Interspire Knowledge Manager 5 – ‘callback.snipshot.php’ Arbitrary File Creation
source: https://www.securityfocus.com/bid/38186/info
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
MobPartner Chat – Multiple SQL Injections
MobPartner Chat Multiple Sql Injection Vulnerability
MYRE Classified – ‘cat’ SQL Injection
###################################################################################
Dlili Script – SQL Injection
==============================================================================
GCP 2.0 datasets provided as BioCASE Web services – Local File Inclusion
========================================================================
Home Of AlegroCart 1.1 – Cross-Site Request Forgery (Change Administrator Password)
[#]----------------------------------------------------------------[#]
Snif 1.5.2 – Any Filetype Download
--------------------------------------------
Joomla! Component Yelp – SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Joomla! Component Job – SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Evernew Free Joke Script – ‘viewjokes.php’ SQL Injection
Name : Evernew Free Joke Script (viewjokes.php) SQL Injection
ShoutCMS – ‘content.php’ Blind SQL Injection
Shout! (content.php) Blind Sql Injection Vulnerability
EmiratesHost – Insecure Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/39963/info
Joomla! Component AutartiTarot – Directory Traversal
source: https://www.securityfocus.com/bid/38034/info
Joomla! Component com_gambling – ‘gamblingEvent’ SQL Injection
source: https://www.securityfocus.com/bid/38033/info
HAWHAW – ‘newsread.php’ SQL Injection
source: https://www.securityfocus.com/bid/39978/info
Last Wizardz – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/39968/info
Joomla! Component com_rsgallery2 2.0 – ‘catid’ SQL Injection
source: https://www.securityfocus.com/bid/38009/info
Saman Portal – SQL Injection
#################################################################
Maian Greetings 2.1 – Arbitrary File Upload
========================================================================================
Creative SplashWorks-SplashSite – ‘page.php’ Blind SQL Injection
####################################################################
crownweb – ‘page.cfm’ SQL Injection
crownweb (page.cfm) Sql Injection Vulnerability
dotProject 2.1.3 – Cross-Site Scripting / Improper Permissions
# Exploit Title: dotProject 2.1.3 XSS and Improper Permissions
IPB (nv2) Awards < 1.1.0 - SQL Injection
#################################################
ThinkAdmin – ‘page.php’ SQL Injection
==========================================================
Joomla! Component com_simplefaq – ‘catid’ Blind SQL Injection
Joomla Component com_simplefaq (catid) Blind Sql Injection Vulnerability
Joomla! Component JE Event Calendar – SQL Injection
[~]>> ...[BEGIN ADVISORY]...
phpunity.newsmanager – Local File Inclusion
#############################################################################################################
Joomla! Component com_dms 2.5.1 – SQL Injection
[~] Joomla Component com_dms Remote SQL injection vulnerability - (category_id)
Joomla! Component JE Quiz – ‘eid’ Blind SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Joomla! Component Jreservation – Blind SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Joomla! Component CCNewsLetter – Local File Inclusion
Joomla Component com_ccnewsletter Local File Inclusion
Joomla! Component jVideoDirect – Blind SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Joomla! Component com_kunena – Blind SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Novaboard 1.1.2 – SQL Injection
#############################################################
Joomla! Component CCNewsLetter – Directory Traversal
[~]>> ...[BEGIN ADVISORY]...
Joomla! Component com_virtuemart – order_status_id SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Joomla! Component VirtueMart Module Customers_who_bought – SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Discuz! 6.0 – ‘tid’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37982/info
Joomla! Component 3D Cloud – ‘tagcloud.swf’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37958/info
Joomla! 1.5.12 – Connect Back
#!/usr/bin/php
UGiA PHP UPLOADER 0.2 – Arbitrary File Upload
========================================================================================
Status2k – Remote Add Admin
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
BoastMachine 3.1 – Arbitrary File Upload
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
SilverStripe CMS 2.3.5 – Cross-Site Request Forgery / Open Redirection
# Exploit Title: Silverstripe
OpenDb 1.5.0.4 – Multiple Local File Inclusions
==============================================================================
Joomla! Component JBDiary – Blind SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Joomla! Component com_jbpublishdownfp – SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Joomla! Component com_casino – SQL Injection
[~]>> ...[BEGIN ADVISORY]...