Jamb – Cross-Site Request Forgery (Add a Post)
#!/usr/bin/python
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
DBHcms 1.1.4 – ‘dbhcms_pid’ SQL Injection
DBHcms 1.1.4 SQL Injection Vulnerability
Pulse Pro 1.4.3 – Persistent Cross-Site Scripting
# Exploit Title: Pulse Pro 1.4.3 Persistent XSS Vulnerability
W-Agora 4.2.1 – ‘search.php?bn’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44370/info
W-Agora 4.2.1 – ‘search.php3?bn’ Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/44370/info
Simple Directory Listing 2.1 – ‘SDL2.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42359/info
pecio CMS 2.0.5 – ‘target’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44304/info
Micro CMS 1.0 – ‘name’ HTML Injection (2)
source: https://www.securityfocus.com/bid/44300/info
Wiccle Web Builder 2.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/44295/info
Squirrelcart PRO 3.0.0 – Blind SQL Injection
Squirrelcart PRO 3.0.0 Blind SQL Injection Vulnerability
sNews CMS – Multiple Cross-Site Scripting Vulnerabilities
Vulnerability ID: HTB22638
phpCheckZ 1.1.0 – Blind SQL Injection
phpCheckZ 1.1.0 Blind SQL Injection Vulnerability
Event Ticket Portal Script Admin Password Change – Cross-Site Request Forgery
===========================================================
Travel Portal Script – Cross-Site Request Forgery (Admin Password Change)
=====================================================
4Site CMS 2.6 – ‘cat’ SQL Injection
source: https://www.securityfocus.com/bid/44258/info
sNews 1.7 – ‘snews.php’ Cross-Site Scripting / HTML Injection
source: https://www.securityfocus.com/bid/44255/info
Brooky CubeCart 2.0.1 – SQL Injection
===================================================================
GeekLog 1.7.0 – ‘FCKeditor’ Arbitrary File Upload
###################################################
411cc – Multiple SQL Injections
===================================================================
Tastydir 1.2 (1216) – Multiple Vulnerabilities
# Exploit Title: Tastydir
WikiWebHelp 0.3.3 – Insecure Cookie Handling
===============================================
KCFinder 2.2 – Arbitrary File Upload
: # Exploit Title: kcfinder 2.2 upload shell :
eXV2 CMS – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/44169/info
TWiki 5.0 – bin/login Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/44103/info
TWiki 5.0 – ‘/bin/view?rev’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44103/info
Xlrstats 2.0.1 – SQL Injection
----------------------------------------------------------------------------
Data/File – upload and Management Arbitrary File Upload
: # Exploit Title: Data/File upload and management local shell upload :
Exponent CMS 0.97 – Multiple Vulnerabilities
Exponent CMS v0.97 Multiple Vulnerabilities
PluXml 5.0.1 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/44069/info
Ronny CMS 1.1 r935 – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/44066/info
Joomla! Component Jstore – ‘Controller’ Local File Inclusion
source: https://www.securityfocus.com/bid/44053/info
Collabtive 0.65 – Multiple Vulnerabilities
ANATOLIA SECURITY ADVISORY
WikiWebHelp 0.3.3 – Cross-Site Request Forgery
#Blog: yoyahack.blogspot.com
BaconMap 1.0 – Local File Disclosure
------------------------------------------------------------------------
BaconMap 1.0 – SQL Injection
------------------------------------------------------------------------
OrangeHRM 2.6.0.1 – Local File Inclusion
# Exploit Title: OrangeHRM 2.6.0.1 Local File Inclusion Vulnerability
Joomla! / Mambo Component com_trade – ‘PID’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43915/info
PHP-Fusion Mod Mg User Fotoalbum 1.0.1 – SQL Injection
----------------------------Information------------------------------------------------
VideoDB 3.0.3 – Multiple Vulnerabilities
# Exploit Title: VideoDB Multiple Vulnerabilities
Joomla! Component JS Calendar 1.5.1 – Multiple Vulnerabilities
JS Calendar 1.5.1 Joomla Component Multiple Remote Vulnerabilities
Chipmunk Pwngame – Multiple SQL Injections
===================================================
Flex Timesheet – Authentication Bypass
===================================================
OPEN IT OverLook 5 – ‘title.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43872/info
Lantern CMS – ’11-login.asp’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43865/info
Feindura File Manager 1.0(rc) – Arbitrary File Upload
===================================================
Backbone Technology Expression 18.9.2010 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/43910/info
Joomla! Component Club Manager – ‘cm_id’ SQL Injection
source: https://www.securityfocus.com/bid/43821/info