Pre Web Host – SQL Injection
# EDB-ID: 1310
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Phreebooks 2.0 – Directory Traversal
Advisory Name: Directory Traversal in Phreebooks v2.0
Phreebooks 2.0 – Local File Inclusion
Advisory Name: Local File Inclusion in Phreebooks v2.0
Phreebooks 2.0 – Multiple Persistent Cross-Site Scripting Vulnerabilities
Advisory Name: Multiple Permanent Cross-site Scripting in Phreebooks v2.0
Holiday Travel Portal – Arbitrary File Upload
==========================================================
Rayzz Photoz – Arbitrary File Upload
==========================================================
EMO Realty Manager – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Hotel / Resort Site Script with OnLine Reservation System – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
CafeEngine 2.3 – SQL Injection
==========================================================
Castripper 2.50.70 – ‘.pls’ File Stack Buffer Overflow (DEP Bypass)
#!/usr/bin/python
Home of MCLogin System – Authentication Bypass
Author: L0rd CrusAd3r
CommonSense CMS – SQL Injection
# Exploit Title: CommonSense CMS Sql Injection Vulnerability
BoastMachine 3.1 – ‘key’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40623/info
cPanel 11.25 Image Manager – ‘target’ Local File Inclusion
source: https://www.securityfocus.com/bid/40622/info
JForum 2.1.8 – ‘Username’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40880/info
CuteSITE CMS 1.x – ‘/manage/main.php?fld_path’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40612/info
CuteSITE CMS 1.x – ‘/manage/add_user.php?user_id’ SQL Injection
source: https://www.securityfocus.com/bid/40612/info
ReVou Twitter Clone 2.0 Beta – SQL Injection / Cross-Site Scripting
# Title:reVou twitter clne Beta 2.0 sqli and Xss vulnerability
greeting card – Arbitrary File Upload
# Exploit Title: [greeting card Remote Upload Vulnerability]
WebBiblio Subject Gateway System – Local File Inclusion
# Exploit Title:
idevspot Text ads 2.08 – SQL Injection
# Title:idevspot Text ads 2.08 sqli vulnerability
Joomla! Component com_annonces – Arbitrary File Upload
#Title:Joomla Component com_annonces Upload Vulnerability
PHP Car Rental Complete System 1.2 – SQL Injection
# Title:PHP car rental complete System V1.2 SQli vulnerability
Joomla! Component Search Log 3.1.0 – SQL Injection
#Exploit Title: Joomla Component com_searchlog SQL Injection
Sphider Script – Remote Code Execution
=======================================================================
RTRandomImage – Remote File Inclusion
|| || | ||
iScripts easybiller 1.1 – SQL Injection
# Title:iScripts easybiller v1.1 sqli vulnerability
iScripts eSwap 2.0 – SQL Injection / Cross-Site Scripting
# Title:iScripts eSwap v2.0 sqli and xss vulnerability
WmsCMS – Cross-Site Scripting / SQL Injection
# Title: XSS, SQL injection vulnerability in WmsCMS
PHP Director 0.2 – SQL Injection
# Exploit Title:
Joomla! Component DJ-ArtGallery 0.9.1 – Multiple Vulnerabilities
#Exploit Title: Joomla Component com_djartgallery Multiple Vulnerabilities
DDLCMS 2.1 – ‘skin’ Remote File Inclusion
==============================================================
WordPress Plugin Gigya Socialize 1.0/1.1.x – Cross-Site Scripting
source: https://www.securityfocus.com/bid/40582/info
log1 CMS 2.0 – Session Handling Remote Security Bypass / Remote File Inclusion
source: https://www.securityfocus.com/bid/40636/info
Joomla! Component com_lead – SQL Injection
[TR] Title: Joomla Component com_lead SQL Injection
clickartweb Design – SQL Injection
####################################################
K9 Kreativity Design – ‘pages.php’ SQL Injection
==========================================================
PHP SETI@home Web monitor – ‘PHPsetimon’ Local/Remote File Inclusion
===========================================================================
Advneced Management For Services Sites – File Disclosure
=======================================================================
Article Management System 2.1.2 – Reinstall
========================================================================================
E-book Store – Multiple Vulnerabilities
========================================================================================
osCSS 1.2.1 – Arbitrary File Upload
=======================================================================
phpBazar 2.1.1 stable – Remote File Inclusion
# Title: phpBazar V2.1.1 stable rfi Vulnerability
slogan design Script – SQL Injection
Title: slogan design Script SQL Injection Vulnerability
SIMM Management System (SMS) – Local File Inclusion
===================================================================================================
Vastal I-Tech – SQL Injection
#######################################################
Joomla! Component ChronoForms – Blind SQL Injection
# Exploit Title: Joomla Component ChronoForms (com_chronocontact)
Joomla! Component ChronoConnectivity – Blind SQL Injection
# Exploit Title: Joomla Component ChronoConnectivity
PHP City Portal 1.3 – ‘cms_data.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40532/info