WebsiteBaker 2.8.1 – DataBase Backup Disclosure
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
justVisual 2.0 – ‘index.php’ Local File Inclusion
#########################################################################
Easy-Clanpage 2.01 – SQL Injection
----------------------------Information------------------------------------------------
INVOhost – SQL Injection
##########################[Andrés Gómez]##########################
Interactivefx.ie CMS – SQL Injection
================================================
vBulletin Blog 4.0.2 – Title Cross-Site Scripting
Vbulletin Blog 4.0.2 XSS Vulnerability
Joomla! Component com_software – SQL Injection
# Title : Joomla Component com_software SQL Injection Vulnerability
Joomla! Component com_wallpapers – SQL Injection
# Title : Joomla Component com_wallpapers SQL Injection Vulnerability
New-CMS – Local File Inclusion
# Exploit Title: New CMS Local File Inclusio
Joomla! Component com_universal – Remote File Inclusion
###########################################################
E-PHP CMS – SQL Injection
# Exploit Title: E-php CMS SQL Injection Vulnerability
CMS By SoftnSolv – ‘index.php’ SQL Injection
# Exploit Title: CMS By SoftnSolv (index.php) SQL Injection Vulnerable
Easy-Clanpage 2.0 – Blind SQL Injection
----------------------------Information------------------------------------------------
Joomla! Component com_jresearch – ‘Controller’ Local File Inclusion
source: https://www.securityfocus.com/bid/38917/info
Joomla! Component com_cb – ‘cat’ SQL Injection
source: https://www.securityfocus.com/bid/38916/info
Joomla! Component com_aml_2 – ‘art’ SQL Injection
source: https://www.securityfocus.com/bid/38914/info
SpringSource (Multiple Products) – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/38913/info
Kasseler CMS News Module – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/38909/info
PHPAuthent 0.2.1 – ‘useradd.php’ Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/38908/info
RepairShop2 – ‘index.php?Prod’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38907/info
Lussumo Vanilla 1.1.10 – ‘definitions.php’ Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/38889/info
Joomla! Component SMEStorage – Local File Inclusion
---------------------------------------------------------------------------------
Xataface – Admin Authentication Bypass
=======================================================
Joomla! Component Property – Local File Inclusion
---------------------------------------------------------------------------------
Zephyrus CMS – ‘index.php’ SQL Injection
====================================================
Uiga Business Portal – ‘index.php’ SQL Injection
----------------------------Information------------------------------------------------
Joomla! Component com_jwmmxtd – Remote File Inclusion
#################################################################
Joomla! Component com_flash – SQL Injection
# Title : Joomla Component com_flash SQL Injection Vulnerability
New Advisore Stack 1.1 – Directory Traversal
===============================================================================================
PowieSys 0.7.7 alpha – ‘index.php’ shownews SQL Injection
----------------------------Information------------------------------------------------
Uiga Fan Club – SQL Injection
# Exploit Title: Uiga Fan Club SQL Injection Vulnerability
CMS Openpage – ‘index.php’ SQL Injection
====================================================
Mini-CMS RibaFS 1.0 – Authentication Bypass
=============================================================
PHPKIT 1.6.x – ‘b-day.php’ Addon SQL Injection
source: https://www.securityfocus.com/bid/38891/info
4x CMS – ‘login.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/39840/info
4x CMS r26 – Authentication Bypass
=======================================================
NotSopureEdit 1.4.1 – Remote File Inclusion
========================================================
WebMaid CMS 0.2-6 Beta – Multiple Remote File Inclusions
====================================================================
Fw-BofF (oolime-resurrection) 1.5.3beta – Multiple Remote File Inclusions
=============================================================================
Woltlab Burning Board Lite Addon – ‘lexikon.php’ SQL Injection
.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-.
Jewelry Cart Software – ‘product.php’ SQL Injection
# Name : Jewelry Cart Software SQL Injection (product.php) ::-
Adult Video Site Script – Multiple Vulnerabilities
========================================================================================
Woltlab Burning Board Teamsite Hack 3.0 – ‘ts_other.php’ SQL Injection
----------------------------Information-----------------------------------------------------
Pay Per Watch & Bid Auktions System – ‘auktion.php?id_auk’ Blind SQL Injection
----------------------------Information------------------------------------------------
Joomla! Component Gift Exchange com_giftexchange 1.0 Beta – ‘pkg’ SQL Injection
---------------------------------------------------------------------------------
Joomla! Component & Plugin JE Tooltip 1.0 – Local File Inclusion
---------------------------------------------------------------------------------
DirectAdmin 1.34.4 – Multiple Cross-Site Request Forgerys
=============================================================================