php

Cart Software – Multiple Vulnerabilities

=========================================================

ATutor 2.0.2 – Multiple Vulnerabilities

ATutor 2.0.2 Multiple Remote Vulnerabilities (SQLi/XSS/PD)

AChecker 1.2 – Multiple Error-Based SQL Injection Vulnerabilities

AChecker 1.2 Multiple Error-Based SQL Injection vulnerabilities

acontent 1.1 – Multiple Vulnerabilities

AContent 1.1 Multiple SQL Injection Vulnerabilities

WordPress Plugin Media Library Categories 1.0.6 – SQL Injection

# Exploit Title: Media Library Categories

WordPress Plugin UPM Polls 1.0.3 – SQL Injection

# Exploit Title: UPM Polls get_row("SELECT * FROM `".$wpdb->prefix."pppm_polls` WHERE `id` = $QID", ARRAY_A);

Softbiz Recipes Portal Script – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49051/info

WordPress Plugin Social Slider 5.6.5 – SQL Injection

# Exploit Title: Social Slider

WordPress Plugin ProPlayer 4.7.7 – SQL Injection

# Exploit Title: ProPlayer plugin

WordPress Plugin E-Commerce 3.8.4 – SQL Injection

# Exploit Title: WP E-commerce plugin

WordPress Plugin WP E-Commerce 3.8.6 – ‘cart_messages[]’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49009/info

HESK 2.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49008/info

Joomla! Component com_community – ‘userid’ SQL Injection

source: https://www.securityfocus.com/bid/48983/info

Joomla! Component com_xeslidegalfx – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/48981/info

mt LinkDatenbank – ‘b’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48967/info

Joomla! Component com_jdirectory – SQL Injection

=====================================================================

WordPress Plugin TimThumb 1.32 – Remote Code Execution

# Exploit Title: WordPress TimThumb Plugin - Remote Code Execution

MyBB MyTabs Plugin – ‘tab’ SQL Injection

source: https://www.securityfocus.com/bid/48952/info

SiteGenius – Blind SQL Injection

=====================================================

MyBB MyTabs Plugin – SQL Injection

=====================================================================

Curverider Elgg 1.7.9 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48946/info

ZoneMinder 1.24.3 – Remote File Inclusion

# Exploit Title: Zoneminder 1.24.3 Remote File Inclusion Vulnerability

CMSPro! 2.08 – Cross-Site Request Forgery

CMSPro! 2.08 CSRF Vulnerability

Joomla! Component obSuggest – Local File Inclusion

) ) ) ( ( ( ( ( ) )

Digital Scribe 1.5 – register_form()’ Multiple POST Cross-Site Scripting Vulnerabilities

Digital Scribe 1.5 (register_form()) Multiple POST XSS Vulnerabilities

Link Station Pro – Multiple Vulnerabilities

%+

Chyrp 2.x swfupload Extension – ‘upload_handler.php’ Arbitrary File Upload / Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/48672/info

Chyrp 2.x – ‘/includes/lib/gz.php?File’ Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/48672/info

Chyrp 2.x – ‘action’ Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/48672/info

cFTP 0.1 – ‘r80’ Arbitrary File Upload

HP Network Automation 9.10 – SQL Injection

source: https://www.securityfocus.com/bid/48924/info

Joomla! Component com_virtuemart 1.1.7/1.5 – Blind SQL Injection (Metasploit)

# Exploit Title: Joomla 1.5 com_virtuemart %q{

PHPJunkYard GBook 1.6/1.7 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48905/info

MBoard 1.3 – ‘url’ Open Redirection

source: https://www.securityfocus.com/bid/48902/info

Support Incident Tracker (SiT!) 3.63 p1 – ‘tasks.php?selected[]’ SQL Injection

source: https://www.securityfocus.com/bid/48896/info

Support Incident Tracker (SiT!) 3.63 p1 – ‘search.php?search_string’ SQL Injection

source: https://www.securityfocus.com/bid/48896/info

Support Incident Tracker (SiT!) 3.63 p1 – ‘billable_incidents.php?sites[]’ SQL Injection

source: https://www.securityfocus.com/bid/48896/info

Support Incident Tracker (SiT!) 3.63 p1 – ‘report_marketing.php?exc[]’ SQL Injection

source: https://www.securityfocus.com/bid/48896/info

PHP-Barcode 0.3pl1 – Remote Code Execution

PHP-Barcode 0.3pl1 Remote Code Execution

OpenX Ad Server 2.8.7 – Cross-Site Request Forgery

Secur-I Research Group Security Advisory

CobraScripts Trading Marketplace Script – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/48914/info

Joomla! Component com_virtualmoney 1.5 – SQL Injection

source: https://www.securityfocus.com/bid/48883/info

Willscript Recipes Website Script Silver Edition – ‘viewRecipe.php’ SQL Injection

source: https://www.securityfocus.com/bid/48878/info

Online Grades 3.2.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48875/info

Godly Forums – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/48872/info

MusicBox 3.7 – Multiple Vulnerabilities

============================================================

ExtCalendar2 – Cookie Authentication Bypass / Backdoor Upload

Synergy Software – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/48835/info

Joomla! Component mod_spo – SQL Injection

# Exploit Title: Simple Page Option LFI

Joomla! Component JE Story Submit – Local File Inclusion

#!/usr/bin/perl -w