Tolinet Agencia – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/48217/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Angora Guestbook 1.5 – Local File Inclusion
------------------------------------------------------------------------
Pacer Edition CMS 2.1 – ‘l’ Local File Inclusion
Pacer Edition CMS 2.1 (l param) Local File Inclusion Vulnerability
Pacer Edition CMS 2.1 – ‘rm’ Arbitrary File Deletion
#!/usr/bin/python
WordPress Plugin GD Star Rating – ‘votes’ SQL Injection
source: https://www.securityfocus.com/bid/48166/info
The Pacer Edition CMS 2.1 – ’email’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/48215/info
Blog:CMS 4.2 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/48132/info
Xataface 1.x – ‘action’ Local File Inclusion
source: https://www.securityfocus.com/bid/48126/info
Dataface – Local File Inclusion
//==========================================================================
Squiz Matrix 4 – ‘colour_picker.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/48118/info
PopScript – ‘index.php’ Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/48113/info
Multiple WordPress WooThemes Themes – ‘test.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/48110/info
Nakid CMS 1.0.2 – ‘CKEditorFuncNum’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/48109/info
Joomla! Component CCBoard – SQL Injection / Arbitrary File Upload
source: https://www.securityfocus.com/bid/48108/info
vBulletin vBExperience 3 – ‘sortorder’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/48106/info
Ushahidi 2.0.1 – ‘range’ SQL Injection
source: https://www.securityfocus.com/bid/48100/info
ARSC Really Simple Chat 3.3-rc2 – Cross-Site Scripting / Multiple SQL Injections
source: https://www.securityfocus.com/bid/48083/info
PikaCMS – Multiple Local File Disclosure Vulnerabilities
source: https://www.securityfocus.com/bid/48068/info
TEDE Simplificado 1.01/S2.04 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/48067/info
S9Y Serendipity Freetag-plugin 3.21 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/48054/info
Cotonti 0.9.2 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/48028/info
Guru JustAnswer Professional 1.25 – Multiple SQL Injections
) ) ) ( ( ( ( ( ) )
w-Agora Forum 4.2.1 – Arbitrary File Upload
-----------------------------76401208715012
Invisionix Roaming System Remote metasys 0.2 – Local File Inclusion
nvisionix Roaming System Remote metasys 0.2 LFI Vulnerability
Puzzle Apps CMS 3.2 – Local File Inclusion
# ------------------------------------------------------------------------
Joomla! Component com_joomnik – SQL Injection
#############################################################
Joomla! Component com_jmsfileseller – Local File Inclusion
# Exploit Title: Joomla Component com_jmsfileseller Local File Inclusion Vulnerability
Guru Penny Auction Pro 3.0 – Blind SQL Injection
) ) ) ( ( ( ( ( ) )
Duhok Forum 1.1 – SQL Injection
===================================================================
cPanel < 11.25 - Cross-Site Request Forgery (Add User PHP Script)
# Exploit Title: cPanel < 11.25 CSRF - Add php script
HB eCommerce – SQL Injection
-------------[ HB ECOMMERCE SQL Injection Vulnerability ]---------------
Clipbucket 2.4 RC2 645 – SQL Injection
# ------------------------------------------------------------------------
Kryn.cms 0.9 – ‘_kurl’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47973/info
Joomla! Component com_shop – SQL Injection
source: https://www.securityfocus.com/bid/47971/info
MidiCMS Website Builder – Local File Inclusion / Arbitrary File Upload
source: https://www.securityfocus.com/bid/47970/info
eGroupWare 1.8.001.20110421 – Multiple Vulnerabilities
------------------------------------------------------------------------
Extcalendar 2.0b2 – ‘cal_search.php’ SQL Injection
Vulnerability ID: HTB22986
i-doIT 0.9.9-4 – Local File Inclusion
# ------------------------------------------------------------------------
Ajax Chat 1.0 – ‘ajax-chat.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47953/info
phpScheduleIt 1.2.12 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47951/info
Joomla! Component Map Locator – ‘cid’ SQL Injection
source: https://www.securityfocus.com/bid/47941/info
PHPortfolio – SQL Injection
# Exploit Title: SQL Injection Vulnerbility in PHP Portfolio
vBulletin 4.0.x 4.1.2 – ‘search.php’ SQL Injection
====================================================================
E-Manage MySchool 7.02 – SQL Injection
Exploit Title: SQL Injection MySchool Version 7.02
PHP Captcha / Securimage 2.0.2 – Authentication Bypass
Sense of Security - Security Advisory - SOS-11-007
Zen Cart 1.3.9h – Multiple Vulnerabilities
[*]==================================================================>