Joomla! Component NeoRecruit 1.4 – SQL Injection
) ) ) ( ( ( ( ( ) )
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Joomla! Component com_cgtestimonial 2.2 – Multiple Vulnerabilities
cgTestimonial 2.2 Joomla Component Multiple Remote Vulnerabilities
Dataface 1.0 – ‘admin.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42282/info
Prado Portal 1.2 – ‘page’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42276/info
Muraus Open Blog – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/42255/info
Hulihan Applications Amethyst 0.1.5 – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/42253/info
DiamondList – ‘/user/main/update_category?category[description]’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42252/info
DiamondList – ‘/user/main/update_settings?setting[site_title]’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42252/info
Hulihan Applications BXR 0.6.8 – SQL Injection / HTML Injection
source: https://www.securityfocus.com/bid/42247/info
PHPFinance 0.6 – ‘/group.php’ SQL Injection / HTML Injection
source: https://www.securityfocus.com/bid/42230/info
DiamondList 0.1.6 – Cross-Site Request Forgery
Vulnerability ID: HTB22517
Amethyst 0.1.5 – Cross-Site Scripting
Vulnerability ID: HTB22502
BXR 0.6.8 – Cross-Site Request Forgery
Vulnerability ID: HTB22503
Open Blog 1.2.1 – Cross-Site Request Forgery
Vulnerability ID: HTB22496
ccTiddly 1.7.6 – Multiple Remote File Inclusions
1 ######################################## 1
APBoard 2.1.0 – ‘board.php?id’ SQL Injection
#############################################################################################################
sX-Shop – Multiple SQL Injections
########################################################################################
sX-Shop – ‘view_image.php’ SQL Injection
#############################################################################################################
Nuked-klaN Module Partenaires NK 1.5 – Blind SQL Injection
####################################################################
WordPress Plugin NextGEN Smooth Gallery 0.12 – Blind SQL Injection
#############################################################################################################
68KB 1.0.0rc4 – Remote File Inclusion
====================================================
Joomla! Component com_jigsaw – ‘Controller’ Directory Traversal
source: https://www.securityfocus.com/bid/42144/info
MyIT CRM – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/42140/info
MyIT CRM – Multiple Cross-Site Scripting Vulnerabilities
Advisory Name: Multiple Cross-Site Scripting (XSS) in MyIT CRM
Joomla! Component CamelcityDB 2.2 – SQL Injection
==============================================================
APT-WEBSHOP-SYSTEM – ‘modules.php’ SQL Injection
===============================================
SnoGrafx – ‘cat.php?cat’ SQL Injection
########################################################################################
Joomla! Component com_spielothek 1.6.9 – Multiple Blind SQL Injections
Spielothek 1.6.9 Joomla Component Multiple Blind SQL Injection
Concept E-Commerce – SQL Injection
#######################################
Sourcefabric Campsite – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/42107/info
Joomla! Component com_beamospetition – SQL Injection
# Exploit Title : Joomla "com_beamospetition" Sql Injection Vulnerability
Joomla! Component com_SimpleShop – SQL Injection
==============================================================
Whizzy CMS 10.02 – Local File Inclusion
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Joomla! Component com_pbbooking 1.0.4_3 – Multiple Blind SQL Injections
PBBooking 1.0.4_3 Joomla Component Multiple Blind SQL Injection
Joomla! Component com_photomapgallery 1.6.0 – Multiple Blind SQL Injections
PhotoMap Gallery 1.6.0 Joomla Component Multiple Blind SQL Injection
AV Arcade 3 – Cookie Authentication Bypass
:----------------------------------------------------------------------------:
nuBuilder – Remote File Inclusion
Software: nuBuilder 10.04.x and lower(maybe)?
Cetera eCommerce – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/42059/info
Cetera eCommerce – Multiple SQL Injections
source: https://www.securityfocus.com/bid/42058/info
SPIP 2.1 – ‘var_login’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42060/info
Impact Software AdPeeps – Cross-Site Scripting / HTML Injection
source: https://www.securityfocus.com/bid/42071/info
Social Media – ‘index.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/42009/info
Joomla! Component com_appointinator 1.0.1 – Multiple Vulnerabilities
Appointinator 1.0.1 Joomla Component Multiple Remote Vulnerabilities
nuBuilder 10.04.20 – Local File Inclusion
------------------------------------------------------------------------
PunBB 1.3.4 / Pun_PM 1.2.6 – Blind SQL Injection
#!/usr/bin/perl
Joomla! Component TTVideo 1.0 – SQL Injection
TTVideo 1.0 Joomla Component SQL Injection Vulnerability
Joomla! Component Visites 1.1 RC2 – Remote File Inclusion
==========================================================
Freeway CMS 1.4.3.210 – SQL Injection
-----------------------------------------------------------------------------------------
SyndeoCMS 2.9 – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/41989/info
Joomla! Component FreiChat 1.0/2.x – HTML Injection
source: https://www.securityfocus.com/bid/41961/info