Zen Cart 1.3.9h – Local File Inclusion
Zen Cart 1.3.9h Local File Inclusion Vulnerability
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
digiSHOP 2.0.2 – SQL Injection
-----------------------------------
eLouai’s Force Download Script – Arbitrary Local File Download
+---------------------------------------------------------------------------------------------+
Dolphin 7.0.3 – Multiple Vulnerabilities
# Exploit Title: Dolphin Mullti Vulnerability
Azaronline Design – SQL Injection
########################################################################
MetInfo 3.0 – ‘FCKeditor’ Arbitrary File Upload
# Exploit Title: [MetInfo 3.0 (fckeditor) File Upload Exploit]
Webmedia Explorer 6.13.1 – Persistent Cross-Site Scripting
Vulnerability ID: HTB22661
MemHT Portal 4.0.1 – Persistent Cross-Site Scripting
Vulnerability ID: HTB22662
Kandidat CMS 1.4.2 – Persistent Cross-Site Scripting
Vulnerability ID: HTB22648
Online Work Order Suite – Login SQL Injection
source: https://www.securityfocus.com/bid/44608/info
WordPress Plugin cformsII 11.5/13.1 – ‘lib_ajax.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/44587/info
SmartOptimizer – Null Character Remote Information Disclosure
source: https://www.securityfocus.com/bid/44578/info
Elastix 2.0.2 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/44565/info
Collabtive 0.65 – SQL Injection
ANATOLIA SECURITY ADVISORY
XAMPP 1.7.3 – Multiple Vulnerabilities
# _ ____ __ __ ___
Joomla! Component Sponsor Wall 1.1 – SQL Injection
============================================================
Joomla! Component Pulse Infotech Flip Wall – SQL Injection
=========================================================
MetInfo 3.0 – PHP Code Injection
#####################################################################################################
MetInfo 2.0 – PHP Code Injection
#####################################################################################################
Simpli Easy (AFC Simple) NewsLetter 4.2 – Cross-Site Scripting / Information Leakage
Simpli Easy (AFC Simple) Newsletter
Zoopeer 0.1/0.2 – ‘FCKeditor’ Arbitrary File Upload
=============================================================
Joomla! Component com_jfuploader < 2.12 - Arbitrary File Upload
=========================================================================================================
CMS WebManager-Pro 7.4.3 – Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/44591/info
mygamingladder MGL Combo System 7.5 – ‘game.php’ SQL Injection
----------------------------Information------------------------------------------------
PHPKit 1.6.1 R2 – ‘overview.php’ SQL Injection
----------------------------Information------------------------------------------------
Pub-Me CMS – Blind SQL Injection
_______ _____ ___
TFTgallery 0.13.1 – Local File Inclusion
# TFTgallery
Feindura CMS Groupware – Multiple Local File Inclusion / Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/44501/info
W-Agora 4.1.5 – Local File Inclusion / Cross-Site Scripting
source: https://www.securityfocus.com/bid/44507/info
LES PACKS – ‘ID’ SQL Injection
source: https://www.securityfocus.com/bid/44457/info
Joomla! Component Projects ‘com_projects’ – SQL Injection / Local File Inclusion
source: https://www.securityfocus.com/bid/44456/info
mycart 2.0 – Multiple Vulnerabilities
MyCart 2.0 Multiple Remote Vulnerabilities
ACC IMoveis 4.0 – SQL Injection
# Exploit Title : iMoveis SQL Injection Vulnerability
Alstrasoft e-Friends 4.96 – Multiple Vulnerabilities
AlstraSoft E-Friends 4.96 Multiple Remote Vulnerabilities
BlogBird Platform – Multiple Cross-Site Scripting Vulnerabilities
Vulnerability ID: HTB22647
Zomplog 3.9 – Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities
Vulnerability ID: HTB22643
NinkoBB 1.3RC5 – Cross-Site Scripting
Vulnerability ID: HTB22652
Zomplog 3.9 – Cross-Site Request Forgery
Vulnerability ID: HTB22645
BloofoxCMS Registration Plugin – SQL Injection
Vulnerability ID: HTB22658
Energine CMS – SQL Injection
Vulnerability ID: HTB22655
BloofoxCMS 0.3.5 – Information Disclosure
Vulnerability ID: HTB22660
MyBB 1.6 – Full Path Disclosure
Vulnerability ID: HTB22654
Novaboard 1.1.4 – Local File Inclusion
Vulnerability ID: HTB22657
DZCP (deV!L`z Clanportal) 1.5.4 – Local File Inclusion
Vulnerability ID: HTB22656
phpLiterAdmin 1.0 RC1 – Authentication Bypass
Vulnerability ID: HTB22653
DBHcms 1.1.4 – ‘dbhcms_user/SearchString’ SQL Injection
Vulnerability ID: HTB22651
BigACE 2.7.3 – Cross-Site Request Forgery (Change Admin Password)
#!/usr/bin/python
Plesk Small Business Manager 10.2.0 and Site Editor – Multiple Vulnerabilities
XSS + SQL Injection in Plesk Small Business Manager 10.2 + Site Editor