vTiger CRM 5.2.1 – ‘vtigerservice.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47267/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
S40 CMS 0.4.2b – Local File Inclusion
[Security Advisory Details: 07/04/2001]
Redmine 1.0.1/1.1.1 – ‘projects/hg-hellowword/news/’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47193/info
TextPattern 4.2 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47182/info
greenpants 0.1.7 – Multiple Vulnerabilities
# Exploit Title: GreenPants 0.1.7 Multiple Vulnerabilities
eyeos 2.3 – Multiple Vulnerabilities
------------------------------------------------------------------------
Dream Vision Technologies Web Portal – SQL Injection
#####################################################################################
UseBB 1.0.11 – ‘admin.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/47166/info
Eleanor CMS – Cross-Site Scripting / Multiple SQL Injections
source: https://www.securityfocus.com/bid/47164/info
Tutorialms 1.4 – ‘show’ SQL Injection
#################################################################################
WordPress Plugin Custom Pages 0.5.0.1 – Local File Inclusion
------------------------------------------------------------------------
OpenEMR 4.0.0 – Multiple Vulnerabilities
------------------------------------------------------------------------
XOOPS 2.5 – ‘banners.php’ Multiple Local File Inclusions
source: https://www.securityfocus.com/bid/47174/info
Yaws-Wiki 1.88-1 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/47158/info
Gazelle CMS 1.0 – Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/47157/info
WordPress Plugin WPwizz AdWizz Plugin 1.0 – ‘link’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47141/info
MyBB 1.4/1.6 – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/47131/info
PHP-Fusion – ‘article_id’ SQL Injection
source: https://www.securityfocus.com/bid/47128/info
DoceboLms 4.0.4 – Multiple Persistent Cross-Site Scripting Vulnerabilities
DoceboLMS 4.0.4 Multiple Stored XSS Vulnerabilities
DoceboLms 4.0.4 – ‘index.php’ Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/47150/info
WordPress Plugin Placester 0.1 – ‘ajax_action’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47142/info
Banner Ad Management Script – SQL Injection
####################################################################
Rash CMS – SQL Injection
==========================================
Advanced Image Hosting 2.2 – ‘index.php’ SQL Injection
==========================================
Anzeigenmarkt 2011 – ‘index.php’ SQL Injection
----------------------------Information------------------------------------------------
ilchClan 1.0.5 – ‘regist.php’ SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
spidaNews 1.0 – ‘news.php?id’ SQL Injection
----------------------------Information------------------------------------------------
AWCM 2.x – ‘search.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47126/info
Feng Office 1.7.3.3 – Cross-Site Request Forgery
Vulnerability ID: HTB22910
InTerra Blog Machine 1.84 – Cross-Site Scripting
Vulnerability ID: HTB22931
Allomani Super MultiMedia Library 2.5.0 – Cross-Site Request Forgery (Add Admin)
Super Multimedia Library 2.5.0 XSRF Vulnerability (Add Admin)
Allomani Audio and Video Library 2.7.0 – Cross-Site Request Forgery (Add Admin)
Audio & Video Library 2.7.0 XSRF Vulnerability (Add Admin)
Allomani Web Links 1.0 – Cross-Site Request Forgery (Add Admin)
Web Links 1.0 XSRF Vulnerability (Add Admin)
Allomani Movies Library 2.0 – Cross-Site Request Forgery (Add Admin)
Movies Library 2.0 XSRF Vulnerability (Add Admin)
Allomani News 1.0 – Cross-Site Request Forgery (Add Admin)
News 1.0 XSRF Vulnerability (Add Admin)
Allomani E-Store 1.0 – Cross-Site Request Forgery (Add Admin) (2)
E-Store 1.0 XSRF Vulnerability (Add Admin)
Collabtive 0.6.5 – Multiple Remote Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/47105/info
InTerra Blog Machine 1.84 – ‘subject’ HTML Injection
source: https://www.securityfocus.com/bid/47104/info
ICJobSite 1.1 – ‘pid’ SQL Injection
source: https://www.securityfocus.com/bid/47100/info
YaCOMAS 0.3.6 OpenCMS – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47089/info
GuppY 4.6.14 – ‘lng’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/47086/info
Andy’s PHP KnowledgeBase 0.95.2 – ‘viewusers.php’ SQL Injection
'Andy's PHP Knowledgebase' SQL Injection Vulnerability (CVE-2011-1546)
BigACE 2.7.5 – Arbitrary File Upload
==========================================
IrIran Shoping Script – SQL Injection
==========================================
YaCOMAS 0.3.6 Alpha – Multiple Vulnerabilities
===================================================================
XOOPS – ‘view_photos.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47085/info