php

MC Content Manager 10.1 – SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/41949/info

vBulletin – ‘misc.php’ Template Name Arbitrary Code Execution (Metasploit)

##

TikiWiki jhot – Remote Command Execution (Metasploit)

##

Simple PHP Blog 0.4.0 – Remote Command Execution (Metasploit)

##

XML-RPC Library 1.3.0 – ‘xmlrpc.php’ Arbitrary Code Execution (Metasploit)

##

WhiteBoard 0.1.30 – Multiple Blind SQL Injections

WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities

CMS Ignition – SQL Injection

|------------------------------------------------|

Ballettin Forum – SQL Injection

====================================================================

XAOS CMS – SQL Injection

# Exploit Title: XAOS CMS SQL Injection Vulnerability

Joomla! Component YouTube 1.5 – SQL Injection

# Exploit Title: Joomla "com_youtube" Sql Injection Vulnerability

Joomla! Component Joomdle 0.24 – SQL Injection

[!]===========================================================================[!]

sNews 1.7 – ‘index.php?category’ SQL Injection

########################################################################################

Joomla! Component com_itarmory – SQL Injection

# Author: Craw

Joomla! Component Ozio Gallery – SQL Injection

# Exploit Title: Joomla Component (com_oziogallery) SQL Injection

Open Realty 2.x/3.x – Persistent Cross-Site Scripting

# Title: persistence XSS flaw in Open Realty 2.x and 3.x

sNews – ‘index.php’ SQL Injection

# Exploit Title:sNews (index.php) SQL Injection Vulnerability

DM FileManager 3.9.11 – Arbitrary File Upload

vBulletin 3.8.6 – ‘faq.php’ Information Disclosure

010101010101010101010101010101010101010101010101010101010

ValidForm Builder script – Remote Command Execution

# Exploit Title: ValidForm Builder script Remote Command Execution

PhotoPost PHP 4.6.5 – ‘ecard.php’ SQL Injection

########################################################################################

Joomla! Component com_iproperty – SQL Injection

====================================================

Joomla! Component Huru Helpdesk – SQL Injection (2)

====================================================

Joomla! Component Golf Course Guide 0.9.6.0 – SQL Injection

# Exploit Title: Joomla Component com_golfcourseguide SQL Injection Vulnerability

PhotoPost – PHP SQL Injection

# Exploit Title: PhotoPost PHP SQL Injection Vulnerability

ZeeMatri 3.x – Arbitrary File Upload

1 ################################### 1

ZeeNetworking 1x – Arbitrary File Upload

1 ################################### 1

LILDBI – Arbitrary File Upload

# Exploit Title: LILDBI Shell Upload Vulnerability

ZeeAdbox 2.x – SQL Injection

=======================================================

WordPress Plugin myLDlinker – SQL Injection

010101010101010101010101010101010101010101010101010101010

phpBB MOD 2.0.19 – Invitation Only (PassCode Bypass)

PHPBB MOD [2.0.19] Invitation Only (PassCode Bypass vulnerability)

phpBazar Admin – Information Disclosure

=====================================

Free PHP Photo Gallery Script – Remote File Inclusion

# Exploit Title: Free PHP photo gallery script Remote File inclusion

Free PHP photo Gallery script – Remote Command Execution

# Exploit Title: Free PHP photo gallery script Remote Command Execution

AJ HYIP MERIDIAN – ‘news.php?id’ Blind SQL Injection

AJ HYIP MERIDIAN (news.php id) Blind SQL Injection Vulnerability

Joomla! Component com_jomtube – ‘user_id’ Blind SQL Injection

===============================================================================

Claus Muus Spitfire 1.0.336 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41885/info

AJ HYIP PRIME – ‘welcome.php?id’ Blind SQL Injection

AJ HYIP PRIME (welcome.php id) Blind SQL Injection Vulnerability

RapidLeech Scripts – Arbitrary File Upload

# Exploit Title: RapidLeech Scrits Remote File Upload ( upload shell php )

OpenX – ‘phpAdsNew’ Remote File Inclusion

# Exploit Title: OpenX (phpAdsNew) Remote File inclusion Vulnerability

Imagine-cms 2.50 – SQL Injection

#!/usr/bin/perl

PHP Chat for 123 Flash Chat – Remote File Inclusion

# Date: 2010/07/20

Joomla! Component com_spa – SQL Injection (1)

====================================================

EZ-osCommerce 3.1 – Arbitrary File Upload

====================================================

SnowFlake CMS 0.9.5 Beta – ‘uid’ SQL Injection

source: https://www.securityfocus.com/bid/41791/info

YACS CMS 10.5.27 – ‘context[path_to_root]’ Remote File Inclusion

source: https://www.securityfocus.com/bid/41773/info

rapidCMS 2.0 – Authentication Bypass

# Exploit Title: rapidCMS V2 Authentication Bypass

PHP-Fusion – Remote Command Execution

# Exploit Title: PHP-Fusion Remote Command Execution Vulnerability

Kayako eSupport 3.70.02 – ‘functions.php’ SQL Injection

Peace !!

Joomla! Component StaticXT – SQL Injection

===================================================

Joomla! Component com_spa – SQL Injection (2)

===================================================