Tracks 1.7.2 – URI Cross-Site Scripting
source: https://www.securityfocus.com/bid/47078/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Spitfire 1.0.3x – ‘cms_username’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47077/info
osCSS 2.1 – Multiple Cross-Site Scripting / Local File Inclusions
source: https://www.securityfocus.com/bid/47074/info
oscss2 2.1.0 rc12 – Multiple Vulnerabilities
------------------------------------------------------------------------
Claroline 1.10 – Persistent Cross-Site Scripting
------------------------------------------------------------------------
Andy’s PHP KnowledgeBase 0.95.4 – SQL Injection
------------------------------------------------------------------------
Claroline 1.10 – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/47073/info
webEdition CMS 6.1.0.2 – ‘DOCUMENT_ROOT’ Local File Inclusion
source: https://www.securityfocus.com/bid/47065/info
Alkacon OpenCMS 7.5.x – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47055/info
webEdition CMS – Local File Inclusion
===================================================================
WordPress Plugin BackWPup – Remote Code Execution / Local Code Execution
Sense of Security - Security Advisory - SOS-11-003
Honey Soft Web Solution – Multiple Vulnerabilities
-----------------------------------------------------------------------------------------
OrangeHRM 2.6.2 – ‘jobVacancy.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47046/info
Cetera eCommerce – Multiple Cross-Site Scripting / SQL Injections
source: https://www.securityfocus.com/bid/47044/info
webEdition CMS 6.1.0.2 – Multiple Vulnerabilities
------------------------------------------------------------------------
SimplisCMS 1.0.3.0 – Multiple Vulnerabilities
##########################################################
Family Connections CMS 2.3.2 – Persistent Cross-Site Scripting / XML Injection
Family Connections CMS 2.3.2 Stored XSS And XPath Injection
Family Connections 2.3.2 – ‘subject’ HTML Injection
source: https://www.securityfocus.com/bid/47037/info
netjukebox 4.01B/5.25 – ‘skin’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47027/info
Ripe Website Manager 1.1 – Cross-Site Scripting / Multiple SQL Injections
source: https://www.securityfocus.com/bid/47017/info
GrapeCity Data Dynamics Reports 1.6.2084.14 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47015/info
MC Content Manager 10.1.1 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47014/info
SyndeoCMS 2.8.02 – Multiple Vulnerabilities (2)
Vulnerability ID: HTB22901
Constructr CMS 3.03 – Arbitrary File Upload
#!/usr/bin/env perl
PluggedOut Blog 1.9.9 – ‘year’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/46962/info
Newsportal 0.37 – ‘post.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/46961/info
Online store PHP script – Multiple Cross-Site Scripting / SQL Injections
source: https://www.securityfocus.com/bid/46960/info
Shimbi CMS – Multiple SQL Injections
Title : Shimbi CMS Vulnerable to Multiple SQL Injections
CMS Lokomedia 1.5 – Arbitrary File Upload
===================================================================
Web Poll Pro 1.0.3 – ‘error’ HTML Injection
source: https://www.securityfocus.com/bid/46932/info
CMS Balitbang 3.3 – Arbitrary File Upload
===================================================================
Phpbuddies – Arbitrary File Upload
[!]===========================================================================[!]
Balitbang CMS 3.3 – Multiple Vulnerabilities
[!]===========================================================================[!]
Kleophatra 0.1.4 – Arbitrary File Upload
[!]===========================================================================[!]
XOOPS 2.x – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/46916/info
iCMS 1.1 – Admin SQL Injection / Brute Force
#!/usr/bin/python
CMS Loko Media – Local File Download
[!]===========================================================================[!]
Tugux CMS – ‘nid’ Blind SQL Injection
===================================================================
WordPress Plugin Rating-Widget 1.3.1 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/46904/info
WordPress Plugin Sodahead Polls 2.0.2 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/46902/info
Tugux CMS 1.0_final – Multiple Vulnerabilities
+----------------------------------------------+
Joomla! Component com_booklibrary – SQL Injection
# Exploit Title: SQL Injection in component com_booklibrary for Joomla
Joomla! 1.6 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/46846/info
AplikaMedia CMS – ‘page_info.php’ SQL Injection
source: https://www.securityfocus.com/bid/46896/info
b2evolution 4.0.3 – Persistent Cross-Site Scripting
Source: http://packetstormsecurity.org/files/view/99362/b2evolution403-xss.txt
WikiWig 5.01 – Multiple Cross-Site Scripting Vulnerabilities
Source: http://packetstormsecurity.org/files/view/99363/wikiwig501-xss.txt
pointter PHP content management system 1.2 – Multiple Vulnerabilities
Pointter PHP Content Management System 1.2 Multiple Vulnerabilities
LotusCMS 3.0.3 – Multiple Vulnerabilities
Vulnerability ID: HTB22886
SugarCRM 6.1.1 – Information Disclosure
source: https://www.securityfocus.com/bid/46885/info
IF-CMS 2.07 – Local File Inclusion (1)
#!/usr/bin/python