RunCMS 2.1 – ‘magpie_debug.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41551/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
CSSTidy 1.3 – ‘css_optimiser.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41552/info
eliteCMS 1.01 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/41537/info
Joomla! Component Rapid-Recipe – HTML Injection
source: https://www.securityfocus.com/bid/41531/info
Joomla! Component Rapid-Recipe – Persistent Cross-Site Scripting
1 ########################################## 1
My Kazaam Address & Contact ORGanizer – SQL Injection
) ) ) ( ( ( ( ( ) )
My Kazaam Notes Management System – Multiple Vulnerabilities
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Sillaj time tracking tool – Authentication Bypass
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Edgephp ClickBank Affiliate Marketplace Script – Multiple Vulnerabilities
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Elite CMS 1.01 – Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities
# Name: Elite CMS 1.01 Multiple XSS/CSRF Vulnerabilities
PHP-Nuke 8.0 -Web_Links Module – Blind SQL Injection
# PHP-Nuke new;
Joomla! Component MySMS – Arbitrary File Upload
1 ########################################## 1
Joomla! Component MyHome – Blind SQL Injection
Name : Joomla com_myhome BSQLi Vulnerability
Joomla! Component redSHOP 1.0 – ‘pid’ SQL Injection
) ) ) ( ( ( ( ( ) )
WordPress Plugin Firestats – Remote Configuration File Download
# Exploit Title: Wordpress firestats remote configuration file download
HoloCMS 9.0.47 – ‘news.php’ SQL Injection
##############################################################################
CMS Contentia – ‘news.php’ SQL Injection
##############################################################################
Joomla! Component QuickFAQ 1.0.3 – Blind SQL Injection
-----------------------------------------------------------------------------------------
sphider 1.3.5 – Remote File Inclusion
--##----------##------######--------------------------------########----------------##--------|
Joomla! Component Minify4Joomla! – Arbitrary File Upload / Persistent Cross-Site Scripting
=======================================================
Joomla! Component IXXO Cart – SQL Injection
1 ########################################## 1
b2evolution 3.3.3 – Cross-Site Request Forgery
----------------------------------------------------------------------------
WordPress Plugin Firestats 1.6.5 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/41548/info
Yappa 3.1.2 – ‘yappa.php’ Multiple Remote Command Execution Vulnerabilities
source: https://www.securityfocus.com/bid/41521/info
SimpNews 2.47.3 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/41517/info
Real Estate Manager 1.0.1 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41507/info
osCSS 1.2.2 – ‘page’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41510/info
PG Social Networking – Arbitrary File Upload
==============================================================
Inout Ad server Ultimate – Arbitrary File Upload
==============================================================
Inout Article Base Ultimate – Arbitrary File Upload
==============================================================
Inout Music 1.0 – Arbitrary File Upload
==============================================================
Joomla! Component Music Manager – Local File Inclusion
Critical Level : HIGH
Pithcms – ‘theme’ Local/Remote File Inclusion
Title: pithcms (theme) Local / remote File inclusion VUlnerability
Zylone IT – Multiple Blind SQL Injections
# Exploit Title: Zylone IT Multiple Blind SQL Injection Vulnerability
Joomla! Component PaymentsPlus 2.1.5 – Blind SQL Injection
Critical Level : HIGH
Joomla! Component ArtForms 2.1b7.2 rc2 – Multiple Vulnerabilities
ArtForms 2.1b7.2 RC2 Joomla Component Multiple Remote Vulnerabilities
Simple Document Management System – SQL Injection
########################################################
Sijio Community Software – SQL Injection / Persistent Cross-Site Scripting
########################################################
Green Shop – SQL Injection
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Worxware DCP-Portal 7.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/41453/info
RunCMS 2.1 – ‘check.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41448/info
Exponent CMS 0.97 – ‘Slideshow.js.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41447/info
NTSOFT BBS E-Market Professional – Multiple Cross-Site Scripting Vulnerabilities (2)
source: https://www.securityfocus.com/bid/41401/info
i-Net Solution Matrimonial Script 2.0.3 – ‘alert.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41387/info
sandbox 2.0.3 – Multiple Vulnerabilities
Sandbox 2.0.3 Multiple Remote Vulnerabilities
PsNews 1.3 – SQL Injection
#########################################################################################
Joomla! Component NeoRecruit 1.6.4 – ‘Itemid’ Blind SQL Injection
Name : Joomla com_neorecruit BSqli Vulnerability