Ovidentia 7.9.4 – Multiple Vulnerabilities
Ovidentia 7.9.4 Multiple Remote Vulnerabilities
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
CBHotel Hotel Software and Booking system 1.8 – Multiple Vulnerabilities
###########################################################################################
Xibo – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/62064/info
Xibo – ‘layout’ HTML Injection
source: https://www.securityfocus.com/bid/62063/info
Twilight CMS – DeWeS Web Server Directory Traversal
source: https://www.securityfocus.com/bid/61906/info
WordPress Plugin ThinkIT 0.1 – Multiple Vulnerabilities
#####################################################################################################################...
Bitbot (C2 Web Panel) – ‘gate2.php’ Multiple Vulnerabilities
# Exploit Title: Bitbot C2 Panel gate2.php SQLi + XSS
Bo-Blog 2.1.1 – Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/61880/info
Quack Chat 1.0 – Multiple Vulnerabilities
###########################################################################################
ACal 2.2.6 – ‘view’ Local File Inclusion
source: https://www.securityfocus.com/bid/61801/info
Alibaba Clone Tritanium Version – ‘news_desc.html’ SQL Injection
#--------------------------------------------------------
w-CMS 2.0.1 – Remote Code Execution
Exploit Title: w-CMS 2.0.1 Remote Code Execution Vulnerability
DotNetNuke DNNArticle Module 10.0 – SQL Injection
Title: DotNetNuke (DNNArticle Module) SQL Injection Vulnerability
Spitfire CMS 1.1.4 – Cross-Site Request Forgery
#####################################################################################################################...
Pligg CMS 2.0.0rc2 – Cross-Site Request Forgery (File Creation)
---------------------------------------------------
Mac’s CMS 1.1.4 – Multiple Vulnerabilities
#####################################################################################################################...
KCFinder 2.51 – Local File Disclosure
---------------------------------------------------
CakePHP 2.2.8/2.3.7 – AssetDispatcher Class Local File Inclusion
source: https://www.securityfocus.com/bid/61746/info
Joomla! Component redSHOP 1.2 – SQL Injection
--------------------------------------------
Integrated CMS 1.0 – SQL Injection
==========================================================================================================
Gnew 2013.1 – Multiple Vulnerabilities (1)
Gnew v2013.1 Multiple XSS And SQL Injection Vulnerabilities
PHPVID 1.2.3 – Multiple Vulnerabilities
##################################################################################
Ajax PHP Penny Auction 1.x 2.x – Multiple Vulnerabilities
################################################################################
MLMAuction Script – ‘gallery.php?id’ SQL Injection
##################################################################################
Open Real Estate CMS 1.5.1 – Multiple Vulnerabilities
#####################################################################################################################...
Tribq CMS 5.2.7 – Cross-Site Request Forgery (Adding/Editing New Administrator Account)
###########################################################################################
Advanced Guestbook – ‘addentry.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/61735/info
PHPFox 3.6.0 (build3) – Multiple SQL Injections
------------------------------------------------------------
BigTree CMS 4.0 RC2 – Multiple Vulnerabilities
Advisory ID: HTB23165
Joomla! Component com_sectionex 2.5.96 – SQL Injection
-------------------------------------------------------------------------------------
WordPress Plugin Booking Calendar 4.1.4 – Cross-Site Request Forgery
###########################################################################################
Pluck CMS 4.7 – HTML Code Injection
###########################################################################################
RiteCMS 1.0.0 – Multiple Vulnerabilities
###########################################################################################
Cotonti 0.9.13 – SQL Injection
Advisory ID: HTB23164
Telmanik CMS Press 1.01b – ‘pages.php?page_name’ SQL Injection
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
vTiger CRM 5.4.0 SOAP – Multiple Vulnerabilities
---------------------------------------------------------------------------------
BigACE 2.7.8 – Cross-Site Request Forgery (Add Admin)
###########################################################################################
FunGamez – Arbitrary File Upload
# FunGamez Remote File Upload Vulnerability
Ginkgo CMS – ‘index.php?rang’ SQL Injection
__ ___ ________ __ __ ____ __ __
SocialEngine Timeline Plugin 4.2.5p9 – Arbitrary File Upload
# Exploit Title: Sending php file in the timeline plugin cover image of SocialEngine 4.5
SilverStripe CMS – ‘MemberLoginForm.php’ Information Disclosure
source: https://www.securityfocus.com/bid/61578/info
Jahia xCM – ‘/administration/’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/61571/info
Jahia xCM – ‘/engines/manager.jsp?site’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/61571/info