vBulletin 4.0.x 4.1.3 – ‘messagegroupid’ SQL Injection
# Exploit Title: Vbulletin 4.0.x => 4.1.3 (messagegroupid) SQL injection Vulnerability 0-day
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Mevin Basic PHP Events Lister 2.03 – Cross-Site Request Forgery
#######################################################
Cyberoam UTM – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/48814/info
Tiki Wiki CMS Groupware 7.2 – ‘snarf_ajax.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/48806/info
Joomla! < 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/48805/info
Joomla! Component com_rsappt_pro2 – Local File Inclusion
Appointment Booking Pro is a native Joomla component
BlueSoft (Multiple Products) – Multiple SQL Injections
source: https://www.securityfocus.com/bid/48703/info
BlueSoft Social Networking CMS – SQL Injection
source: https://www.securityfocus.com/bid/48707/info
AJ Classifieds – ‘listingid’ SQL Injection
source: https://www.securityfocus.com/bid/48702/info
Joomla! Component com_newssearch – SQL Injection
source: https://www.securityfocus.com/bid/48698/info
Joomla! Component Controller – ‘Itemid’ SQL Injection
source: https://www.securityfocus.com/bid/48690/info
Joomla! Component com_hospital – SQL Injection
source: https://www.securityfocus.com/bid/48689/info
Joomla! Component Juicy Gallery – ‘picId’ SQL Injection
source: https://www.securityfocus.com/bid/48688/info
Joomla! Component Foto – ‘id_categoria’ SQL Injection
source: https://www.securityfocus.com/bid/48685/info
Easy Estate Rental – ‘s_location’ SQL Injection
source: https://www.securityfocus.com/bid/48684/info
Auto Web Toolbox – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/48683/info
Inscribe Webmedia – SQL Injection
Inscribe Webmedia SQL Injection
PG eLms Pro vDEC_2007_01 – Multiple Blind SQL Injections
PG eLMS Pro vDEC_2007_01 Multiple Blind SQL Injection Vulnerabilities
PG eLms Pro vDEC_2007_01 – ‘contact_us.php’ Multiple POST Cross-Site Scripting Vulnerabilities
PG eLMS Pro vDEC_2007_01 (contact_us.php) Multiple POST XSS Vulnerabilities
Joomla! Component com_sobi2 2.9.3.2 – Blind SQL Injections
# Exploit Title: SOBI2 2.9.3.2 Joomla! Component Blind SQL Injections
Chyrp 2.x – ‘/includes/JavaScript.php?action’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/48672/info
Chyrp 2.x – ‘/admin/help.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/48672/info
TCExam 11.2.x – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/48669/info
LiteRadius 3.2 – Multiple Blind SQL Injections
# Exploit Title: LiteRadius
Sphider 1.3.x – Admin Panel Multiple SQL Injections
source: https://www.securityfocus.com/bid/48647/info
Joomla! Component com_xmap 1.2.11 – Blind SQL Injection
# Exploit Title: Xmap 1.2.11 Joomla Component Blind SQL Injection
Pandora Fms 3.2.1 – Cross-Site Request Forgery
# Exploit Title: Pandora FMS v3.2.1 Cross Site Request Forgery
Tradingeye E-Commerce Shopping Cart – Multiple Vulnerabilities
# Exploit Title: Tradingeye Multiple Vulnerabilities
Fire Soft Board 2.0.1 – Persistent Cross-Site Scripting (Admin Panel)
# Exploit Title: Fire Soft Board popup with your cookies :-)
Gilnet News – ‘read_more.php’ SQL Injection
source: https://www.securityfocus.com/bid/48966/info
WordPress Plugin bSuite 4.0.7 – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/48714/info
ICMusic 1.2 – ‘music_id’ SQL Injection
source: https://www.securityfocus.com/bid/48639/info
Prontus CMS – ‘page’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/48637/info
Tugux CMS 1.2 – ‘pid’ Arbitrary File Deletion
Tugux CMS 1.2 (pid) Remote Arbitrary File Deletion Vulnerability
Portix-CMS 1.5.0. rc5 – Local File Inclusion
-==================== in The Name Of aLLah ====================-
Joomla! Component com_voj – SQL Injection
source: https://www.securityfocus.com/bid/48621/info
phpMyAdmin3 (pma3) – Remote Code Execution
#!/usr/bin/env python
appRain Quick Start Edition Core Edition Multiple 0.1.4-Alpha – Cross-Site Scripting
##############################################################################
LuxCal Web Calendar 2.4.2/2.5.0 – SQL Injection
#############################################################################################################
Joomla! 1.6.3 – Cross-Site Request Forgery
This vulnerability takes advantage of the recent Joomla 1.6.3 XSS vulnerability ( http://seclists.org/fulldisclosure/...
BbZL.php – Remote File Inclusion
_________________________________________________________________________________________
Classified Script – c-BrowseClassified Cross-Site Scripting
source: https://www.securityfocus.com/bid/48564/info
Joomla! Component com_jr_tfb – ‘Controller’ Local File Inclusion
source: https://www.securityfocus.com/bid/48558/info
PhpFood CMS 2.00 – SQL Injection
#############################################################################################################
DmxReady Links Manager 1.2 – SQL Injection
# Exploit Title: DmxReady Links Manager v1.2 SQL Injection Vulnerability
DMXReady Account List Manager 1.2 – SQL Injection
# Exploit Title: DMXReady Account List Manager v1.2 SQL Injection
phpDealerLocator – Multiple SQL Injections
# Exploit Title: phpDealerLocator - Multiple SQL Injection vulnerabilities