Jamroom 4.0.2/4.1.x – ‘forum.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41071/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Sigmer Technologies Scribe CMS – ‘copy_folder.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41000/info
osCMax 2.0 – ‘articles.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40998/info
SaffaTunes CMS – ‘news.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/40995/info
Joomla! Component com_eportfolio – Arbitrary File Upload
1 ########################################## 1
Shareasale Script – SQL Injection
1 ########################################## 1
OroHYIP – SQL Injection
1 ########################################## 1
PHP Calendars Script – SQL Injection
1 ########################################## 1
Overstock Script – SQL Injection
1 ########################################## 1
iBoutique – ‘page’ SQL Injection / Cross-Site Scripting
1 ########################################## 1
SimpleAssets – Authentication Bypass / Cross-Site Scripting
1 ########################################## 1
WebsiteBaker 2.8.1 – Cross-Site Request Forgery
# Author: Luis Santana
SnowCade 3.0 – SQL Injection
[-] SnowCade v3 SQL Injection Vulnerability [-]
Elite Gaming Ladders 3.5 – ‘ladder[id]’ SQL Injection
[-] Elite Gaming Ladders v3.5 SQL Injection Vulnerability [-]
Joomla! Component RSComments 1.0.0 – Persistent Cross-Site Scripting
# Exploit Title: Joomla Component RSComments 1.0.0 Multiple XSS
KubeLance 1.7.6 – ‘profile.php’ SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Shopping Cart Script with Affiliate Program – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Banner Management Script – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
MarketSaz – Arbitrary File Upload
==========================================
Joomla! Component com_listbingo 1.3 – Multiple Vulnerabilities
# Exploit Title: Joomla Component Listbingo 1.3 Multiple Vulnerabilities
Joomla! Component Ozio Gallery 2 – Multiple Vulnerabilities
Ozio Gallery 2
Joomla! Component Answers 2.3beta – Multiple Vulnerabilities
# Exploit Title: Joomla Component Answers v2.3beta Multiple Vulnerabilities
Joomla! Component com_joomdocs – Cross-Site Scripting
Date : june, 18 2010
KubeSupport – ‘lang’ SQL Injection
source: https://www.securityfocus.com/bid/40970/info
Joomla! Component Gallery XML 1.1 – SQL Injection / Local File Inclusion
source: https://www.securityfocus.com/bid/40964/info
Firebook – Multiple Cross-Site Scripting / Directory Traversal Vulnerabilities
source: https://www.securityfocus.com/bid/40941/info
PHP-Nuke Module print 6.0 – ‘print&sid’ SQL Injection
PHP-Nuke Module print 6.0 (print&sid) SQL Injection Vulnerability
Havij 1.10 – Persistent Cross-Site Scripting
# Exploit Title: Havij Persistent XSS (
Live CMS – SQL Injection
[-] Live CMS SQL Injection Vulnerability [-]
Planet 1.1 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Planet 1.1 - [CSRF] Add Admin Account
PenPals – Authentication Bypass
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Easy Travel Portal – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Pithcms 0.9.5 – Local File Inclusion
[~] Pithcms 0.9.5 Local Include ExploitPithcms 0.9.5 Local Include Exploit
DMSEasy 0.9.7 – ‘FCKeditor’ Arbitrary File Upload
#!/usr/bin/perl
Real Estate – SQL Injection
Description
2DayBiz Online Classified System – SQL Injection / Cross-Site Scripting
Name : 2daybiz online classified system SQLi AND XSS Vulnerability
PHPAuctionSystem – Arbitrary File Upload
Name : PHPAuctionSystem Upload Vulnerability
EZPX Photoblog 1.2 Beta – Remote File Inclusion
[~] EZPX photoblog 1.2 beta Remote Include Exploit
Nakid CMS 0.5.2 – Remote File Inclusion
[~] Nakid CMS 0.5.2 Remote Include Exploit
2DayBiz ybiz Network Community Script – SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/40913/info
Sell@Site PHP Online Jobs Login – Multiple SQL Injections
source: https://www.securityfocus.com/bid/40869/info
Pre Job Board Pro – Authentication Bypass
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0
E-Book Store – SQL Injection
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
Joke Website Script – SQL Injection / Cross-Site Scripting
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
Daily Inspirational Quotes Script – SQL Injection
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
Membership Site Script – SQL Injection
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
Lyrics Script – SQL Injection / Cross-Site Scripting
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]