LightNEasy 3.2.3 – ‘userhandle’ Cookie SQL Injection
source: https://www.securityfocus.com/bid/47541/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
ZenPhoto 1.4.0.3 – ‘_zp_themeroot’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47528/info
SyCtel Design – ‘menu’ Multiple Local File Inclusions
source: https://www.securityfocus.com/bid/47526/info
Automagick Tube Script 1.4.4 – ‘module’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47519/info
SocialCMS 1.0.2 – Multiple Cross-Site Request Forgery Vulnerabilities
[+] Greetings :[ mywisdom - kiddies - kamtiez - r3m1ck - aciz_n1nj4 | mozartklik |syafm0vic-
docuFORM Mercury WebApp 6.16a/5.20 – Multiple Cross-Site Scripting Vulnerabilities
docuFORM Mercury WebApp 6.16a Multiple Cross-Site Scripting Vulnerabilities
Ultimate eShop – Error-Based SQL Injection
# Exploit Title: Ultimate eShop Error Based SQL Injection Vulnerability
webSPELL 4.2.2a – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47500/info
ChatLakTurk PHP Botlu Video – ‘ara.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47428/info
Dalbum 1.43 – ‘editini.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47427/info
WordPress Plugin WP-StarsRateBox 1.1 – ‘j’ SQL Injection
source: https://www.securityfocus.com/bid/47423/info
Ultra Marketing Enterprises CMS and Cart – Multiple SQL Injections
source: https://www.securityfocus.com/bid/47421/info
CRESUS – ‘recette_detail.php’ SQL Injection
source: https://www.securityfocus.com/bid/47416/info
dalbum 1.43 – Multiple Vulnerabilities
===============================
XOOPS 2.5 – ‘imagemanager.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/47418/info
Joomla! Component com_phocadownload – Local File Inclusion
source: https://www.securityfocus.com/bid/47399/info
osPHPSite – SQL Injection
# Exploit Title: osPHPSite SQL Injection Vulnerability
ChillyCMS 1.2.1 – Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/47395/info
4Images 1.7.9 – Multiple Remote File Inclusions / SQL Injections
source: https://www.securityfocus.com/bid/47394/info
Shape Web Solutions CMS – SQL Injection
#####################################################################################
Bedder CMS – Blind SQL Injection
#(+)Exploit Title: Bedder CMS Blind SQL Injection Vulnerability
Blue Hat – Sensitive Database Disclosure / SQL Injection
#(+)Exploit Title: Powered by Blue Hat Sensitive Database Disclosure Vulnerability
PhoenixCMS 1.7 – Local File Inclusion / SQL Injection
source: https://www.securityfocus.com/bid/47389/info
RunCMS Module Partners – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/47388/info
Agahi Advertisement CMS 4.0 – ‘view_ad.php’ SQL Injection
source: https://www.securityfocus.com/bid/47371/info
TextAds 2.08 Script – Cross-Site Scripting
===========================================================================
cPassMan 1.82 – Arbitrary File Download
Sense of Security - Security Advisory - SOS-11-004
Qianbo Enterprise Web Site Management System – ‘Keyword’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47375/info
PhpAlbum.net 0.4.1-14_fix06 – ‘var3’ Remote Command Execution
source: https://www.securityfocus.com/bid/47369/info
EZ-Shop 1.02 – Lateral SQL Injection
[Security Advisory Details: 14/04/2011]
TinyBB 1.4 – Blind SQL Injection / Full Path Disclosure
# Exploit Title : TinyBB 1.4 Sql Injection + Path Disclosure
Website Baker 2.8.1 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/47332/info
Plogger 1.0 RC1 – ‘gallery_name’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47329/info
WordPress Theme The Gazette Edition 2.9.4 – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/47320/info
WordPress Plugin Spellchecker 3.1 – ‘/general.php’ Local/Remote File Inclusion
source: https://www.securityfocus.com/bid/47317/info
WordPress Theme Live Wire 2.3.1 – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/47299/info
Etki Video PRO 2.0 – ‘kategori.asp?cat’ SQL Injection
source: https://www.securityfocus.com/bid/47298/info
Etki Video PRO 2.0 – ‘izle.asp?id’ SQL Injection
source: https://www.securityfocus.com/bid/47298/info
K-Links – Link Directory Script SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-{In The Name Of Allah The Mercifull}-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Point Market System 3.1x vBulletin plugin – SQL Injection
#(+)Exploit Title: Point Market System 3.1x vbulletin plugin SQL
eForum 1.1 – ‘eforum.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/47309/info
Nooms CMS 1.1.1 – Cross-Site Request Forgery
# NooMS CMS version 1.1.1 CSRF
Joomla! Component joomlacontenteditor – Blind SQL Injection
===================================================================
1024 CMS 1.1.0 Beta – Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/47282/info
PrestaShop 1.3.6 – ‘cms.php’ Remote File Inclusion
source: https://www.securityfocus.com/bid/47264/info
vTiger CRM 5.2.1 – ‘sortfieldsjson.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/47263/info
viscacha 0.8.1 – Multiple Vulnerabilities
Vulnerability ID: HTB22921
phpcollab 2.5 – Multiple Vulnerabilities
Vulnerability ID: HTB22916
Joomla! Component com_virtuemart 1.1.7 – Blind SQL Injection
#!/usr/bin/python
eGroupWare 1.8.1 – ‘test.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47273/info