Request Forgery / Mass Accounts Takeover
# Exploit Title : iScripts MultiCart same product id for which you submited the review.
Wallpaper Script 3.5.0082 – Persistent Cross-Site Scripting
[~] Exploit Title : Wallpaper Script Stored XSS Vulnerability
Gitlab 6.0 – Persistent Cross-Site Scripting
##Exploit-DB note: Tested commit 10b0b8f1797e6c09b4c063c04a4864ecd31d34f4
iScripts AutoHoster – ‘id’ Local File Inclusion
source: https://www.securityfocus.com/bid/64377/info
iScripts AutoHoster – ‘fname’ Local File Inclusion
source: https://www.securityfocus.com/bid/64377/info
iScripts AutoHoster – ‘tmpid’ Local File Inclusion
source: https://www.securityfocus.com/bid/64377/info
iScripts AutoHoster – ‘main_smtp.php’ Traversal
source: https://www.securityfocus.com/bid/64377/info
iScripts AutoHoster – ‘invno’ SQL Injection
source: https://www.securityfocus.com/bid/64377/info
iScripts AutoHoster – ‘additionalsettings.php’ SQL Injection
source: https://www.securityfocus.com/bid/64377/info
iScripts AutoHoster – ‘checktransferstatusbck.php’ SQL Injection
source: https://www.securityfocus.com/bid/64377/info
iScripts AutoHoster – ‘checktransferstatus.php’ SQL Injection
source: https://www.securityfocus.com/bid/64377/info
Piwigo CMS 2.5.3 – Multiple Web Vulnerabilities
###########################################################
Osclass – Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/64386/info
Joomla! Component Projoom NovaSFH 3.0.2 – ‘upload.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/65438/info
BoastMachine – ‘blog’ SQL Injection
source: https://www.securityfocus.com/bid/64278/info
Nagios XI – ‘tfPassword’ SQL Injection
source: https://www.securityfocus.com/bid/63754/info
WHMCompleteSolution (WHMCS) 4.x/5.x – Multiple Web Vulnerabilities
# Exploit Title: WHMCS v4.x & v5.x - Multiple Web Vulnerabilities
Cythosia 2.x Botnet (C2 Web Panel) – SQL Injection
##########################################################################
Veno File Manager – ‘q’ Arbitrary File Download
source: https://www.securityfocus.com/bid/64346/info
eduTrac – ‘showmask’ Directory Traversal
source: https://www.securityfocus.com/bid/64255/info
eFront 3.6.14 (build 18012) – Multiple Persistent Cross-Site Scripting Vulnerabilities
###########################################################