Ultimate PHP Board 2.2.7 – Broken Authentication and Session Management
# Exploit Title : Ultimate PHP Board 2.2.7 "Broken Authentication and Session Management"
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
LimeSurvey 1.85+ – ‘admin.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47931/info
Andy’s PHP KnowledgeBase 0.95.4 – ‘step5.php’ PHP Remote Code Execution
source: https://www.securityfocus.com/bid/47918/info
Room Juice 0.3.3 – ‘display.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47914/info
TWiki 5.0.1 – ‘origurl’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47899/info
Joomla! Component jDownloads 1.0 – Arbitrary File Upload
____________________________________________________________________
PHP Calendar Basic 2.3 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47887/info
Pligg CMS 1.1.4 – SQL Injection
# Exploit Title: Pligg
WordPress Plugin Is-human 1.4.2 – Remote Command Execution
# Exploit Title: is-human (1.4.2 and prior) Worpdress plugin.
eFront 3.6.9 – ‘submitScore.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47877/info
eFront 3.6.9 – ‘scripts.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/47870/info
openQRM 4.8 – ‘source_tab’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47865/info
allocPSA 1.7.4 – ‘/login/login.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47860/info
Mambo Component Docman 1.3.0 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/47857/info
Joomla! Component com_cbcontact – ‘contact_id’ SQL Injection
source: https://www.securityfocus.com/bid/47856/info
Jcow 4.2.1 – Local File Inclusion
------------------------------------------------------------------------
NoticeBoardPro 1.0 – Multiple Vulnerabilities
# ------------------------------------------------------------------------
Vanilla Forum 2.0.17.9 – Local File Inclusion
------------------------------------------------------------------------
MediaInSpot CMS – SQL Injection
# Exploit Title: Media In Spot SQL Injection
MediaInSpot CMS – Local File Inclusion (2)
#Name : Media In Spot LFI Vulnerability
frame-oshop – SQL Injection
product: frame-oshop
Joomla! Component com_question – SQL Injection
###################################################
osCommerce 2.3.1 – ‘banner_manager.php’ Arbitrary File Upload
# Exploit Title: [OSC 2.3.1: Remote File Upload Vulnerability : Banner Manager]
WordPress Plugin EditorMonkey 2.5 – ‘FCKeditor’ Arbitrary File Upload
#############################################################################################################
DocMGR 1.1.2 – ‘history.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47861/info
Argyle Social – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47826/info
Calendarix 0.8.20080808 – Multiple Cross-Site Scripting / SQL Injections
source: https://www.securityfocus.com/bid/47790/info
poMMo Aardvark PR16.1 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47786/info
Traidnt UP 2.0 – ‘view.php’ SQL Injection
###################################################
ZAPms 1.22 – ‘nick’ SQL Injection
source: https://www.securityfocus.com/bid/47782/info
HOMEPIMA Design – ‘filedown.php’ Local File Disclosure
source: https://www.securityfocus.com/bid/47770/info
EmbryoCore 1.03 – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/47763/info
phpWebSite 1.7.1 – ‘upload.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/47759/info
Gelsheet 1.02 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47758/info
Exponent CMS 2.0.0 Beta 1.1 – Local File Inclusion / Arbitrary File Upload
source: https://www.securityfocus.com/bid/47757/info
Ampache 3.5.4 – ‘login.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47756/info
encoder 0.4.10 – ‘edit.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47755/info
Joomla! Component com_hello – SQL Injection
Author : g3mbeLz_YCL
Joomla! Component com_versioning – SQL Injection
#[~] Author : the_cyber_nuxbie
FestOS 2.3c – ‘upload.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/47751/info
Getsimple CMS 3.0 – ‘set’ Local File Inclusion
source: https://www.securityfocus.com/bid/47767/info
e107 0.7.25 – ‘news.php’ SQL Injection
source: https://www.securityfocus.com/bid/47750/info
VCalendar 1.1.5 – Cross-Site Request Forgery
Vulnerability ID: HTB22969
phpThumb – ‘phpThumbDebug’ Information Disclosure
# Exploit Title: phpThumb 'phpThumbDebug' Information Disclosure
PHPDug 2.0.0 – Multiple Vulnerabilities
Vulnerability ID: HTB22971
PHPDug 2.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47733/info
PHP Directory Listing Script 3.1 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47727/info
WordPress Plugin WP Ajax Calendar 1.0 – ‘example.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47726/info
GoT.MY (Multiple Products) – ‘theme_dir’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47702/info
SelectaPix 1.4.1 – ‘uploadername’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47701/info