SquirrelMail Virtual Keyboard Plugin – ‘vkeyboard.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43749/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Elxis 2009.2 rev2631 – SQL Injection
source: https://www.securityfocus.com/bid/43743/info
Cag CMS 0.2 – Cross-Site Scripting / Blind SQL Injection
-----------------------------------------------------------------------------------------
SPAW Editor 2.0.8.1 – Local File Inclusion
# Exploit Title: local file include
CuteNews – ‘page’ Local File Inclusion
==========================================================
Uebimiau Webmail 3.2.0-2.0 – Local File Inclusion
# Exploit Title: Uebimiau Webmail Local File Inclusion
Aspect Ratio CMS – Blind SQL Injection
# Author: Stephan Sattler // http://www.solidmedia.de
DNET Live-Stats 0.8 – Local File Inclusion
# Exploit Title: DNET Live-Stats 0.8 Local File Inclusion
FAQMasterFlex 1.2 – SQL Injection
Hi guys, I just found a sqli bug on FAQMasterFlex. Since the software used
Docebo 3.6 – ‘description’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43721/info
ITS SCADA – ‘Username’ SQL Injection
source: https://www.securityfocus.com/bid/43680/info
Surgemail SurgeWeb 4.3e – Cross-Site Scripting
source: https://www.securityfocus.com/bid/43679/info
Portili Personal and Team Wiki 1.14 – Multiple Vulnerabilities (2)
source: https://www.securityfocus.com/bid/41973/info
Aprox CMS Engine 6.0 – Multiple Vulnerabilities
# Exploit Title: Aprox CMS Engine V6 Multiple Vulnerabilities
TinyMCE MCFileManager 2.1.2 – Arbitrary File Upload
==============================================
iGaming CMS 1.5 – Blind SQL Injection
#!/usr/bin/env perl
Chipmunk Board 1.3 – ‘index.php?forumID’ SQL Injection
# Exploit Title: Chipmunk Board (index.php?forumID) Remote SQL Injection Vulnerability
Tiki Wiki CMS Groupware 5.2 – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/43507/info
phpMyShopping 1.0.1505 – Multiple Vulnerabilities
####################################################################
Evaria Content Management System 1.1 – File Disclosure
# Exploit Title: local file include / File Disclosure
Zen Cart 1.3.9f – ‘typefilter’ Local File Inclusion
Zen Cart v1.3.9f (typefilter) Local File Inclusion Vulnerability
zen cart 1.3.9f – Multiple Vulnerabilities
Zen Cart v1.3.9f Multiple Remote Vulnerabilities
JomSocial 1.8.8 – Arbitrary File Upload
There is a file upload vulnerability in version 1.8.8 and earlier of
Joomla! Component JE Directory 1.0 – SQL Injection
----------------------------Information------------------------------------------------
Joomla! Component JE Job – SQL Injection
----------------------------Information------------------------------------------------
Joomla! Component JE Guestbook 1.0 – Multiple Vulnerabilities
JE Guestbook 1.0 Joomla Component Multiple Remote Vulnerabilities
Webspell 4.x – safe_query Bypass
################# INFORMATION ##################################################
Webspell wCMS-Clanscript4.01.02net – static Blind SQL Injection
#----------------------------Information------------------------------------------------
Webspell 4.2.1 – ‘asearch.php’ SQL Injection
################# INFORMATION ##################################################
Getsimple CMS 2.01 – ‘changedata.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43593/info
Pluck CMS 4.6.3 – ‘cont1’ HTML Injection
source: https://www.securityfocus.com/bid/43597/info
MODx 2.0.2-pl – ‘/manager/index.php?modahsh’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43577/info
MODx manager – ‘/controllers/default/resource/tvs.php?class_key’ Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/43577/info
PHPMyFAQ 2.6.x – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43560/info
Micro CMS 1.0 – ‘name’ HTML Injection (1)
source: https://www.securityfocus.com/bid/43556/info
Micro CMS 1.0 b1 – Persistent Cross-Site Scripting
##############################################################################
Achievo 1.4.3 – Cross-Site Request Forgery
Advisory Name: Cross Site Request Forgery in Achievo 1.4.3
Achievo 1.4.3 – Multiple Authorisation Vulnerabilities
Advisory Name: Multiple Authorization Flaws in Achievo 1.4.3
e107 0.7.23 – SQL Injection
Vulnerability ID: HTB22604
Car Portal 2.0 – Blind SQL Injection
[+]Title Car Portal v2.0 BLIND SQL Injection Vulnerability
Entrans – SQL Injection
# Exploit Title: Entrans SQLi vulnerablility
pbboard 2.1.1 – Multiple Vulnerabilities
==================================================
NetArt Media Car Portal 2.0 – ‘car’ SQL Injection
source: https://www.securityfocus.com/bid/43536/info
Horde IMP Webmail 4.3.7 – ‘fetchmailprefs.php’ HTML Injection
source: https://www.securityfocus.com/bid/43515/info
MySITE – SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/43510/info
PEEL Premium 5.71 – SQL Injection
============================================