Axous 1.1.0 – SQL Injection
########################################################################################
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WordPress Core 3.3.1 – Multiple Cross-Site Request Forgery Vulnerabilities
+--------------------------------------------------------------------------------------------------------------------...
Quick.CMS 4.0 – ‘p’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53273/info
gpEasy 2.3.3 – ‘jsoncallback’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53269/info
Concrete5 CMS 5.5.2.1 – Information Disclosure / SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/53268/info
PHP Volunteer management 1.0.2 – Multiple Vulnerabilities
# Exploit Title: PHP Volunteer Management 'id' 1.0.2 Multiple Vulnerabilities
WordPress Plugin Zingiri Web Shop 2.4.0 – Multiple Cross-Site Scripting Vulnerabilities
##############################################################################
piwigo 2.3.3 – Multiple Vulnerabilities
Advisory ID: HTB23085
Joomla! Component com_videogallery – Local File Inclusion / SQL Injection
source: https://www.securityfocus.com/bid/53237/info
PHP Ticket System Beta 1 – ‘index.php?p’ SQL Injection
# Exploit Title: PHP Ticket System Beta 1 'p' SQL Injection
Joomla! Component CCNewsLetter 1.0.7 – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/53208/info
exponentcms 2.0.5 – Multiple Vulnerabilities
Information
vTiger CRM 5.1.0 – Local File Inclusion
# Exploit Title: VTiger CRM
Mega File Manager – File Download
# Exploit Title: [MegaFileManager FileDownload Vulnerability
Waylu CMS – ‘/products_xx.php’ SQL Injection / HTML Injection
source: https://www.securityfocus.com/bid/53202/info
Anchor CMS 0.6-14-ga85d0a0 – ‘id’ Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/53181/info
Pendulab ChatBlazer 8.5 – ‘Username’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53168/info
XOOPS 2.5.4 – Multiple Cross-Site Scripting Vulnerabilities
Advisory ID: HTB23062
newscoop 3.5.3 – Multiple Vulnerabilities
Advisory ID: HTB23084
ownCloud 3.0.0 – ‘index.php?redirect_url’ Arbitrary Site Redirect
source: https://www.securityfocus.com/bid/53145/info
XOOPS 2.5.4 – ‘/tiny_mce/plugins/xoopsimagemanager/xoopsimagebrowser.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53143/info
XOOPS 2.5.4 – ‘/modules/pm/pmlite.php?to_userid’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53143/info
Acuity CMS 2.6.2 – ‘Username’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53048/info
Joomla! Component JA T3 Framework – Directory Traversal
source: https://www.securityfocus.com/bid/53039/info
TeamPass 2.1.5 – ‘login’ HTML Injection
source: https://www.securityfocus.com/bid/53038/info
WordPress Plugin Yahoo Answer – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53037/info
Joomla! Plugin Beatz 1.1 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53030/info
Bioly 1.3 – ‘/index.php’ Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/53018/info
Seditio CMS 165 – ‘plug.php’ SQL Injection
source: https://www.securityfocus.com/bid/53036/info
MediaXxx Adult Video / Media Script – SQL Injection
# Exploit Title: MediaXxx Adult Video / Media Script SQL Injection
NetworX CMS – Cross-Site Request Forgery (Add Admin)
# Exploit Title: NetworX CMS - CSRF Add Admin
Joomla! Component com_ponygallery – SQL Injection
##################################################
Ushahidi 2.2 – Multiple Vulnerabilities
# Exploit Title: Ushahidi 2.2 Multiple Vulnerabilites
Invision Power Board 3.3.0 – Local File Inclusion
[waraxe-2012-SA#086] - Local File Inclusion in Invision Power Board 3.3.0
SoftwareDEP Classified Script 2.5 – SQL Injection (2)
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
WordPress Plugin All-in-One Event Calendar 1.4 – ‘agenda-widget.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52986/info
WordPress Plugin All-in-One Event Calendar 1.4 – ‘save_successful.php?msg’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52986/info
WordPress Plugin All-in-One Event Calendar 1.4 – ‘box_publish_button.php?button_value’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52986/info
WordPress Plugin All-in-One Event Calendar 1.4 – ‘agenda-widget-form.php?title’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52986/info
BGS CMS 2.2.1 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/52983/info
Matterdaddy Market 1.1 – ‘cat_name’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/52970/info
Joomla! Component com_bearleague – SQL Injection
##################################################
Joomla! Component Estate Agent – SQL Injection
##################################################
CitrusDB 2.4.1 – Local File Inclusion / SQL Injection
source: https://www.securityfocus.com/bid/52946/info
Dolibarr ERP/CRM < 3.2.0 / < 3.1.1 - OS Command Injection
Dolibarr ERP & CRM OS Command Injection
Utopia News Pro 1.4.0 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Utopia News Pro 1.4.0