Tochin eCommerce – Multiple Remote s
===============================================
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WordPress Plugin TinyBrowser – Arbitrary File Upload
************************************************************ ** TinyBrowser Remote File upload Vulnerability ************...
cardinalCMS 1.2 – ‘FCKeditor’ Arbitrary File Upload
==========================================================
JV2 Folder Gallery 3.1 – ‘gallery.php’ Remote File Inclusion
# ----------------------oOO---(_)---OOo-----------------------
ConPresso 4.0.7 – SQL Injection
ConPresso 4.0.7 SQL Injection Vulnerability
Open-AudIT – Multiple Vulnerabilities
GVI-2010-02 : Multiple vulnerabilities in Open-AudIT
Specialized Data Systems Parent Connect 2010.04.11 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/40324/info
NPDS REvolution 10.02 – ‘admin.php’ Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/40331/info
Lisk CMS 4.4 – ‘id’ Multiple Cross-Site Scripting / SQL Injections
source: https://www.securityfocus.com/bid/40314/info
Snipe Gallery 3.1 – ‘image.php?cfg_admin_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/40279/info
Snipe Gallery 3.1 – ‘gallery.php?cfg_admin_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/40279/info
webYourPhotos 6.05 – ‘index.php’ Remote File Inclusion
# ----------------------oOO---(_)---OOo-----------------------
Entry Level Content Management System (EL CMS) – SQL Injection
[+] Contact : vir0e5[at]hackermail[dot]com
DB[CMS] – ‘article.php’ SQL Injection
DB[CMS] (article.php) SQL Injection Vulnerability
IMEDIA – ‘index.php’ SQL Injection
# Exploit Titre: IMEDIA (index.php) SQL Injection Vulnerability
DBCart – ‘article.php’ SQL Injection
) ) ) ( ( ( ( ( ) )
DB[CMS] – ‘section.php’ SQL Injection
-------------------------------------------------------------------------------------------
Battle Scrypt – Arbitrary File Upload
# Exploit Title: Battle Scrypt Shell Upload Vulnerability
Joomla! Component com_horses – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/40308/info
SoftDirec 1.05 – ‘delete_confirm.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40269/info
Caucho Resin Professional 3.1.5 – ‘/resin-admin/digest.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/40251/info
Shopzilla Affiliate Script PHP – ‘search.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40246/info
Joomla! Component Percha Multicategory Article 0.6 – ‘Controller’ Arbitrary File Access
source: https://www.securityfocus.com/bid/40244/info
Joomla! Component Percha Gallery 1.6 Beta – ‘Controller’ Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/40244/info
Joomla! Component Percha Downloads Attach 1.1 – ‘Controller’ Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/40244/info
Joomla! Component Percha Fields Attach 1.0 – ‘Controller’ Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/40244/info
Joomla! Component Percha Image Attach 1.1 – ‘Controller’ Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/40244/info
C99Shell 1.0 Pre-Release build 16 (Web Shell) – ‘ch99.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40134/info
gpEasy CMS 1.6.2 – ‘editing_files.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40330/info
Joomla! Component JComments 2.1 – ‘ComntrNam’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40230/info
NPDS REvolution 10.02 – ‘download.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40227/info
ecoCMS 18.4.2010 – ‘admin.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39901/info
DB[CMS] 2.0.1 – SQL Injection
# Exploit Title: DB[CMS] Sql Injection Vulnerability
Lokomedia CMS – ‘sukaCMS’ Local File Disclosure
# Software Link: http://bukulokomedia.com
Joomla! Component com_packages – SQL Injection
[+] Title : Joomla Component com_packages SQL Injection Vulnerability
Webloader 7 < 8 - 'vid' SQL Injection
[*]~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(...
B-Hind CMS (tiny_mce) – Arbitrary File Upload
####################################################
TS Special Edition 7.0 – Multiple Vulnerabilities
##############################################################################################
WebJaxe – SQL Injection
###############################################################################
ChillyCMS – Blind SQL Injection
#!/usr/bin/hybris
phpMyAdmin 2.6.3-pl1 – Cross-Site Scripting / Full Path
# Exploit Title: phpMyAdmin 2.6.3-pl1 Cross Site Scripting and Full Path
JE CMS 1.1 – SQL Injection
=====================================================================================================================...
Joomla! Component com_event – SQL Injection
# Exploit Title: Joomla Component com_event another sql injection vuln
MyNews CMS 1.0 – SQL Injection / Local File Inclusion / Cross-Site Scripting
MyNews v1.0 CMS - Sql Injection, local file inclusion and XSS Vulnerabilities
MidiCart PHP/ASP – Arbitrary File Upload
# Exploit Title: MidiCart PHP,ASP Shell Upload Vulnerability
PHP-Fusion 4.01 – SQL Injection
# Exploit Title: PHP-Fusion v4.01 SQL INJECTION Vulnerabilities