php

CLscript CMS 3.0 – Multiple Vulnerabilities

Title:

Freeside SelfService CGI/API 2.3.3 – Multiple Vulnerabilities

Title:

Guestbook Scripts PHP 1.5 – Multiple Vulnerabilities

Title:

Classified Ads Script PHP – ‘admin.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/54299/info

Webify Link Directory – SQL Injection

# Exploit Title: Webify Link Directory / SQL Injection

Tiki Wiki CMS Groupware 8.3 – ‘Unserialize()’ PHP Code Execution

WordPress Plugin MoodThingy Widget 0.8.7 – Blind SQL Injection

# Exploit Title: WordPress MoodThingy Mood Rating Widget v0.8.7 Blind SQL Injection

WordPress Plugin custom tables – ‘key’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54326/info

PHP MBB – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/54271/info

phpMyBackupPro 2.2 – Local File Inclusion

:::::::-. ... ::::::. :::.

CLscript Classified Script 3.0 – SQL Injection

# Exploit Title: CLscript - Classified Script 3.0 / SQL Injection

gpEasy CMS Minishop 1.5 Plugin – Persistent Cross-Site Scripting

# Exploit Title: gp easy CMS Minishop 1.5 plugin persistent XSS

Getsimple CMS Items Manager Plugin – ‘PHP.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54255/info

WordPress Plugin Backup 2.0.1 – Information Disclosure

# Exploit Title: WordPress Backup plugin exposes site data

WordPress Plugin Paid Business Listings 1.0.2 – Blind SQL Injection

# Exploit Title: WordPress Paid Business Listings v1.0.2 Blind SQL Injection

LIOOSYS CMS – SQL Injection / Information Disclosure

source: https://www.securityfocus.com/bid/54239/info

JAKCMS PRO 2.2.6 – ‘uploader.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54238/info

phpmoneybooks 1.03 – Persistent Cross-Site Scripting

# Exploit Title: phpmoneybooks 1.03 Stored XSS

PHP-Fusion Advanced MP3 Player Infusion – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54228/info

webERP 4.08.1 – Local/Remote File Inclusion

:::::::-. ... ::::::. :::.

Schoolhos CMS – HTML Injection

source: https://www.securityfocus.com/bid/54204/info

Zend Framework < 2.0.0 beta4 < 1.12 RC1 < 1.11.11 - Local File Disclosure

SEC Consult Vulnerability Lab Security Advisory < 20120626-0 >

DigPHP – ‘dig.php’ Script Remote File Disclosure

source: https://www.securityfocus.com/bid/54207/info

SugarCRM CE 6.3.1 – ‘Unserialize()’ PHP Code Execution (Metasploit)

##

WordPress Plugin Website FAQ 1.0 – SQL Injection

# Exploit Title: WordPress Website FAQ Plugin v1.0 SQL Injection

Umapresence – Local File Inclusion / Arbitrary File Deletion

source: https://www.securityfocus.com/bid/54194/info

FCKEditor Core – ‘Editor ‘spellchecker.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54188/info

Drupal Module Drag & Drop Gallery 6.x-1.5 – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54179/info

WordPress Plugin Fancy Gallery 1.2.4 – Arbitrary File Upload

##################################################

UCCASS 1.8.1 – Blind SQL Injection

:::::::-. ... ::::::. :::.

WordPress Plugin Flip Book – ‘PHP.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54173/info

SilverStripe CMS Pixlr Image Editor – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54172/info

Amazon S3 Uploadify Script – ‘Uploadify.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54170/info

SugarCRM CE 6.3.1 – ‘Unserialize()’ PHP Code Execution

CMS Lokomedia – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/54150/info

Cotonti – ‘admin.php’ SQL Injection

source: https://www.securityfocus.com/bid/54147/info

LimeSurvey 1.92+ build120620 – Multiple Vulnerabilities

:::::::-. ... ::::::. :::.

agora project 2.13.1 – Multiple Vulnerabilities

###################################################################

Joomla! Component com_szallasok – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/54140/info

Adiscan LogAnalyzer 3.4.3 – Cross-Site Scripting

source: https://www.securityfocus.com/bid/54117/info

Commentics 2.0 – Multiple Vulnerabilities

#################################################

traq 2.3.5 – Multiple Vulnerabilities

====================================================================

Coppermine Photo Gallery – ‘index.php’ Script SQL Injection

source: https://www.securityfocus.com/bid/54115/info

Commentics – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54111/info

web@all – Cross-Site Scripting

source: https://www.securityfocus.com/bid/54109/info

WordPress Plugin Schreikasten 0.14.13 – Cross-Site Scripting

# Title: WordPress Schreikasten 0.14.13 XSS

e107 Filedownload Plugin – Arbitrary File Upload / Remote File Disclosure

source: https://www.securityfocus.com/bid/54098/info

AdaptCMS 2.0.2 – ‘index.php’ Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/54097/info

e107 Image Gallery Plugin – ‘name’ Remote File Disclosure

source: https://www.securityfocus.com/bid/54096/info

e107 Hupsi_fancybox Plugin – ‘Uploadify.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54091/info