HP Insight Diagnostics Online Edition 8.4 – ‘globals.php?tabpage’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42888/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
HP Insight Diagnostics Online Edition 8.4 – ‘survey.php?category’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42888/info
HP Insight Diagnostics Online Edition 8.4 – ‘idstatusframe.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/42888/info
HP Insight Diagnostics Online Edition 8.4 – ‘parameters.php?device’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42888/info
mBlogger 1.0.04 – ‘viewpost.php’ SQL Injection
#!/usr/bin/python
Web-Ideas Web Shop Standard – SQL Injection
# Exploit Title: [SQL injection in web-ideas web shop standard]
Joomla! Component JE FAQ Pro 1.5.0 – Multiple Blind SQL Injections
---------------------------------------------------------------------------------
Joomla! Component PicSell 1.0 – Local File Disclosure
# Author: Craw
seagull 0.6.7 – Remote File Inclusion
=================================
GuestBookPlus – HTML Injection / Bypass Comments Limit
=======================================================================
Seagull 0.6.7 – SQL Injection
1 ###################################### 1
CF Image Hosting Script 1.3.8 – Remote File Inclusion
=================================
Multi-lingual E-Commerce System 0.2 – Multiple Remote File Inclusions
Multi-lingual E-Commerce System 0.2 Multiple Remote File Inclusion Vulnerabilities
Max’s Guestbook – HTML Injection / Cross-Site Scripting
================================================================
vBulletin 3.8.4/3.8.5 – Registration Bypass
===============================================================
WebsiteKit Gbplus – ‘Name’ / ‘Body’ HTML Injection
source: https://www.securityfocus.com/bid/42842/info
CF Image Hosting Script 1.3 – ‘settings.cdb’ Information Disclosure
### Title: CF Image Hosting script 1.3 (settings.cdb) Information Disclosure Vulnerability ###
XOOPS 2.0.14 – ‘article.php’ SQL Injection
##################################################################
Blogman 0.7.1 – ‘profile.php’ SQL Injection
#!/usr/bin/python
GaleriaSHQIP 1.0 – SQL Injection
# Exploit Title: GaleriaSHQIP SQL Injection Vulnerability
textpattern CMS 4.2.0 – Remote File Inclusion
# Remote File Inclusion Vulnerability
DIY-CMS 1.0 – Multiple Remote File Inclusions
# Exploit Title: [DiY-CMS 1.0 Remote File Inclusion ]
iGaming CMS – Multiple SQL Injections
############################################################################
Pc4Uploader 9.0 – Cross-Site Request Forgery
# Exploit Title: pc4uploader [XSRF] Add Admin Exploit# Date: 27-08-2010# Author: RENO
Esvon Classifieds 4.0 – Multiple Vulnerabilities
1 ########################################## 1
pecio CMS 2.0.5 – Multiple Remote File Inclusions
======================================================================
Joomla! Component com_remository – Arbitrary File Upload
#################################################################
Gaestebuch 1.2 – Remote File Inclusion
########################################################
kontakt formular 1.1 – Remote File Inclusion
########################################################
Mini-CMS / News Script Light 1.0 – Remote File Inclusion
#!/usr/bin/perl
Prometeo 1.0.65 – SQL Injection
=================================
Hycus CMS 1.0.1 – Multiple Cross-Site Request Forgery Vulnerabilities
-=[ CSRF PoC 1 - Change Admin Password ]=-
Atomic Photo Album 1.0.2 – Multiple Vulnerabilities
[~] Atomic Photo Album 1.0.2 (SQL/XSS) Multiple Remote Vulnerabilities
osCommerce Online Merchant – Remote File Inclusion
# Exploit Title: [oscommerce-3.0a5 Remote File Inclusion ]
CompuCMS – Multiple SQL Injections / Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/42773/info
Valarsoft WebMatic 3.0.5 – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/42767/info
TCMS – Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/42766/info
BlastChat Client 3.3 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/42734/info
ClanSphere 2010 – Multiple Vulnerabilities
############################################################################
Simple Forum PHP – Multiple Vulnerabilities
# Exploit Title: Simple Forum PHP (XSS/HTML Injection Vulnerabilities)
Joomla! 1.5 – URL Redirecting
============================================
Joomla! Component com_zoomportfolio – SQL Injection
---------------------------------------------------------------------------------
Link CMS – SQL Injection
# Exploit Title: LINK CMS.SQL Injection Vulnerability
AneCMS – ‘/registre/next’ SQL Injection
############################################################################
Gazelle CMS – Multiple Vulnerabilities
############################################################################
4Images 1.7.8 – Remote File Inclusion
# Exploit Title: [4images1.7.8 Remote File Include ]
Auto CMS 1.6 – ‘autocms.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42764/info
AneCMS 1.0/1.3 – ‘register/next’ SQL Injection
source: https://www.securityfocus.com/bid/42615/info
Joomla! Component Fabrik – SQL Injection
$##################################################################$
Joomla! Component Biblioteca 1.0 Beta – Multiple SQL Injections
Biblioteca 1.0 Beta Joomla Component Multiple SQL Injection Vulnerabilities