Fast Free Media 1.3 Adult Site – Arbitrary File Upload
========================================================================================
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Digital College 1.0 – Arbitrary File Upload
========================================================================================
Aqar Script 1.0 – Remote Bypass
========================================================================================
724CMS Enterprise 4.59 – ‘section.php’ SQL Injection
-------------------------------------------------------------------------------------------
724CMS Enterprise 4.59 – ‘section.php’ Local File Inclusion
-------------------------------------------------------------------------------------------
Waibrasil – Local/Remote File Inclusion
# Title: Waibrasil Remote / Local File Inclusion
PHPKB Knowledge Base Software 2.0 – Multilanguage Support Multiple SQL Injections
[+] {In The Name Of Allah The Mercifull}
724CMS Enterprise 4.59 – SQL Injection
# 724CMS Enterprise Version 4.59 SQL Injection Vulnerability
29o3 CMS – ‘LibDir’ Multiple Remote File Inclusions
================================================
family connections 2.2.3 – Multiple Vulnerabilities
Family Connections 2.2.3 Multiple Remote Vulnerabilities
Tadbir CMS – ‘FCKeditor’ Arbitrary File Upload
#################################################################
MiniManager For Mangos/Trinity Server – Denial of Service
=========================================================
Dark Hart Portal – ‘login.php’ Remote File Inclusion
-------------------------------------------------------------------------------------
tekno.Portal 0.1b – ‘makale.php?id’ SQL Injection
-------------------------------------------------------------------------------------------
Spaceacre – Multiple SQL Injections
#Spaceacre Multiple SQL Injection Vulnerability
Netvidade engine 1.0 – Multiple Vulnerabilities
#!/usr/bin/perl -w
e-webtech – ‘new.asp?id=’ SQL Injection
************************************************************ ** (new.asp?id=) SQL Injection Vulnerability *****************...
Advanced Poll 2.0 – ‘mysql_host’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40045/info
EasyPublish CMS 23.04.2010 – URI Cross-Site Scripting
source: https://www.securityfocus.com/bid/40037/info
eFront 3.x – ‘ask_chat.php’ SQL Injection
source: https://www.securityfocus.com/bid/40032/info
phpscripte24 Live Shopping Multi Portal System – SQL Injection
----------------------------Information---------------------------------------------------
Alibaba Clone Diamond Version – SQL Injection
----------------------------Information------------------------------------------------
Alibaba Clone 3.0 (Special) – SQL Injection
----------------------------Information------------------------------------------------
phpscripte24 Shop System – SQL Injection
----------------------------Information------------------------------------------------
Joomla! Component Article Factory Manager – Arbitrary File Upload
# vendor :http://www.thefactory.ro/shop/joomla-components/article-manager.html
phpscripte24 Countdown Standart Rückwärts Auktions System – SQL Injection
----------------------------Information------------------------------------------------
PHP Link Manager 1.7 – URL Redirection
PHP Link Manager Version 1.7 Url Redirection Bug
big.asp – SQL Injection
# Author : Ra3cH
B2B Classic Trading Script – ‘offers.php’ SQL Injection
) ) ) ( ( ( ( ( ) )
Web 2.0 Social Network Freunde Community System – ‘user.php’ SQL Injection
source: https://www.securityfocus.com/bid/40264/info
ECShop 2.7.2 – ‘category.php’ SQL Injection
source: https://www.securityfocus.com/bid/40001/info
PHP-Nuke – ‘friend.php’ Module SQL Injection
# Exploit Title: [PHP-Nuke 'friend.php' Module Remote SQL Injection]
REZERVI 3.0.2 – Remote Command Execution
#!/usr/bin/perl
WeBProdZ CMS – SQL Injection
______ _ _ _
Factux – Local File Inclusion
[~]######################################### InformatioN
OCS Inventory NG Server 1.3.1 – ‘LOGIN’ Remote Authentication Bypass
OCS Inventory NG
AV Arcade – ‘Search’ Cross-Site Scripting / HTML Injection
# Exploit Title: AV Arcade Search Field XSS/HTML Injection
Getsimple CMS 2.01 – Local File Inclusion
# Exploit Title: GetSimple 2.01 LFI
DeluxeBB 1.x – ‘newpost.php’ SQL Injection
source: https://www.securityfocus.com/bid/39962/info
WordPress Plugin Cimy Counter 0.9.4 – HTTP Response Splitting / Cross-Site Scripting
source: https://www.securityfocus.com/bid/41132/info
Slooze PHP Web Photo Album 0.2.7 – Command Execution
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
PHP-Nuke 5.0 – Viewslink SQL Injection
# Author: CMD
PHP-Nuke 7.0/8.1/8.1.35 – Wormable Remote Code Execution
#!/usr/bin/php
SmartCMS 2 – SQL Injection
============ { Ariko-Security - Advisory #1/5/2010 } =============
thEngine 0.1 – Local File Inclusion
=============================================================================================
Clicksor – SQL Injection
( ALLH AKBAR )
DBHcms 1.1.4 – Persistent Cross-Site Scripting
############################################################################
KubeBlog – Cross-Site Request Forgery
========================================================================================