PHP video script – SQL Injection
######################################################
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Balitbang CMS 3.3 – ‘alumni.php?hal’ SQL Injection
source: https://www.securityfocus.com/bid/50797/info
Balitbang CMS 3.3 – ‘index.php?hal’ SQL Injection
source: https://www.securityfocus.com/bid/50797/info
AdaptCMS 2.0 – SQL Injection
source: https://www.securityfocus.com/bid/50795/info
Zabbix 1.8.4 – ‘popup.php’ SQL Injection
# Exploit Title: Zabbix
Pro Clan Manager 0.4.2 – SQL Injection
source: https://www.securityfocus.com/bid/50794/info
Zen Cart CMS 1.3.9h – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50787/info
Prestashop 1.4.4.1 – ‘displayImage.php’ HTTP Response Splitting
source: https://www.securityfocus.com/bid/50785/info
PrestaShop 1.4.4.1 – ‘/admin/ajaxfilemanager/ajax_save_text.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50784/info
PrestaShop 1.4.4.1 – ‘/modules/mondialrelay/kit_mondialrelay/SuiviExpedition_ajax.php?Expedition’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50784/info
PrestaShop 1.4.4.1 – ‘/modules/mondialrelay/googlemap.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50784/info
PrestaShop 1.4.4.1 mondialrelay (kit_mondialrelay) – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50784/info
WordPress Plugin NewsLetter Meenews 5.1 – ‘idnews’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50783/info
WordPress Plugin Featurific For WordPress 1.6.2 – ‘snum’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50779/info
WordPress Plugin ClickDesk Live Support 2.0 – ‘cdwidget’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50778/info
Dolibarr ERP/CRM 3.1.0 – ‘/admin/boxes.php?rowid’ SQL Injection
source: https://www.securityfocus.com/bid/50777/info
Dolibarr ERP/CRM 3.1.0 – ‘/user/info.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/50777/info
Dolibarr ERP/CRM 3.1.0 – ‘/user/index.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/50777/info
Dolibarr ERP/CRM 3.1 – Multiple Script URI Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50777/info
PHP-Nuke 8.1.0.3.5b – ‘Downloads’ Blind SQL Injection
#!/usr/bin/perl
Hastymail2 – ‘rs’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50789/info
TA.CMS (TeachArabia) – ‘lang’ Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/50773/info
TA.CMS (TeachArabia) – ‘index.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/50773/info
WordPress Plugin Lanoba Social 1.0 – ‘action’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50746/info
WordPress Plugin Adminimize 1.7.21 – ‘page’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50745/info
WordPress Plugin Advanced Text Widget 2.0 – ‘page’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50744/info
WordPress Plugin Alert Before Your Post – ‘name’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50743/info
Digital Attic Foundation CMS – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/50735/info
ARASTAR – SQL Injection
+#######+
Blogs manager 1.101 – SQL Injection
------------------------------------------------------------------------
Valid tiny-erp 1.6 – SQL Injection
------------------------------------------------------------------------
Freelancer Calendar 1.01 – SQL Injection
------------------------------------------------------------------------
WordPress Plugin jetpack – ‘sharedaddy.php’ ID SQL Injection
######################################################
WordPress Plugin Flexible Custom Post Type – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50719/info
ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/50717/info
webERP 4.3.8 – ‘/reportwriter/FormMaker.php?ReportID’ SQL Injection
source: https://www.securityfocus.com/bid/50713/info
webERP 4.3.8 – ‘/reportwriter/ReportMaker.php?reportid’ SQL Injection
source: https://www.securityfocus.com/bid/50713/info
webERP 4.3.8 – Multiple Script URI Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50713/info
Webistry 1.6 – ‘pid’ SQL Injection
source: https://www.securityfocus.com/bid/50689/info
QuiXplorer 2.3 – Bugtraq Arbitrary File Upload
# Exploit Title: QuiXplorer 2.3
Joomla! Component Content – ‘year’ SQL Injection
source: https://www.securityfocus.com/bid/50656/info
Pixie CMS 1.01 < 1.04 - Blind SQL Injections
Exploit Title: Pixie CMS 1.01 - 1.04 "pixie_user" Blind SQL Injection
WordPress Plugin AdRotate 3.6.6 – SQL Injection
# Exploit Title: WordPress AdRotate plugin get_var($wpdb->prepare("SELECT `link` FROM `".$prefix."adrotate` WHERE `id...
Search Plugin for Hotaru CMS 1.4.2 – ‘admin_index.php?site_name’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50657/info
Mambo 4.x – ‘Zorder’ SQL Injection
[+] Exploit Title : CMS 4.x.x Zorder (SQL Injection Vul)