php

POSH – Multiple Vulnerabilities

# Exploit Title: POSH

cotonti CMS 0.9.4 – Multiple Vulnerabilities

Cotonti CMS v0.9.4 Multiple Remote Vulnerabilities

Roundcube Webmail 0.3.1 – Cross-Site Request Forgery / SQL Injection

# Exploit Title: RoundCube 0.3.1 SQL injection

6kbbs – Multiple Vulnerabilities

# Exploit Title: 6kbbs Multiple Vulnerabilities

Filmis 0.2 Beta – Multiple Vulnerabilities

===================================================================================

KaiBB 2.0.1 – SQL Injection

Advisory: KaiBB 2.0.1 XSS and SQL Injection vulnerabilities

openEngine 2.0 – Multiple Blind SQL Injection Vulnerabilities

Advisory: openEngine 2.0 'key' Blind SQL Injection vulnerability

Joomla! Component com_expedition – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/50019/info

GotoCode Online Classifieds – Multiple Vulnerabilities

###############################################################################

MyBB 1.6.4 – Backdoor Access (Metasploit)

##

Snortreport – ‘/nmap.php’ / ‘nbtscan.php’ Remote Command Execution (Metasploit)

##

NexusPHP 1.5 – SQL Injection

# Exploit Title: Nexusphp.v1.5 SQL injection Vulnerability

Joomla! Component Time Returns 2.0 – SQL Injection

#############################################################################################################

BOOKSolved 1.2.2 – Remote File Disclosure

...BOOKSolved 1.2.2 (l) Remote File Disclosure Vulnerability

BuzzyWall 1.3.2 – ‘resolute.php’ Information Disclosure

source: https://www.securityfocus.com/bid/50018/info

EFront 3.6.9 Community Edition – Multiple Vulnerabilities

# Exploit Title: EFront

URL Shortener Script 1.0 – SQL Injection

===================================================================================

PHP 5.3.11/5.4.0RC2 – ‘header()’ HTTP Header Injection

source: https://www.securityfocus.com/bid/55297/info

Active CMS 1.2 – ‘mod’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50001/info

Tsmim Lessons Library – ‘show.php’ SQL Injection

===================================================================================

vTiger CRM 5.2.1 – ‘PHPrint.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49927/info

vTiger CRM 5.2.1 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities (1)

source: https://www.securityfocus.com/bid/49927/info

CF Image Hosting Script 1.3.82 – File Disclosure

#!/usr/bin/perl

Easy Hosting Control Panel – Admin Authentication Bypass

# Exploit Title: Easy Hosting Control Panel Admin Auth Bypass

Concrete5 CMS < 5.4.2.1 - Multiple Vulnerabilities

# Exploit Title: Concrete5 setQuery(

Phorum 5.2.18 – ‘/admin/index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49920/info

Netvolution 2.5.8 – ‘referer’ Header SQL Injection

source: https://www.securityfocus.com/bid/49918/info

ContaoCMS 2.10.1 – Cross-Site Scripting

source: https://www.securityfocus.com/bid/50061/info

SonicWALL Viewpoint 6.0 – ‘scheduleID’ SQL Injection

source: https://www.securityfocus.com/bid/49906/info

Vivvo CMS – Local File Inclusion

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Banana Dance CMS and Wiki – SQL Injection

+-----------------------+

ezCourses – ‘admin.asp’ Security Bypass

source: https://www.securityfocus.com/bid/49907/info

ProjectForum 7.0.1 3038 – ‘more’ Object HTML Injection

source: https://www.securityfocus.com/bid/49895/info

WordPress Plugin WP Bannerize 2.8.7 – ‘ajax_sorter.php’ SQL Injection

source: https://www.securityfocus.com/bid/49893/info

WordPress Theme RedLine 1.65 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49880/info

WordPress Theme Black-LetterHead 1.5 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49879/info

WordPress Theme Morning Coffee 3.5 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49878/info

Feed on Feeds 0.5 – Remote PHP Code Injection

Marinet CMS – ‘room.php’ Blind SQL Injection

====================================================

WordPress Plugin Bannerize 2.8.7 – SQL Injection

# Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)

WordPress Theme Pixiv Custom Theme 2.1.5 – ‘cpage’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49875/info

WordPress Theme EvoLve 1.2.5 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49872/info

WordPress Theme Elegant Grunge 1.0.3 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49869/info

WordPress Theme Atahualpa 3.6.7 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49865/info

Bitweaver 2.8.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49864/info

Joomla! < 1.7.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49853/info

Typo3 – File Disclosure

________________________________________________________________________________________

A2CMS – ‘index.php’ Local File Disclosure

source: https://www.securityfocus.com/bid/49883/info

Traq 2.2 – Multiple SQL Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/49835/info

Vanira CMS – ‘vtpidshow’ SQL Injection

source: https://www.securityfocus.com/bid/49789/info