TPO Duyuru Scripti – Insecure Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/40519/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
TCExam 10.1.7 – ‘/admin/code/tce_functions_tcecode_editor.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/40511/info
Joomla! Component com_sar_news – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/40501/info
Hexjector 1.0.7.2 – ‘hexjector.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40509/info
Delivering Digital Media CMS – SQL Injection
# Title: Delivering Digital Media CMS SQL Injection Vulnerability
Hexjector 1.0.7.2 – Persistent Cross-Site Scripting
# Exploit Title: Hexjector Persistent XSS (
MusicBox – SQL Injection
# Exploit Title: [musicbox sql injection]
Joomla! Component JS Jobs 1.0.5.8 – SQL Injection
# Exploit Title: Joomla Component com_jsjobs SQL Injection Vulnerability
Visitor Logger – ‘banned.php’ Remote File Inclusion
#-> Visitor Logger (banned.php) Remote File Include Vulnerability
Persian E107 – Cross-Site Scripting
========================================================================================
e107 0.7.21 full – Remote File Inclusion / Cross-Site Scripting
=======================================================================
QuickTalk 1.2 – Source Code Disclosure
=======================================================================
Joomla! Component com_g2bridge – Local File Inclusion
# Exploit Title: Joomla Component com_g2bridge LFI vulnerability
WsCMS – Multiple SQL Injections
===============================================
wsCMS – ‘news.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40447/info
GR Board 1.8.6 – ‘page.php’ Remote File Inclusion
source: https://www.securityfocus.com/bid/40437/info
Joomla! Component com_quran – SQL Injection
[!] ===========================================================================[!]
Symphony CMS – Local File Inclusion
=============================================================================================================
PTC Site’s – Remote Code Execution / Cross-Site Scripting
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
Creato Script – SQL Injection
# Title: Creato Script SQL Injection Vulnerability
CMScout – Cross-Site Scripting / HTML Injection
=======================================================================
Zeeways Script – Multiple Vulnerabilities
=======================================================================
osCommerce Online Merchant 2.2 – File Disclosure / Authentication Bypass
--------------------------------------------
Webiz – SQL Injection
@@@@@@ @@ @@ @@@@@ @@@@@ @@ @@@@ @@ @@@@@@ @@@ @@@@
Webiz 2004 – Local File Upload
# Exploit Title: (Webiz) local SHELL Upload Vulnerability
Joomla! Component BF Quiz 1.0 – SQL Injection (2)
#!/usr/bin/python
Cosmos Solutions CMS – ‘id=’ / ‘page=’ SQL Injection
####################################################
Cosmos Solutions CMS – SQL Injection
===============================================
MileHigh Creative – SQL Injection / Cross-Site Scripting / HTML Injection
=======================================================================
Aim Web Design – Multiple Vulnerabilities
=======================================================================
Nucleus Plugin Twitter – Remote File Inclusion
=============================================================================================================
Marketing Web Design – Multiple Vulnerabilities
=======================================================================
Nucleus Plugin Gallery – Remote File Inclusion / SQL Injection
=============================================================================================================
YourArcadeScript 2.0b1 – Blind SQL Injection
#!/usr/bin/perl
Joomla! Component JE Job 1.0 – ‘catid’ SQL Injection
) ) ) ( ( ( ( ( ) )
Joomla! Component JE Poll – ‘pollid’ SQL Injection
) ) ) ( ( ( ( ( ) )
Joomla! Component BF Quiz 1.3.0 – SQL Injection (1)
# Exploit Title: Joomla Component BF Quiz SQL Injection Vulnerability
Joomla! Component My Car 1.0 – Multiple Vulnerabilities
# Exploit Title: Joomla Component My Car Multiple Vulnerabilities
Realtor Real Estate Agent – ‘news.php’ SQL Injection
) ) ) ( ( ( ( ( ) )
Realtor WebSite System E-Commerce – idfestival SQL Injection
-------------------------------------------------------------------------------------------
Realtor Real Estate Agent – ‘idproperty’ SQL Injection
) ) ) ( ( ( ( ( ) )
CMScout 2.08 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/40442/info
ImpressPages CMS 1.0x – ‘admin.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/40431/info
osCommerce Visitor Web Stats AddOn – ‘Accept-Language’ Header SQL Injection
source: https://www.securityfocus.com/bid/40425/info
BackLinkSpider 1.3.1774 – ‘cat_id’ SQL Injection
source: https://www.securityfocus.com/bid/40398/info
Realtor WebSite System E-Commerce – SQL Injection
===============================================
Toronja CMS – HTML / Cross-Site Scripting Injection
-------------------------------------------------------------------------------------------
Toronja CMS – SQL Injection
===============================================
Joomla! Component com_mediqna 1.1 – Local File Inclusion
[!]===========================================================================[!]