YaPiG 0.95 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47698/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
E2 Photo Gallery 0.9 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47697/info
Web Auction 0.3.6 – ‘lang’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47682/info
Time and Expense Management System – Multiple Vulnerabilities
# ------------------------------------------------------------------------
Front Accounting 2.3.4 – Cross-Site Request Forgery
# Software................Front Accounting 2.3.4
Horizon Web Builder – ‘fshow.php’ SQL Injection
# Exploit Title: Horizon SQLi
LDAP Account Manager 3.4.0 – ‘selfserviceSaveOk’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47674/info
Travel411 – SQL Injection
=====================================================================
Exponent CMS 2.0 Beta 1.1 – Cross-Site Request Forgery (Add Administrator Account)
Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC by outlaw.dll
Parnian Opendata CMS – SQL Injection
###########################################################################
TCExam 11.1.29 – ‘tce_xml_user_results.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/47762/info
Tine 2.0 – ‘vbook.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47669/info
phpGraphy 0.9.13b – Multiple Vulnerabilities
=====================================
ClanSphere 2011.0 – Local File Inclusion / Arbitrary File Upload
source: https://www.securityfocus.com/bid/47636/info
phpGraphy 0.9.13b – ‘theme_dir’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47634/info
WordPress Plugin WP Photo Album 1.5.1 – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47622/info
WordPress Plugin Daily Maui Photo Widget 0.2 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47620/info
kusaba x 0.9.1 – Multiple Vulnerabilities
#######################################################
Kusaba X 0.9 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47626/info
up.time Software 5 – Administration Interface Remote Authentication Bypass
source: https://www.securityfocus.com/bid/47599/info
Joostina (Multiple Components) – SQL Injection
source: https://www.securityfocus.com/bid/47595/info
Symphony CMS 2.1.2 – Blind SQL Injection
--------------------------------------------------------------------------------------------
Football Website Manager 1.1 – SQL Injection / Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/47593/info
PHP F1 Max’s Photo Album – ‘showimage.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47582/info
phpList 2.10.x – ’email’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47580/info
WordPress Plugin WP Ajax Recent Posts 1.0.1 – ‘do’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47579/info
Noah’s Classifieds 5.0.4 – ‘index.php’ Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/47578/info
html-edit CMS 3.1.x – ‘html_output’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47576/info
WordPress Plugin Sermon Browser 0.43 – Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/47574/info
Quick.CMS 3.0 – Cross-Site Request Forgery
#(+) Exploit Title: Quick CMS v3.0 Cross Site Request Forgery (Add Admin User)
eyeOS 1.9.0.2 – Image File Handling HTML Injection
source: https://www.securityfocus.com/bid/47629/info
TemaTres 1.3 – ‘_search_expresion’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47569/info
phpmychat plus 1.93 – Multiple Vulnerabilities
------------------------------------------------------------------------
OrangeHRM 2.6.3 – ‘PluginController.php’ Local File Inclusion
------------------------------------------------------------------------
mySeatXT 0.1781 – SQL Injection
------------------------------------------------------------------------
SoftMP3 – SQL Injection
# Exploit Title: SOFTMP3 source code SQL injection
Nuke Evolution Xtreme 2.0 – Local File Inclusion / SQL Injection
source: https://www.securityfocus.com/bid/47552/info
Dolibarr ERP/CRM 3.0 – Local File Inclusion / Cross-Site Scripting
source: https://www.securityfocus.com/bid/47542/info
todoyu 2.0.8 – ‘lang’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47540/info
WordPress Plugin Ajax Category Dropdown 0.1.5 – Multiple Vulnerabilities
=============================
Realmarketing CMS – Multiple SQL Injections
#(+)Exploit Title: Realmarketing CMS System Sensitive Database Disclosure Vulnerability
4Images 1.7.9 – Multiple Vulnerabilities
================================
DynMedia Pro Web CMS 4.0 – Local File Disclosure
|||[!]===========================================================================[!]
Web2Project 2.3 – SQL Injection
# ------------------------------------------------------------------------
Dolibarr ERP/CRM 3.0.0 – Multiple Vulnerabilities
------------------------------------------------------------------------
ZenPhoto 1.4.0.3 – x-forwarded-for HTTP Header Persistent Cross-Site Scripting
# Exploit Title: ZenPhoto 1.4.0.3 patched 2011-4-19 x-forwarded-for HTTP
360 Web Manager 3.0 – Multiple Vulnerabilities
# Exploit Title: Multiple vulnerabilities in 360 Web Manager 3.0
First Escort Marketing CMS – Multiple SQL Injections Vulnerabilities
# PoC Title: First Escort Marketing CMS Multiple SQL Injection