Joomla! Component com_event – Multiple Vulnerabilities
####################################################################
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Joomla! Component com_crowdsource – SQL Injection
[!] Title: Joomla Component com_crowdsource SQL Injection
Tainos Webdesign (All Scripts) – SQL Injection / Cross-Site Scripting / HTML Injection
-------------------------------------------------------------------------------------------
PonVFTP – Insecure Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/40207/info
I-Vision CMS – Cross-Site Scripting / SQL Injection
# Title: [XSS, SQL injection vulnerability in I-Vision CMS]
Tainos – Multiple Vulnerabilities
=======================================================
EgO 0.7b – ‘FCKeditor’ Arbitrary File Upload
##########################################################
Joomla! Component simpledownload 0.9.5 – Local File Disclosure
[!]==========================================[!]
The iceberg – ‘Content Management System’ SQL Injection
==========================================================
Cybertek CMS – Local File Inclusion
=======================================================
Joomla! Component simpledownload 0.9.5 – Local File Inclusion
[!]===========================================================================[!]
File Thingie 2.5.5 – File Security Bypass
Title: File Thingie v2.5.5 File Security Bypass
Joomla! Component com_camp – SQL Injection
[+] Title : Joomla Component com_camp SQL Injection Vulnerability
CompactCMS 1.4.0 – ‘tiny_mce’ Arbitrary File Upload
##########################################################
Alibaba Clone Platinum – ‘about_us.php’ SQL Injection
-------------------------------------------------------------------------------------------
Joomla! Component MS Comment 0.8.0b – Local File Inclusion
[!]===========================================================================[!]
Alibaba Clone Platinum – ‘/buyer/index.php’ SQL Injection
# Title: Alibaba Clone Platinum (buyer/index.php) SQL Injection Vulnerability
Heaven Soft CMS 4.7 – ‘photogallery_open.php’ SQL Injection
-------------------------------------------------------------------------------------------
Joomla! Component JE Quotation Form 1.0b1 – Local File Inclusion
####################################################################
Joomla! Component JE Job 1.0 – Local File Inclusion
# Exploit Title: Joomla Component JE Job Local File Inclusion Vulnerability
Heaven Soft CMS 4.7 – SQL Injection
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
JE Ajax Event Calendar – Local File Inclusion
# Exploit Title: JE Ajax Event Calendar Local File Inclusion Vulnerability
Press Release Script – ‘page.php?id’ SQL Injection
######################{In The Name Of Allah The Mercifull} ######################
Link Bid Script – ‘links.php’ SQL Injection
######################{In The Name Of Allah The Mercifull} ######################
Planet Script 1.x – ‘idomains.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40203/info
PHP 5.3.x < 5.3.2 - 'ext/phar/stream.c' / 'ext/phar/dirstream.c' Multiple Format String Vulnerabilities
source: https://www.securityfocus.com/bid/40173/info
JForum 2.08 – BBCode Color Tag HTML Injection
source: https://www.securityfocus.com/bid/42414/info
NPDS REvolution 10.02 – ‘topic’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40157/info
NPDS REvolution 10.02 – ‘download.php’ SQL Injection
source: https://www.securityfocus.com/bid/40156/info
Joomla! Component FDione Form Wizard 1.0.2 – Local File Inclusion
-----------------------------------------------------------------------------------------
Joomla! Component com_sebercart – ‘getPic.php’ Local File Disclosure
=========================================================================================================
damianov.net Shoutbox – Cross-Site Scripting
# Exploit Title: damianov.net Shoutbox XSS Vulnerability
Joomla! Component aardvertiser 2.0 – Local File Inclusion
========================================================================
Joomla! Component Komento 1.0.0 – ‘sid’ SQL Injection
-------------------------------------------------------------------------
e-webtech – ‘fixed_page.asp’ SQL Injection
####################################################
Joomla! Component com_PHP 0.1 – Local File Inclusion
Joomla Custom PHP Pages Component LFI Vulnerability
TomatoCMS 2.0.x – SQL Injection
source: https://www.securityfocus.com/bid/40108/info
Saurus CMS 4.7 – ‘edit.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40059/info
Affiliate Store Builder – ‘edit_cms.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/40058/info
Marinet CMS – SQL Injection / Cross-Site Scripting / HTML Injection
-------------------------------------------------------------------------------------------
Woodall Creative – SQL Injection
=========================================================
Marinet CMS – SQL Injection
=========================================================
Joomla! Component mod_VisitorData 1.1 – Remote code Execution
Joomla Module Camp26 Visitor Data 1.1 Remote code Execution
Free Advertisment CMS – ‘user_info.php’ SQL Injection
=========================================================
Uploader 0.1.5 – Multiple Vulnerabilities
========================================================================================