MODx 1.0.3 – ‘index.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/40841/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
VideoWhisper PHP 2 Way Video Chat – ‘r’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40832/info
Pre Classified Listing – SQL Injection
Exploit Title: Pre Classified Listing SQL Vulnerable
Eyeland Studio Inc. – ‘game.php’ SQL Injection
##################################################################################################
Yamamah Photo Gallery 1.00 – ‘calbums’ SQL Injection
##################################################################################################
Yamamah Photo Gallery 1.00 – ‘download.php’ Local File Disclosure
|=---------------------------------------------------------------------------=|
Eyeland Studio Inc. – SQL Injection
Title: Eyeland Studio Inc. SQL Injection Vulnerability
UTStats – Cross-Site Scripting / SQL Injection / Full Path Disclosure
# Exploit Title: UTStats XSS, SQL Injection & Full path disclosure
PHPplanner PHP Planner 0.4 – Multiple Vulnerabilities
# Title: phpplanner
Yamamah 1.0 – SQL Injection
# Exploit Title: Yamamah 1.0 SQL Injection Vulnerability
Infront – SQL Injection
# Exploit Title: Infront SQL Injection Vulnerability
phpplanner – Cross-Site Scripting / SQL Injection
==================================
Yamamah – ‘news’ SQL Injection / Source Code Disclosure
# Exploit Title: Yamamah Vulnerability (news) SQL Injection / disclosure Vulnerability
Collabtive 0.6.3 – Multiple Vulnerabilities
#!/usr/bin/perl
Parallels System Automation (PSA) – Local File Inclusion
#################################################################
ardeacore 2.2 – Remote File Inclusion
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
Full Site for Restaurant – SQL Injection
Vendor url:http://www.mformula.com.br/
DaLogin – Multiple Vulnerabilities
dalogin 2.2 multiple vulnerabilites
Site to Store Automobile – Motorcycle Boat SQL Injection
Vendor url:http://www.mformula.com.br/
Development Site Professional Liberal – Company Institutional SQL Injection
Vendor url:http://www.mformula.com.br/
Site for Real Estate – Brokers SQL Injection
Vendor url:http://www.mformula.com.br/
E-PHP B2B Marketplace – Multiple Vulnerabilities
Name : E-PHP B2B Marketplace Multiple Vulns
AneCMS 1.x – ‘/modules/blog/index.php’ SQL Injection
source: https://www.securityfocus.com/bid/40840/info
AneCMS 1.x – ‘/modules/blog/index.php’ HTML Injection
source: https://www.securityfocus.com/bid/40838/info
Arab Portal 2.2 – ‘members.php’ SQL Injection
source: https://www.securityfocus.com/bid/40735/info
Miniweb 2.0 Business Portal and Social Networking Platform – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Store Locator – Cross-Site Request Forgery (Add Admin)
# vendor: www.ghostscripter.com
SchoolMation 2.3 – SQL Injection / Cross-Site Scripting
====================================================
AWCM CMS – Local File Inclusion
# Software Link: http://www.awcm-cms.com/
BtiTracker 1.3.x < 1.4.x - SQL Injection
#!/usr/bin/env python
PHP Property Rental Script – SQL Injection / Cross-Site Scripting
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Joomla! Component com_jnewsletter – SQL Injection
============================================
PHPAccess – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
PHP Real Estate Script – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Science Fair In A Box – SQL Injection / Cross-Site Scripting
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Joomla! Component com_jsubscription – SQL Injection
============================================
Joomla! Component com_jmarket – SQL Injection
============================================
Joomla! Component com_jcommunity – SQL Injection
============================================
Joomla! Component com_jtickets – SQL Injection
============================================
Joomla! Component com_jstore – SQL Injection
============================================
Joomla! Component cinema – SQL Injection
=========================================================
PGAUTOPro – SQL Injection / Cross-Site Scripting (1)
=======================================
eLms Pro – SQL Injection / Cross-Site Scripting
=======================================
HauntmAx CMS Haunted House – Directory Listing / SQL Injection
==================================
GREEZLE – Global Real Estate Agent Site Auth SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
SilverStripe CMS 2.4 – File Renaming Security Bypass
source: https://www.securityfocus.com/bid/40679/info
PGAUTOPro – SQL Injection / Cross-Site Scripting (2)
source: https://www.securityfocus.com/bid/40664/info
Image Store – Arbitrary File Upload
============================================= ===================================
phpList 2.8.11 – SQL Injection
[~]------------------------------------------------------------------------------------------------------------------...