Web Solutions Wcs2u – SQL Injection
[~]Title : Web Solutions Wcs2u SQL Injection Vulnerability
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WordPress Plugin MM Duplicate 1.2 – SQL Injection
# Exploit Title: WordPress MM Duplicate plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)
OneFileCMS 1.1.1 – ‘onefilecms.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/49257/info
OneFileCMS 1.1.1 – Multiple Vulnerabilities
# Exploit Title: OneFileCMS v.1.1.1 Multiple Remote Vulnerabilities
EasySiteEdit – Remote File Inclusion
# Exploit Title: EasySiteEdit remote file include
WordPress Plugin UnGallery 1.5.8 – Local File Disclosure
# Exploit Title: WordPress UnGallery plugin
Axis Commerce (E-Commerce System) – Persistent Cross-Site Scripting
# Exploit Title: Axis Commerce (E-Commerce System) Stored XSS
PHP < 5.3.7 - Multiple Null Pointer Dereference Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/49249/info
PHPMyRealty 1.0.7 – SQL Injection
|=========================================================================================|
network tracker .95 – Persistent Cross-Site Scripting
# Exploit Title: Network Tracker .95 Stored XSS
Mantis Bug Tracker 1.1.8 – Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/49235/info
WordPress Plugin Menu Creator 1.1.7 – SQL Injection
# Exploit Title: WordPress Menu Creator plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)
WordPress Plugin Allow PHP in Posts and Pages 2.0.0.RC1 – SQL Injection
# Exploit Title: WordPress Allow PHP in Posts and Pages plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)
WordPress Plugin Global Content Blocks 1.2 – SQL Injection
# Exploit Title: WordPress Global Content Blocks plugin 0) { // intval("1a") => 1 :)
WordPress Plugin Ajax Gallery 3.0 – SQL Injection
# Exploit Title: WordPress Ajax Gallery plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)
Elgg 1.7.10 – Multiple Vulnerabilities
# Exploit Title: Elgg 1.7.10
WordPress Plugin Forum 1.7.8 – SQL Injection
# Exploit Title: WordPress WP Forum plugin get_row("SELECT text, author_id, date FROM $table_posts WHERE id = $id");
WordPress Plugin DS FAQ 1.3.2 – SQL Injection
# Exploit Title: WordPress WP DS FAQ plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)
WordPress Plugin WP-Stats-Dashboard 2.6.5.1 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/49197/info
WordPress Plugin Fast Secure Contact Form 3.0.3.1 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/49193/info
phpWebSite – ‘page_id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/49176/info
Contrexx ShopSystem 2.2 SP3 – ‘catId’ Blind SQL Injection
#!/usr/bin/php
WordPress Plugin OdiHost NewsLetter 1.0 – SQL Injection
# Exploit Title: WordPress OdiHost Newsletter plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)
WordPress Plugin Easy Contact Form Lite 1.0.7 – SQL Injection
# Exploit Title: WordPress Easy Contact Form Lite plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)
WordPress Plugin Symposium 0.64 – SQL Injection
# Exploit Title: WordPress WP Symposium plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)
WordPress Plugin Contus HD FLV Player 1.3 – SQL Injection
# Exploit Title: WordPress Contus HD FLV Player plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)&list...
WordPress Plugin File Groups 1.1.2 – SQL Injection
# Exploit Title: WordPress File Groups plugin get_col("select guid from wp_posts where post_parent = $fgid");
SoftwareDEP Classified Script 2.5 – SQL Injection (1)
) ) ) ( ( ( ( ( ) )
Joomla! Component JoomTouch 1.0.2 – Local File Inclusion
================================================================================
WordPress Plugin IP-Logger 3.0 – SQL Injection
# Exploit Title: WordPress IP-Logger plugin
phpList 2.10.x – Security Bypass / Information Disclosure
source: https://www.securityfocus.com/bid/49188/info
awiki 20100125 – Multiple Local File Inclusions
source: https://www.securityfocus.com/bid/49187/info
Contrexx ShopSystem 2.2 SP3 – Blind SQL Injection
Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit
Prediction Football 2.51 – Cross-Site Request Forgery
# Exploit Title: [title]
Mambo 4.6.x < 4.6.5 - SQL Injection
=========================================
Kahf Poems 1.0 – Multiple Vulnerabilities
################################################################################################
VideoDB 3.1.0 – SQL Injection
DORK:allinurl:borrow.php?diskid=
PHP Flat File Guestbook 1.0 – ‘ffgb_admin.php’ Remote File Inclusion
source: https://www.securityfocus.com/bid/49138/info
WordPress Plugin eShop 6.2.8 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/49117/info
OpenEMR 4.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/49090/info
Joomla! Component Search 3.0.0 – SQL Injection
=========================================================================================
FCKEditor Core – ‘FileManager test.html’ Arbitrary File Upload (2)
In The Name Of GOD
BlogPHP 2.0 – Persistent Cross-Site Scripting
# Exploit Title: BlogPHP v2 - XSS
BlueSoft Rate My Photo Site – ‘ty’ SQL Injection
source: https://www.securityfocus.com/bid/49092/info
BlueSoft Banner Exchange – ‘referer_id’ SQL Injection
source: https://www.securityfocus.com/bid/49091/info
Search Network 2.0 – ‘query’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/49064/info
XpressEngine 1.4.5.7 – Persistent Cross-Site Scripting
# Exploit Title: XpressEngine version 1.4.5.7 Persistent XSS Vulnerability
Simple Machines Forum (SMF) 2.0 – Session Hijacking
Simple Machines forum (SMF) 2.0 session hijacking