Joomla! Component com_zina – SQL Injection
# Exploit Title: Joomla Component com_zina SQL Injection Vulnerability
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Joomla! Component com_extcalendar – Blind SQL Injection
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
vbbuletin 4.0.4 – Multiple Vulnerabilities
|| #################################################################### ||
MySQL 5.1.48 – ‘Temporary InnoDB’ Tables Denial of Service
source: https://www.securityfocus.com/bid/42598/info
Cacti 0.8.7 (RedHat High Performance Computing [HPC]) – ‘utilities.php?Filter’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42575/info
Syntax Highlighter 3.0.83 – ‘index.html’ HTML Injection
source: https://www.securityfocus.com/bid/42572/info
Joomla! Component com_dirfrm – Multiple SQL Injections
source: https://www.securityfocus.com/bid/42512/info
Open-Realty 2.5.7 – Local File Disclosure
include the image and sh.php will be generated.
PHP 5.3.3 – ‘ibase_gen_id()’ Off-by-One Overflow
=== Vulnerability ===
Free Simple Software 1.0 – Remote File Inclusion
########################################################
Joomla! Component com_ongallery – SQL Injection
===================================================
Joomla! Component com_jgrid 1.0 – Local File Inclusion
Jgrid 1.0 Joomla Component Local File Inclusion Vulnerability
Joomla! Component com_equipment – SQL Injection
# Exploit Title : Joomla "com_equipment" Sql Injection Vulnerability
123 Flash Chat 7.8 – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/42478/info
CMSimple 3.3 – Cross-Site Scripting / Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/42470/info
Joomla! Component com_fireboard – ‘Itemid’ SQL Injection
source: https://www.securityfocus.com/bid/42460/info
Zomplog 3.9 – ‘message’ Cross-Site Scripting
souce: https://www.securityfocus.com/bid/42457/info
Joomla! Component Weblinks – ‘Itemid’ SQL Injection
source: https://www.securityfocus.com/bid/42455/info
CMSQLite 1.2 / CMySQLite 1.3.1 – Remote Code Execution
#!/usr/bin/php -q -d short_open_tag=on
Zomplog 3.9 – Cross-Site Scripting / Cross-Site Request Forgery
-=[ CSRF PoC 1 - Change Admin Password ]=-
Guestbook Script PHP – Cross-Site Scripting / HTML Injection
=======================================================================
PHP-Fusion – Local File Inclusion
# Exploit Title: PHP-Fusion Local File Includes Vulnerability
Sports Accelerator Suite 2.0 – ‘news_id’ SQL Injection
Sports Accelerator Suite v2.0 (news_id) Remote SQL Injection Vulnerability
Saurus CMS Admin Panel – Multiple Cross-Site Request Forgery Vulnerabilities
# Author: Fady Mohammed Osman (cute hacker)
sFileManager 24a – Local File Inclusion
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
ACollab – Multiple Vulnerabilities
##########################www.BugReport.ir########################################
MailForm 1.2 – Remote File Inclusion
# Exploit Title: [MailForm Remote File Include ]
Get Tube – SQL Injection
-----------------------------------------------------------------------------------------
Plogger – Remote File Disclosure
# Plogger Remote File Disclosure Vulnerability
Edit-X PHP CMS – ‘search_text’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42442/info
CMS Source – Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/42437/info
Rock Band CMS 0.10 – ‘news.php’ Multiple SQL Injections (2)
source: https://www.securityfocus.com/bid/42424/info
MybbCentral TagCloud 2.0 – ‘Topic’ HTML Injection
source: https://www.securityfocus.com/bid/42406/info
KnowledgeTree 3.5.2 Community Edition – Persistent Cross-Site Scripting
# Exploit Title: KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability
Saurus CMS 4.7.0 – Remote File Inclusion
# Exploit Title: [SaurusCMSupdate4.7.0 Remote File Include ]
phpMUR – Remote File Disclosure
# Exploit Title: phpMUR Remote File Disclosure
clearBudget 0.9.8 – Remote File Inclusion
# Exploit Title: clearBudget v0.9.8 Remote File Include
Joomla! Component Teams – Multiple Blind SQL Injections
Teams 1_1028_100809_1711 Joomla Component Multiple Blind SQL Injection Vulnerabilities
Joomla! Component Amblog 1.0 – Multiple SQL Injections
Amblog 1.0 Joomla Component Multiple SQL Injection Vulnerabilities
Nasim Guest Book – ‘page’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42503/info
Onyx – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/42446/info
Mystic 0.1.4 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/42445/info
SyntaxCMS – ‘rows_per_page’ SQL Injection
source: https://www.securityfocus.com/bid/42436/info
Preation Eden Platform 27.7.2010 – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/42321/info
wizmall 6.4 – Cross-Site Request Forgery
# Exploit Title: wizmall 6.4 CSRF Vulnerabilities
Joomla! Component com_yellowpages – SQL Injection
===============================================================
PHP-Nuke 8.x – Blind SQL Injection
#Title: Php Nuke Blind Sql Injection 8.x.x
kleeja 1.0.0RC6 – Database Disclosure
====================================================
PHPKick 0.8 – ‘Statistics.php’ SQL Injection
# Exploit Title: PHPKick v0.8 statistics.php SQL Injection
Tycoon CMS Record Script 1.0.9 – SQL Injection
% Tycoon(CMS) Record Script Sql vulnerability