Grafik CMS – ‘/admin.php’ SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/41227/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
CANDID – ‘/image/view.php?image_id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41216/info
CANDID – ‘/image/view.php?image_id’ SQL Injection
source: https://www.securityfocus.com/bid/41216/info
PHP Bible Search – ‘bible.php?chapter’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41197/info
PHP Bible Search – ‘bible.php?chapter’ SQL Injection
source: https://www.securityfocus.com/bid/41197/info
V-EVA Classified Script 5.1 – ‘classified_img.php’ SQL Injection
source: https://www.securityfocus.com/bid/41204/info
Clix’N’Cash Clone 2010 – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/41202/info
eBay Clone Script 2010 – ‘showcategory.php’ SQL Injection
source: https://www.securityfocus.com/bid/41200/info
MySpace Clone 2010 – SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/41199/info
BlaherTech Placeto CMS – ‘Username’ SQL Injection
source: https://www.securityfocus.com/bid/41190/info
Customer Paradigm PageDirector – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/41184/info
CMSQLite / CMySQLite 1.3 – Cross-Site Request Forgery
# Title: CMSQlite & CMySQLite CSRF Vulnerability
I-net Multi User Email Script – SQL Injection
Name : I-net Multi User Email Script SQLi Vulnerability
Netartmedia iBoutique.MALL – SQL Injection
Name : Netartmedia iBoutique.MALL SQLi Vulnerability
PageDirector CMS – Multiple Vulnerabilities
###################################################################################
PTCPay GEN4 – ‘buyupg.php’ SQL Injection
=====================================================
iNet Online Community – Blind SQL Injection
# Exploit Title: iNet Online Community Blind SQLi Vulnerability
Swoopo Clone 2010 – SQL Injection
1 ########################################## 1
I-Net MLM Script Engine – SQL Injection
1 ########################################## 1
i-netsolution Job Search Engine – SQL Injection
1 ########################################## 1
Bilder Upload Script Datei Upload 1.09 – Arbitrary File Upload
[~]######################################### InformatioN
2DayBiz Photo Sharing Script – SQL Injection (2)
----------------------------Information------------------------------------------------
2DayBiz ybiz Freelance Script – SQL Injection
----------------------------Information------------------------------------------------
2DayBiz ybiz Polls Script – SQL Injection
----------------------------Information------------------------------------------------
2DayBiz Matrimonial Script – ‘smartresult.php’ SQL Injection
----------------------------Information------------------------------------------------
Ceica-GW – ‘login.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40917/info
Speedy 1.0 – Arbitrary File Upload
# Author: ViRuS Qalaa
Joomla! Component jesectionfinder – Local File Inclusion
Name : Joomla jesectionfinder LFI Vulnerability
Joomla! Component com_jejob – Local File Inclusion
Name : Joomla com_jejob LFI Vulnerability
Joomla! Component jeeventcalendar – Local File Inclusion
Critical Level : HIGH
Joomla! Component JE Media Player – Local File Inclusion
Name : Joomla je-media-player LFI Vulnerability
Joomla! Component JE Awd Song – Persistent Cross-Site Scripting
Critical Level : HIGH
WordPress Plugin Cimy Counter – Full Path Disclosure / Redirector / Cross-Site Scripting / HTTP Response Spitting
----------------------------
Clicker CMS – Blind SQL Injection
# Exploit Title: Clicker CMS Blind SQL Injection Vulnerability
Joomla! Component com_sef – Remote File Inclusion
==========================================================
Joomla! Component jesubmit 1.4 – SQL Injection
Exploit Title: Joomla JE Story submit SQL Injection
snipe Gallery Script – SQL Injection
# Exploit Title: snipe gallery Script Sql Injection
2DayBiz B2B Portal Script – ‘selling_buy_leads1.php’ SQL Injection
# Exploit Title: 2daybiz B2B Portal Script Sql Injection
ARSC Really Simple Chat 3.3 – Remote File Inclusion / Cross-Site Scripting
=> ARSC Really Simple Chat V3.3 Remote File Inclsion & Cross Site Scripting Vulnerability
Allomani Songs & Clips 2.7.0 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Allomani & Clips v2.7.0 - [CSRF] Add Admin Account
2DayBiz – Multiple SQL Injections
$-------------------------------------------------------------------------------------------------------------------
2DayBiz Matrimonial Script – SQL Injection / Cross-Site Scripting
$-------------------------------------------------------------------------------------------------------------------
AbleSpace 1.0 – ‘news.php’ SQL Injection
source: https://www.securityfocus.com/bid/41139/info
OneCMS 2.6.1 – ‘short1’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41194/info
OneCMS 2.6.1 – ‘search’ SQL Injection
source: https://www.securityfocus.com/bid/41194/info
OneCMS 2.6.1 – ‘cat’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41194/info
Limny 2.1 – ‘q’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41152/info
Big Forum – ‘forum.php?id’ SQL Injection
:::::::::::::::::::::::::
Big Forum 5.2 – Arbitrary File Upload / Local File Inclusion
=> Big Forum 5.2v Arbitrary File Upload & Local File Inclusion Vulnerability
2DayBiz B2B Portal Script – SQL Injection
# Exploit Title: 2daybiz B2B Portal Script SQL injection Vulnerability