php

Collabtive 1.0 – ‘manageuser.php’ SQL Injection

# Exploit Title: Collabtive 1.0 SQLi

phpEventCalendar 0.2.3 – Multiple Vulnerabilities

phpEventCalendar v.0.2.3 Multiple Vulnerabilities

Alienvault Open Source SIEM (OSSIM) 4.1 – Multiple SQL Injection Vulnerabilities

# Title: Alienvault OSSIM Open Source SIEM 4.1 Multiple SQL Vulnerabilities

Top Games Script 1.2 – ‘play.php?gid’ SQL Injection

TopGamesScript-v1.2 (play.php) Sql Injection Vulnerability

GLPI 0.83.8 – Multiple Vulnerabilities

GLPI v0.83.8 Multiple Error-based SQL Injection Vulnerabilities

Joomla! Component com_rokdownloads – Arbitrary File Upload

source: https://www.securityfocus.com/bid/60690/info

Monkey CMS – Multiple Vulnerabilities

###########################################################################################

imacs CMS 0.3.0 – Unrestricted Arbitrary File Upload

et-chat – Privilege Escalation / Arbitrary File Upload

source: https://www.securityfocus.com/bid/60660/info

BloofoxCMS – ‘index.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/60585/info

Simple File Manager 024 – Authentication Bypass

# Exploit Title: Simple File Manager v.024 Login Bypass Vulnerability

SPBAS Business Automation Software 2012 – Multiple Vulnerabilities

# SPBAS Business Automation Software- XSS & CSRF Vulnerability

Havalite CMS 1.1.7 – Unrestricted Arbitrary File Upload

Fly-High CMS 2012-07-08 – Unrestricted Arbitrary File Upload

WordPress Plugin Ultimate WordPress Auction Plugin 1.0 – Cross-Site Request Forgery

=============================================================

ZamFoo – ‘date’ Remote Command Injection

source: https://www.securityfocus.com/bid/60826/info

LibrettoCMS 2.2.2 – Arbitrary File Upload

# Exploit Title : LibrettoCMS 2.2.2 Malicious File Upload

WordPress Plugin NextGEN Gallery – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/60533/info

mkCMS – ‘index.php’ Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/60488/info

Simple PHP Agenda 2.2.8 – ‘edit_event.php?eventid’ SQL Injection

=============================================

Fobuc Guestbook 0.9 – SQL Injection

# Exploit Title : Fobuc Guestbook 0.9 SQL Injection

NanoBB 0.7 – Multiple Vulnerabilities

# Exploit Title : NanoBB 0.7 Multiple Vulnerabilities

Weathermap 0.97c – ‘mapname’ Local File Inclusion

=============================================

WordPress Plugin WP-SendSms 1.0 – Multiple Vulnerabilities

=============================================================

ScriptCase – ‘scelta_categoria.php’ SQL Injection

source: https://www.securityfocus.com/bid/60461/info

Lokboard – ‘index_4.php’ PHP Code Injection

source: https://www.securityfocus.com/bid/60459/info

HP Insight Diagnostics 9.4.0.4710 – Local File Inclusion

source: https://www.securityfocus.com/bid/60449/info

HP Insight Diagnostics – Remote Code Injection

source: https://www.securityfocus.com/bid/60447/info

Concrete5 CMS 5.6.1.2 – Multiple Vulnerabilities

=============================================================

WordPress Theme Ambience – ‘src’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/60458/info

Max Forum – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/60455/info

Caucho Resin – ‘index.php?logout’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/60426/info

Caucho Resin – ‘/resin-admin/’ URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/60426/info

AfterLogic WebMail Lite PHP 7.0.1 – Cross-Site Request Forgery

1.

PHP Ticket System Beta 1 – Cross-Site Request Forgery

1.

Ruubikcms 1.1.1 – Persistent Cross-Site Scripting

# Exploit Title: [ruubikcms v1.1.1 Stored XSS]

Plesk < 9.5.4 - Remote Command Execution

Plesk Apache zeroday / June 2013

Ruubikcms 1.1.1 – ‘tinybrowser.php?folder’ Directory Traversal

# Exploit Title: [ruubikcms v1.1.1 Path Traversal vulnerability]

Cuppa CMS – ‘/alertConfigField.php’ Local/Remote File Inclusion

# Exploit Title : Cuppa CMS File Inclusion

CMS Gratis Indonesia – ‘config.php’ PHP Code Injection

source: https://www.securityfocus.com/bid/60337/info

Telaen 2.7.x – Open Redirection

source: https://www.securityfocus.com/bid/60290/info

Telaen 2.7.x – Cross-Site Scripting

source: https://www.securityfocus.com/bid/60288/info

Telaen – Information Disclosure

source: https://www.securityfocus.com/bid/60340/info

PHD Help Desk 2.12 – SQL Injection

# Exploit Title: PHD Help Desk 2.12 SQLi

PhpTax 0.8 – File Manipulation ‘newvalue’ / Remote Code Execution

#

HostBill – ‘cpupdate.php’ Authentication Bypass

source: https://www.securityfocus.com/bid/60958/info

Elastix – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/60262/info

WordPress Plugin ADIF Log Search Widget – ‘logbook_search.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/60198/info

RadioCMS 2.2 – ‘menager.php?playlist_id’ SQL Injection

#################################################

WordPress Plugin Spider Catalog 1.4.6 – Multiple Vulnerabilities

[waraxe-2013-SA#105] - Multiple Vulnerabilities in Spider Catalog Wordpress Plugin