AWCM 2.1 Final – Remote File Inclusion
[+]Exploit Title: [awcm v2.1 final Remote File Inclusion]
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Build a Niche Store 3.0 – ‘BANS’ Authentication Bypass
#########################################################################
Joomla! Component JSupport 1.5.6 – SQL Injection
# Exploit Title: Joomla Component com_jsupport SQL Injection Vulnerability
Joomla! Component JSupport 1.5.6 – Cross-Site Scripting
# Exploit Title: Joomla Component com_jsupport Critical XSS Vulnerability
Woltlab Burning Board 2.3.4 – File Disclosure
# Exploit Title: Woltlab Burning Board 2.3.4 File Disclosure Vulnerability
Metinfo 3.0 – Multiple Vulnerabilities
# Exploit Title: metinfo3.0 Mullti Vulnerability
XT:Commerce < 3.04 SP2.1 - Cross-Site Scripting
#----------------------------------------------------------------------------------
Landesk – OS command Injection
1. Advisory Information
eBlog 1.7 – Multiple SQL Injections
eBlog 1.7 Multiple SQL Injection Vulnerabilities
FCKEditor Core 2.x 2.4.3 – ‘FileManager upload.php’ Arbitrary File Upload
# Exploit Title: FCKeditor 2.0-2.4.3 arbitrary file upload
WeBid 0.85P1 – Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/44765/info
PHPShop 2.1 EE – ‘name_new’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44763/info
Ricoh Web Image Monitor 2.03 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/44772/info
osCommerce 2.2 – Cross-Site Request Forgery
# Exploit Title: osCommerce v2.2 Change Admin Pass
Joomla! Component com_img – Local File Inclusion
################################################################################################################
Joomla! Component com_markt – SQL Injection
################################################################################################################
Joomla! Component btg_oglas – HTML / Cross-Site Scripting Injection
################################################################################################################
Joomla! Component JQuarks4s 1.0.0 – Blind SQL Injection
JQuarks4s Joomla Component 1.0.0 Blind SQL Injection Vulnerability
Woltlab Burning Board Userlocator 2.5 – SQL Injection
----------------------------Information------------------------------------------------
Joomla! Component ProDesk 1.5 – Local File Inclusion
[~]-------------------------------------------------------------------------------------------------------
Seo Panel 2.1.0 – Critical File Disclosure
Title: Seo Panel 2.1.0 - Critical File Disclosure
Joomla! Component com_clanlist – SQL Injection
########################################################################################
xt:Commerce Shopsoftware 3/4 – ‘FCKeditor’ Arbitrary File Upload
=============================================================
Joomla! Component com_clan – SQL Injection
Joomla Component com_clan Sql Injection Vulnerability
Joomla! Component Cookex Agency CKForms – Local File Inclusion
####################################################################
WordPress Plugin jRSS Widget 1.1.1 – ‘url’ Information Disclosure
source: https://www.securityfocus.com/bid/44716/info
WordPress Plugin Vodpod Video Gallery 3.1.5 – ‘vodpod_gallery_thumbs.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44715/info
WordPress Plugin SEO Tools 3.0 – ‘file’ Directory Traversal
source: https://www.securityfocus.com/bid/44710/info
WordPress Plugin WP Survey And Quiz Tool 1.2.1 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/44707/info
WordPress Plugin FeedList 2.61.01 – ‘handler_image.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44704/info
PHP 5.3.x – ‘mb_strcut()’ Information Disclosure
# source: https://www.securityfocus.com/bid/44727/info
Punbb 1.3.4 – Multiple Full Path Disclosures
# Exploit Title: Punbb 1.3.4 Full Path Disclosure
DeluxeBB 1.3 – Private Information Disclosure
======================================================================
phpCow 2.1 – File Inclusion
[*]##############################################
Joomla! Component com_forme 1.0.5 – Multiple Vulnerabilities
# Exploit Title: RSform! 1.0.5 (Joomla) Multiple Vulnerabilities
Zeeways Adserver – Multiple Vulnerabilities
# Exploit Title: Zeeways Adserver Multiple Vulnerabilities
MassMirror Uploader – Remote File Inclusion
=====================================================================================
Joomla! Component com_dcnews – Local File Inclusion
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Joomla! Component com_connect – Local File Inclusion
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
PHP 5.3.3/5.2.14 – ZipArchive::getArchiveComment Null Pointer Dereference
[ PHP 5.3.3/5.2.14 ZipArchive::getArchiveComment NULL Pointer Deference ]
Joomla! Component ccInvoices – SQL Injection
#############################################################
pfSense 2 Beta 4 – ‘graph.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/44738/info
Joomla! Component AutoArticles 3000 – SQL Injection
source: https://www.securityfocus.com/bid/44694/info
Joomla! 1.5.x – SQL Error Information Disclosure
source: https://www.securityfocus.com/bid/44674/info
JBI CMS – SQL Injection
In The Name Of GOD
MiniBB 2.5 – SQL Injection
Vulnerability ID: HTB22671
JAF CMS 4.0 rc2 – Multiple Vulnerabilities
Vulnerability ID: HTB22665
SweetRice 0.6.7 – Multiple Vulnerabilities
Vulnerability ID: HTB22669
eoCMS 0.9.04 – Multiple Vulnerabilities
Vulnerability ID: HTB22677