CodeIgniter 1.0 – ‘BASEPATH’ Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/38672/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
ARTIS ABTON CMS – Multiple SQL Injections
source: https://www.securityfocus.com/bid/38658/info
AneCMS 1.0 – ‘index.php’ Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/38657/info
Employee TimeClock Software 0.99 – SQL Injection
source: http://www.securityfocus.com/archive/1/509995
DDL CMS 2.1 – ‘blacklist.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38643/info
60cycleCMS – ‘select.php’ Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/38637/info
ispCP Omega 1.0.4 – Remote File Inclusion
[+] ispCP Omega
Gazelle CMS – Cross-Site Request Forgery
=======================================================================
Softbiz Jobs and Recruitment Script – ‘search_result.php’ SQL Injection
----------------------------Information------------------------------------------------
PhpCityPortal – Multiple Vulnerabilities
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
Campsite 3.3.5 – Cross-Site Request Forgery
=======================================================================
nus newssystem 1.02 – ‘id’ SQL Injection
.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-.
Wild CMS – SQL Injection
# Title: [SQL injection vulnerability in Wild CMS]
mhproducts Kleinanzeigenmarkt – ‘search.php’ SQL Injection
----------------------------Information------------------------------------------------
Joomla! Component com_hezacontent 1.0 – ‘id’ SQL Injection
[!]===========================================================================[!]
Uebimiau Webmail 3.2.0-2.0 – Email Disclosure
# Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure
PHP File Sharing System 1.5.1 – Multiple Vulnerabilities
Title: PHP File Sharing System 1.5.1 Multiple Vulnerabilities
TikiWik < 4.2 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/38608/info
KDPics 1.18 – ‘/admin/index.php’ Authentication Bypass
source: https://www.securityfocus.com/bid/38603/info
Chaton 1.5.2 – Local File Inclusion
[+] Chaton
TRIBISUR 2.0 – Local File Inclusion
# TRIBISUR Exploit database separated by exploit 0
DZ Auktionshaus ‘V4.rgo’ – ‘id’ news.php?SQL Injection
----------------------------Information------------------------------------------------
Bild Flirt System 2.0 – ‘index.php?id’ SQL Injection
----------------------------Information------------------------------------------------
BigForum 4.5 – SQL Injection
#!/usr/bin/perl
OpenCart 1.3.2 – ‘page’ SQL Injection
source: https://www.securityfocus.com/bid/38605/info
phpCOIN 1.2.1 – ‘mod’ Local File Inclusion
source: https://www.securityfocus.com/bid/38576/info
dev4u CMS (Personenseiten) – ‘go_target.php’ SQL Injection
----------------------------Information------------------------------------------------
PHPCOIN 1.2.1 – ‘mod.php’ Local File Inclusion
# Exploit Title: phpCOIN 1.2.1 (mod.php) LFI vulnerability
E-topbiz Link ADS 1 PHP script – ‘linkid’ Blind SQL Injection
# E-topbiz Link ADS 1 PHP script (linkid) Blind SQL Injection Vulnerability
Auktionshaus 3.0.0.1 – ‘news.php?id’ SQL Injection
----------------------------Information------------------------------------------------
OneCMS 2.5 – SQL Injection
# Exploit Title: ONECMS v2.5 SQL INJECTION
Saskia’s ShopSystem – ‘id’ Local File Inclusion
source: https://www.securityfocus.com/bid/38574/info
Natychmiast CMS – Multiple Cross-Site Scripting / SQL Injections
source: https://www.securityfocus.com/bid/38561/info
Drupal < 5.22/6.16 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/38545/info
PHP-Nuke – ‘user.php’ SQL Injection
----------------------------Information------------------------------------------------
PHP-Nuke CMS (Survey and Poll) – SQL Injection
#############################################################################################################
Joomla! Component com_blog – Directory Traversal
[~]######################################### InformatioN #############################################[~]
MiNBank 1.5.0 – Remote Command Execution
#!/usr/bin/perl
smartplugs 1.3 – ‘showplugs.php’ SQL Injection
----------------------------Information------------------------------------------------
Gnat-TGP 1.2.20 – Remote File Inclusion
###############################################################
Dosya Yukle Scrtipi (DosyaYukle Scripti) 1.0 – Arbitrary File Upload
========================================================================================
Uiga Church Portal – ‘index.php’ SQL Injection
----------------------------Information------------------------------------------------
My Little Forum – ‘contact.php’ SQL Injection
----------------------------Information------------------------------------------------
Uploadify Sample Collection – Arbitrary File Upload
========================================================================================
PHP Advanced Transfer Manager 1.10 – Arbitrary File Upload
========================================================================================
osCSS 1.2.1 – Database Backups Disclosure
========================================================================================
Discuz! 6.0 – ‘uid’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38484/info
DeDeCMS 5.5 – ‘_SESSION[dede_admin_id]’ Authentication Bypass
source: https://www.securityfocus.com/bid/38469/info
Blax Blog 0.1 – ‘girisyap.php’ SQL Injection
source: https://www.securityfocus.com/bid/38465/info