RazorCMS 1.2.1 STABLE – Arbitrary File Upload
# Exploit Title: RazorCMS
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
OSClass 2.3.x – Directory Traversal / Arbitrary File Upload
source: https://www.securityfocus.com/bid/52336/info
Exponent CMS 2.0 – ‘src’ SQL Injection
source: https://www.securityfocus.com/bid/52328/info
promise webpam 2.2.0.13 – Multiple Vulnerabilities
Promise WebPAM v2.2.0.13 Multiple Remote Vulnerabilities
Fork CMS 3.2.x – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/52319/info
Joomla! 2.5.1 – ‘redirect.php’ Blind SQL Injection
source: https://www.securityfocus.com/bid/52312/info
11in1 CMS 1.2.1 – ‘admin/tps?id’ SQL Injection
source: https://www.securityfocus.com/bid/52306/info
11in1 CMS 1.2.1 – ‘admin/comments?topicID’ SQL Injection
source: https://www.securityfocus.com/bid/52306/info
Open Realty 2.5.x – ‘select_users_template’ Local File Inclusion
source: https://www.securityfocus.com/bid/52296/info
Etano 1.20/1.22 – ‘photo_view.php?return’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52295/info
Etano 1.20/1.22 – ‘photo_search.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52295/info
Etano 1.20/1.22 – ‘search.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52295/info
lizard cart – ‘search.php’ SQL Injection
# Exploit Title: [lizard cart SQLi (search.php)]
Symfony2 – Local File Disclosure
Sense of Security - Security Advisory - SOS-12-002
LastGuru ASP Guestbook – ‘View.asp’ SQL Injection
source: https://www.securityfocus.com/bid/52293/info
AneCMS 2e2c583 – Local File Inclusion
# Exploit Title: AneCMS v.2e2c583 LFI exploit
DZCP (deV!L`z Clanportal) Witze Addon 0.9 – SQL Injection
========================================================================================
Timesheet Next Gen 1.5.2 – Multiple SQL Injections
# Exploit Title: Timesheet Next Gen 1.5.2 Multiple SQLi
starCMS – ‘q’ URI Cross-Site Scripting
source: https://www.securityfocus.com/bid/52262/info
Drupal 7.12 – Multiple Vulnerabilities
+--------------------------------------------------------------------------------------------------------------------...
phxEventManager 2.0 Beta 5 – ‘search.php’ search_terms SQL Injection
# Exploit Title: phxEventManager 2.0 beta 5 search.php search_terms SQL
Traidnt Topics Viewer 2.0 – ‘main.php’ Cross-Site Request Forgery
# source: https://www.securityfocus.com/bid/52224/info
Dotclear 2.4.1.2 – ‘/admin/plugin.php?page’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52221/info
Dotclear 2.4.1.2 – ‘/admin/comments.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52221/info
Dotclear 2.4.1.2 – ‘/admin/blogs.php?nb’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52221/info
Dotclear 2.4.1.2 – ‘/admin/auth.php?login_data’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52221/info
ImgPals Photo Host 1.0 – Admin Account Disactivation
-=[--------------------ADVISORY-------------------]=-
Fork CMS 3.x – ‘/backend/modules/error/actions/index.php?parse()’ Multiple Error Display Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52236/info
Fork CMS 3.x – ‘/private/en/locale/index?name’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52236/info
WebfolioCMS 1.1.4 – Cross-Site Request Forgery (Add Admin/Modify Pages)
+--------------------------------------------------------------------------------------------------------------------...
OSQA’s CMS – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/52184/info
Bontq – ‘user/’ URI Cross-Site Scripting
source: https://www.securityfocus.com/bid/52183/info
Webglimpse 2.x – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52170/info
MyJobList 0.1.3 – ‘eid’ SQL Injection
source: https://www.securityfocus.com/bid/52168/info
ContaoCMS (aka TYPOlight) 2.11 – Cross-Site Request Forgery (Delete Admin / Delete Article)
+--------------------------------------------------------------------------------------------------------------------...
YVS Image Gallery – SQL Injection
-=[+] Application: YVS Image Gallery
webgrind 1.0 – ‘file’ Local File Inclusion
webgrind 1.0 (file param) Local File Inclusion Vulnerability
cPassMan 1.82 – Remote Command Execution
Product. Collaborative Passwords Manager (cPassMan)
PHP Gift Registry 1.5.5 – SQL Injection
# Exploit Title: PHP Gift Registry 1.5.5 SQL Injection
Mobile Mp3 Search Script 2.0 – ‘dl.php’ HTTP Response Splitting
source: https://www.securityfocus.com/bid/52136/info
phpDenora 1.4.6 – Multiple SQL Injections
############################################################
Oxwall 1.1.1 – ‘plugin’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52125/info
Chyrp 2.1.2 – ‘/includes/error.php?body’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52117/info
Chyrp 2.1.1 – ‘ajax.php’ HTML Injection
source: https://www.securityfocus.com/bid/52115/info
Dolibarr ERP/CRM 3.2 Alpha – Multiple Directory Traversal Vulnerabilities
source: https://www.securityfocus.com/bid/52113/info
ContentLion Alpha 1.3 – ‘login.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52112/info