Joomla! 1.6.0 Alpha2 – Cross-Site Scripting
# Title:Joomla_1.6.0-Alpha2 XSS Vulnerabilities
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Gallo 0.1.0 – Remote File Inclusion
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
IslamSound – Multiple SQL Injections
source: https://www.securityfocus.com/bid/39880/info
PHP 5.3 – ‘PHP_dechunk()’ HTTP Chunked Encoding Integer Overflow
source: https://www.securityfocus.com/bid/39877/info
Billwerx RC5.2.2 PL2 – ‘primary_number’ SQL Injection
source: https://www.securityfocus.com/bid/39867/info
GuppY 4.5.18 – Blind SQL Injection / XPath Injection
========================================================================================
Openannuaire Openmairie Annuaire 2.00 – Local File Inclusion / Remote File Inclusion
===================================================================================
Burning Board Lite 1.0.2 – Arbitrary File Upload
========================================================================================
WHMCompleteSolution (WHMCS) Control 2 – ‘announcements.php’ SQL Injection
Software: WHMCS control 2 Sql Injection
Joomla! Component com_djClassifieds 0.9.1 – Arbitrary File Upload
# Dork:inurl:com_djclassifieds
Opencimetiere 2.01 – Multiple Remote File Inclusions
=============================================================
Opencatalogue 1.024 – Local File Inclusion
====================================================
Joomla! Component Card View JX – Cross-Site Scripting
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
Joomla! Component Table JX – Cross-Site Scripting
# Exploit Title: Joomla Component Table JX XSS Vulnerabilities
CF Image Host 1.1 – Remote File Inclusion
###########################################################
NolaPro Enterprise 4.0.5538 – Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/39875/info
CF Image Hosting Script 1.1 – ‘upload.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/39870/info
Campsite 3.x – ‘article_id’ SQL Injection
source: https://www.securityfocus.com/bid/39862/info
osCommerce 3.0a5 – Local File Inclusion / HTML Injection
source: https://www.securityfocus.com/bid/39820/info
Alibaba Clone Platinum – ‘offers_buy.php’ SQL Injection
) ) ) ( ( ( ( ( ) )
Webthaiapp – ‘detail.php?cat’ Blind SQL Injection
--==+==================================================+==--
Puntal 2.1.0 – Remote File Inclusion
====================================================
Joomla! Component Newsfeeds – SQL Injection
# Exploit Title: Joomla Component com_newsfeeds SQL injection vulnerability
AutoDealer 1.0/2.0 – MSSQL Injection
# vendor :http://www.aspsiteware.com/Auto.asp
JobPost – SQL Injection
# vendor :http://www.aspsiteware.com/job.asp
B2B Gold Script – ‘id’ SQL Injection
) ) ) ( ( ( ( ( ) )
ec21 clone 3.0 – ‘id’ SQL Injection
) ) ) ( ( ( ( ( ) )
Scratcher – SQL Injection / Cross-Site Scripting
[+] Scratcher (SQL/XSS) Multiple Remote Vulnerability
chCounter – indirect SQL Injection / Cross-Site Scripting
# Exploit Title: chCounter indirect SQL Injection and XSS Vulnerabilities
Ucenter Projekt 2.0 – Insecure crossdomain (Cross-Site Scripting)
========================================================================================
Zyke CMS 1.0 – Arbitrary File Upload
========================================================================================
Zyke CMS 1.1 – Bypass
========================================================================================
TaskFreak 0.6.2 – SQL Injection
CVE-2010-1583
iScripts VisualCaster – SQL Injection
# Exploit Title:SQli Vulnerability in iScripts VisualCaster
DZCP (deV!L`z Clanportal) 1.5.3 – Multiple Vulnerabilities
========================================================================================
Socialware 2.2 – Upload / Cross-Site Scripting
# Exploit Title:Upload Vulnerability and XSS in socialware V2.2 (www.iscripts.com)
XT-Commerce 1.0 Beta 1 – Pass / Create and Download Backup
========================================================================================
TR Forum 1.5 – Multiple Vulnerabilities
========================================================================================
Articles Directory – Authentication Bypass
# Exploit Title:Authenication Bypass Vulnerability in Articles Directory
Your Articles Directory – Login Option SQL Injection
source: https://www.securityfocus.com/bid/39796/info
Tele Data’s Contact Management Server 0.9 – ‘Username’ SQL Injection
source: https://www.securityfocus.com/bid/39799/info
velBox 1.2 – Insecure Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/39778/info
PHP Video Battle – SQL Injection
) ) ) ( ( ( ( ( ) )
Modelbook – ‘casting_view.php’ SQL Injection
) ) ) ( ( ( ( ( ) )
GeneShop 5.1.1 – SQL Injection
# Vendor Link : http://softbizscripts.com/
gpEasy 1.6.1 – Cross-Site Request Forgery (Add Admin)
=============================================
Joomla! Component Wap4Joomla! – ‘wapmain.php’ SQL Injection
Joomla Component Wap4Joomla (wapmain.php) SQL Injection Vulnerability
SoftBizScripts Hosting Script – SQL Injection
# Exploit Title: SoftBizScripts Hosting Script SQL Injection Vunerability