Pogodny CMS – SQL Injection
# Exploit Title: [Pogodny CMS SQL injection]
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
wh-em.com upload 7.0 – Insecure Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/38610/info
EziScript Google Page Rank 1.1 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/38266/info
Extreme Mobster – ‘login’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38265/info
BGSvetionik BGS CMS – ‘search’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38264/info
microUpload – Arbitrary File Upload
------------------------------------------------------
Joomla! Component com_hdvideoshare – SQL Injection
==============================================================================
Joomla! Component com_joomportfolio – Blind Injection
==============================================================================
blog ink – Bypass Setting
========================================================================================
CoffieNet CMS – Admin Bypass
========================================================================================
Dodo Upload 1.3 – Arbitrary File Upload (Bypass)
========================================================================================
WordPress Plugin Copperleaf Photolog 0.16 – SQL Injection
#############################################################################################################
superengine CMS (Custom Pack) – SQL Injection
_______ _|__| | ____________ ____ ____
Généré par KDPics 1.18 – Remote Add Admin
==============================================================================
Katalog Stron Hurricane 1.3.5 – Remote File Inclusion / SQL Injection
#############################################################################################################
File Upload Manager 1.3 – Web Shell File Upload
# Version: v1.3
Joomla! Component com_videos – SQL Injection
http://server/index.php?option=com_videos&act=view&Itemid=27&id=-1084+UNION SELECT 1,concat(username,0x3a,password),3...
Joomla! Component Jw_allVideos – Arbitrary File Download
#################################################################
Mambo Component AkoGallery – SQL Injection
Mambo com_akogallery Remote Sql Injection Vulnerability
JTL-Shop 2 – ‘druckansicht.php’ SQL Injection
JTL-Shop 2 (druckansicht.php) SQL Injection Vulnerability
ShortCMS 1.2.0 – SQL Injection
#######################[ Informatique inside ]##########################
Calendarix 0.8.20071118 – SQL Injection
#######################[ Informatique inside ]##########################
PHP PEAR 1.9.0 – Multiple Remote File Inclusions
###########################################################
WordPress Core 2.9 – Failure to Restrict URL Access
WordPress >= 2.9 Failure to Restrict URL Access
InterTech Co 1.0 – SQL Injection
------------------------------------------------------
ZeusCMS 0.2 – Database Backup Dump / Local File Inclusion
==============================================================================
WSN Guest 1.02 – ‘orderlinks’ SQL Injection
###########################
statcountex 3.1 – Multiple Vulnerabilities
# Software Link: http://www.2enetworx.com/dev/projects/download.asp?pid=4&rid=34
MRW PHP Upload – Arbitrary File Upload
# Date: 12/02/2010
southburn Web – ‘products.php’ SQL Injection
####################################################################
Vito CMS – SQL Injection
####################################################################
daChooch – SQL Injection
==============================================================================
CMS Made Simple 1.6.6 – Multiple Vulnerabilities
################################################################
Alqatari Group 1.0 – Blind SQL Injection
+===================================================================================+
Izumi 1.1.0 – Multiple Local File Inclusion / Remote File Inclusions
##################################################################
Basic-CMS – ‘nav_id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38235/info
CMS Made Simple 1.6.6 – Local File Inclusion / Cross-Site Scripting
source: https://www.securityfocus.com/bid/38234/info
CommodityRentals CD Rental Software – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/38184/info
PHP 5.3.1 – ‘session_save_path() Safe_mode()’ Restriction Bypass Exploiot
source: https://www.securityfocus.com/bid/38182/info
vBulletin 3.5.4 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/38179/info
Trade Manager Script – SQL Injection
:::::::::::::::::::::::::
apemCMS – SQL Injection
============ { Ariko-Security - Advisory #1/2/2010 } =============
Vacation Rental Script – SQL Injection
:::::::::::::::::::::::::
Books/eBooks Rental Software – SQL Injection
[!] Books/eBooks Rental Software SQL injection Vulnerability
CD Rentals Script – SQL Injection
[!] CD Rentals Script SQL injection Vulnerability
myPHP Guestbook 2.0.4 – Database Backup Dump
==============================================================================
GameRoom Script – Authentication Bypass / Arbitrary File Upload
|=-----------------------------------------------------=|
PHP Captcha Security Images – Denial of Service
# Exploit Title: CaptchaSecurityImages.php Denial Of Service
vBulletin 2.3.x – SQL Injection
# Title: vbulletin Vulnerability versions 2.3 .* - SQL injection.
vBulletin 3.0.0 – Cross-Site Scripting
# Title: vBulletin 3.0.0 XSS