SaltOS – ‘download.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/55117/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
IlohaMail Webmail – Persistent Cross-Site Scripting
#!/usr/bin/python
Elastix 2.2.0 – ‘graph.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/55078/info
Jaow CMS 2.3 – Blind SQL Injection
# Author: loneferret of Offensive Security
webid 1.0.4 – Multiple Vulnerabilities
:::::::-. ... ::::::. :::.
hastymail2 webmail 1.1 rc2 – Persistent Cross-Site Scripting
#!/usr/bin/python
Inferno vBShout 2.5.2 – SQL Injection
====================================================================
Jaow CMS 2.3 – Cross-Site Request Forgery
##########################################
ProQuiz 2.0.2 – Cross-Site Request Forgery
##########################################
Roundcube Webmail 0.8.0 – Persistent Cross-Site Scripting
#!/usr/bin/python
sphpforum 0.4 – Multiple Vulnerabilities
# Author: loneferret of Offensive Security
xt:Commerce 3.04 SP2.1 – Blind SQL Injection
+---------------------------------+
MobileCartly 1.0 – Arbitrary File Upload
# Exploit Title: MobileCartly 1.0 Remote File Upload Vulnerability
MaxForum 1.0.0 – Local File Inclusion
+---------------------------------------+
Total Shop UK eCommerce CodeIgniter – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/54985/info
Hotel Booking Portal 0.1 – Multiple Vulnerabilities
# -----------------------------------------------------------
WordPress Plugin RSVPMaker 2.5.4 – Persistent Cross-Site Scripting
# Exploit Title: WordPress RSVPMaker v2.5.4 Persistent XSS
FileContral – Local File Inclusion / Local File Disclosure
source: https://www.securityfocus.com/bid/55891/info
MindTouch DekiWiki – Multiple Local/Remote File Inclusions
source: https://www.securityfocus.com/bid/54991/info
ProQuiz 2.0.2 – Multiple Vulnerabilities
####################################################
GalaxyScripts Mini File Host and DaddyScripts Daddy’s File Host – Local File Inclusion
source: https://www.securityfocus.com/bid/54992/info
mIRC – ‘projects.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/54989/info
MobileCartly 1.0 – Arbitrary File Write
# -----------------------------------------------------------
WordPress Plugin Mz-jajak 2.1 – SQL Injection
# Exploit Title: WordPress Mz-jajak plugin query("UPDATE " . $table_name . " SET ".$answert."=".$answert."+1 WHERE id...
MobileCartly 1.0 – Arbitrary File Deletion
# Exploit Title: MobileCartly 1.0
Hotel Booking Portal 0.1 – Multiple SQL Injections / Cross-Site Scripting
source: https://www.securityfocus.com/bid/54980/info
dirLIST 0.3.0 – Local File Inclusion
source: https://www.securityfocus.com/bid/54933/info
PBBoard – ‘admin.php?xml_name’ Arbitrary PHP Code Execution
source: https://www.securityfocus.com/bid/54916/info
PBBoard – ‘member_id’ Validation Password Manipulation
source: https://www.securityfocus.com/bid/54916/info
PBBoard – ‘index.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/54916/info
phpList 2.10.18 – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/54912/info
AraDown – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/54891/info
phpList 2.10.18 – ‘unconfirmed’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/54887/info
T-dah Webmail Client 3.2.0-2.3 – Persistent Cross-Site Scripting
#!/usr/bin/python
WordPress Plugin simplemail 1.0.6 – Persistent Cross-Site Scripting
#!/usr/bin/python
WordPress Plugin postie 1.4.3 – Persistent Cross-Site Scripting
#!/usr/bin/python
Joomla! Component com_enmasse 1.2.0.4 – SQL Injection
# Exploit Title: Joomla com_enmasse Remote Exploit