WordPress Plugin Uploadify Integration 0.9.6 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52944/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
w-CMS 2.0.1 – Multiple Vulnerabilities
+----------------------------------------------------------------------+
WordPress Plugin TagGator – ‘tagid’ SQL Injection
source: https://www.securityfocus.com/bid/52908/info
GENU CMS – SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
vBulletin 4.1.10 – ‘announcementid’ SQL Injection
source: https://www.securityfocus.com/bid/52897/info
osCMax 2.5 – ‘/admin/stats_monthly_sales.php?status’ SQL Injection
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/login.php?Username’ SQL Injection
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/new_attributes_include.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/geo_zones.php?zID’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/information_manager.php?information_id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/stats_customers.php?sorted’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/stats_monthly_sales.php?status’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/stats_products_purchased.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/xsell.php?search’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/htaccess.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/login.php?Username’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52886/info
Hotel Booking Portal – SQL Injection
'Hotel Booking Portal' SQL Injection (CVE-2012-1672)
phpPaleo – Local File Inclusion
'phpPaleo' Local File Inclusion (CVE-2012-1671)
e-ticketing – SQL Injection
'e-ticketing' SQL Injection (CVE-2012-1673)
Plume CMS 1.2.4 – Multiple Persistent Cross-Site Scripting Vulnerabilities
+--------------------------------------------------------------------------------------------------------------------...
Simple PHP Agenda 2.2.8 – Cross-Site Request Forgery (Add Admin / Add Event)
+--------------------------------------------------------------------------------------------------------------------...
FlatnuX CMS – Cross-Site Request Forgery (Add Admin)
source: https://www.securityfocus.com/bid/52846/info
FlatnuX CMS – Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/52846/info
WordPress Plugin BuddyPress Plugin 1.5.x < 1.5.5 - SQL Injection
# Exploit Title: Buddypress plugin of Wordpress remote SQL Injection
Woltlab Burning Board 2.2/2.3 [WN]KT KickTipp 3.1 – SQL Injection
========================================================================================
JamWiki 1.1.5 – ‘num’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52829/info
e107 1.0 – ‘view’ SQL Injection
source: https://www.securityfocus.com/bid/52821/info
PHP Designer 2007 Personal – Multiple SQL Injections
source: https://www.securityfocus.com/bid/52819/info
SyndeoCMS 3.0.01 – Persistent Cross-Site Scripting
+--------------------------------------------------------------------------------------------------------------------...
dalbum 144 build 174 – Cross-Site Request Forgery
dalbum 144 build 174 and earlier CSRF Vulnerabilities
ArticleSetup – Multiple Persistence Cross-Site Scripting / SQL Injections
##############################################################################
coppermine 1.5.18 – Multiple Vulnerabilities
[waraxe-2012-SA#081] - Multiple Vulnerabilities in Coppermine 1.5.18
Simple Machines Forum (SMF) 2.0.2 – ‘scheduled’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52822/info
EZ Publish 4.x ‘ezjscore’ Module – Cross-Site Scripting
source: https://www.securityfocus.com/bid/52807/info
EasyPHP – ‘main.php’ SQL Injection
source: https://www.securityfocus.com/bid/52781/info
ocPortal 7.1.5 – ‘code_editor.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52768/info
TomatoCart 1.2.0 Alpha 2 – ‘json.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/52766/info
Invision Power Board (IP.Board) 4.2.1 – ‘searchText’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52740/info
WordPress Plugin Integrator 1.32 – ‘redirect_to’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52739/info
BoastMachine 3.1 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: boastMachine v3.1
PicoPublisher 2.0 – SQL Injection
# Exploit Title : PicoPublisher v2.0 Remote SQL injection
NextBBS 0.6 – ‘index.php?do’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52728/info
NextBBS 0.6 – ‘ajaxserver.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/52728/info
Geeklog 1.8.1 – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/52725/info
vBshop – Multiple Persistent Cross-Site Scripting Vulnerabilities
# Exploit Title: vBshop persistent XSS 0day
Family CMS 2.9 – Multiple Vulnerabilities
Family CMS 2.9 and earlier multiple Vulnerabilities
Zumset.com FbiLike 1.00 – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52720/info
Event Calendar PHP – ‘cal_year’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52701/info