WordPress Plugin Spider Event Calendar 1.3.0 – Multiple Vulnerabilities
[waraxe-2013-SA#104] - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WordPress Plugin User Role Editor 3.12 – Cross-Site Request Forgery
# Exploit Title: WP User Role Editor CSRF
Vanilla Forums 2.0.18.8 – Multiple Vulnerabilities
# Exploit Title: Vanilla Forums Insecure Permissions Vulnerability
AVE.CMS 2.09 – ‘index.php?module’ Blind SQL Injection
#!/usr/bin/env python
Matterdaddy Market – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/60150/info
Weyal CMS – Multiple SQL Injections
source: https://www.securityfocus.com/bid/60089/info
Kimai 0.9.2.1306-3 – SQL Injection
# Exploit Title: Kimai 0.9.2.1306-3 SQLi
WordPress Plugin ProPlayer 4.7.9.1 – SQL Injection
##############
Exponent CMS 2.2.0 Beta 3 – Multiple Vulnerabilities
Advisory ID: HTB23154
PHP-Charts 1.0 – Code Execution
# Exploit Title: PHP-CHARTS v1.0 code execution vulnerability
Drupal Module CKEditor < 4.1WYSIWYG (Drupal 6.x/7.x) - Persistent Cross-Site Scripting
# Exploit Title: Persistent XSS in wysiwyg CKEditor
WordPress Plugin WP Cleanfix – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/59940/info
WordPress Plugin Mail On Update – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/59932/info
Jojo CMS – ‘x-forwarded-for’ HTTP header SQL Injection
source: https://www.securityfocus.com/bid/59934/info
Jojo CMS – ‘search’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/59933/info
WordPress Plugin wp-FileManager – ‘path’ Arbitrary File Download
source: https://www.securityfocus.com/bid/59886/info
Open Flash Chart – ‘get-data’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/59928/info
Gallery Server Pro – Arbitrary File Upload
source: https://www.securityfocus.com/bid/59831/info
UMI CMS 2.9 – Cross-Site Request Forgery
Advisory ID: HTB23151
Alienvault Open Source SIEM (OSSIM) 4.1.2 – Multiple SQL Injections
RunRunLevel Web Security Research - AlienVault OSSIM multiple SQL Injection vulnerabilities
WHMCS 4.x – ‘invoicefunctions.php?id’ SQL Injection
# Title: WHMCS 4.x SQL Injection Vulnerability
Invision Power Board 1.x?/2.x/3.x – Admin Takeover
IPB (Invision Power Board) all versions (1.x? / 2.x / 3.x) Admin account Takeover leading to code execution
WordPress Plugin wp-FileManager – Arbitrary File Download
Title: Wordpress wp-FileManager Local File Download Vulnerability
Joomla! Component com_s5clanroster – ‘id’ SQL Injection
Joomla Component com_s5clanroster Sql Injection Vulnerability
Ajax Availability Calendar 3.x – Multiple Vulnerabilities
Ajax Availability Calendar 3.X.X Multiple Vulnerabilties
Getsimple CMS 3.2.1 – Arbitrary File Upload
GetSimpleCMS Version 3.2.1 Arbitrary File Upload Vulnerability
WordPress Plugin Securimage-WP – ‘siwp_test.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/59816/info
Securimage – ‘example_form.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/59796/info
MoinMoin – Arbitrary Command Execution
#!/usr/bin/env python
MyBB Game Section Plugin – ‘games.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/59690/info
NetApp OnCommand System Manager – ‘/zapiServlet’ User Management Interface Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/59688/info
NetApp OnCommand System Manager – ‘/zapiServlet’ CIFS Configuration Management Interface Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/59688/info
b2evolution 4.1.6 – Multiple Vulnerabilities
Advisory ID: HTB23152
OpenDocMan 1.2.6.5 – Persistent Cross-Site Scripting
# Exploit Title: OpenDocMan 1.2.6.5 Stored/Reflective XSS
WeBid 1.0.6 – Multiple Vulnerabilities
# Title: Webid Blind SQL Injection / Local File Disclosure Vulnerability
Joomla! Component dj-classifieds 2.0 – Blind SQL Injection
$$$$$$\ $$\ $$\ $$$$$$\
Craigslist Gold – SQL Injection
# Exploit Title: Craigslist Clone Gold SQL injection Vulnerability
Social Site Generator 2.2 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: social generator Remote Add Admin Exploit
EggBlog 4.1.2 – Arbitrary File Upload
# Exploit Title: eggBlog Arbitrary File Upload Vulnerability
Foe CMS 1.6.5 – Multiple Vulnerabilities
Title: Foe CMS 1.6.5 SQL Injection Vulnerability
PHPValley Micro Jobs Site Script – Spoofing
source: https://www.securityfocus.com/bid/59536/info
Joomla! 3.0.3 – ‘remember.php’ PHP Object Injection
------------------------------------------------------------------
phpMyAdmin 3.5.8/4.0.0-RC2 – Multiple Vulnerabilities
[waraxe-2013-SA#103] - Multiple Vulnerabilities in phpMyAdmin
WordPress Plugin WP Super Cache – PHP Remote Code Execution
source: https://www.securityfocus.com/bid/59470/info
SMF – ‘/index.php’ HTML Injection / Multiple PHP Code Injection Vulnerabilities
source: https://www.securityfocus.com/bid/59409/info
VoipNow 2.5 – Local File Inclusion
+ Application : Voipnow
Joomla! Component com_civicrm 4.2.2 – Remote Code Injection
# Exploit Title: joomla component com_civicrm remode code injection exploit