Joomla! Component com_ContentBlogList – SQL Injection
[~]>> ...[BEGIN ADVISORY]...
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
magic-portal 2.1 – SQL Injection
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Joomla! Component com_biographies – SQL Injection
#--------------------------------------------------------
Joomla! Component com_gurujibook – SQL Injection
#--------------------------------------------------------
KosmosBlog 0.9.3 – SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery
[#-----------------------------------------------------------------------------------------------#]
Joomla! Component com_avosbillets – SQL Injection
#--------------------------------------------------------
Joomla! Component com_gameserver – SQL Injection
# Exploit Title: Joomla (com_gameserver) SQL Injection Vulnerability
OpenX 2.6.1 – SQL Injection
source: https://www.securityfocus.com/bid/37913/info
cPanel and WHM 11.25 – ‘failurl’ HTTP Response Splitting
source: https://www.securityfocus.com/bid/37902/info
Blog System 1.x – ‘note’ SQL Injection
[#] Script : Blog System
Joomla! Component com_book – SQL Injection
==============================================================================
Chipmunk NewsLetter 2.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/40024/info
kloNews 2.0 – ‘cat.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39987/info
PHPMySpace Gold 8.0 – ‘gid’ SQL Injection
source: https://www.securityfocus.com/bid/37881/info
AdvertisementManager 3.1 – ‘req’ Local/Remote File Inclusion
source: https://www.securityfocus.com/bid/44165/info
VisualShapers EZContents 2.0.3 – Authentication Bypass / Multiple SQL Injections
source: https://www.securityfocus.com/bid/37858/info
DataLife Engine 8.3 – ‘/engine/ajax/addcomments.php?_REQUEST[skin]’ Remote File Inclusion
source: https://www.securityfocus.com/bid/37851/info
DataLife Engine 8.3 – ‘/engine/ajax/pm.php?config[lang]’ Remote File Inclusion
source: https://www.securityfocus.com/bid/37851/info
DataLife Engine 8.3 – ‘/engine/inc/help.php?config[langs]’ Remote File Inclusion
source: https://www.securityfocus.com/bid/37851/info
DataLife Engine 8.3 – ‘/engine/inc/include/init.php?selected_language’ Remote File Inclusion
source: https://www.securityfocus.com/bid/37851/info
Soft Direct 1.05 – Multiple Vulnerabilities
========================================================================================
Fatwiki (fwiki) 1.0 – Remote File Inclusion
#############################################################################################################
al3jeb script – Remote Change Password
al3jeb script Remote Change Password Exploit
Testlink TestManagement and Execution System 1.8.5 – Multiple Directory Traversal Vulnerabilities
1.Title :Multiple directory Traversal Vulnerabilites in Testlink TestManagement and Execution System.
Bits Video Script 2.04/2.05 – ‘search.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40716/info
Bits Video Script 2.04/2.05 – ‘/register.php’ Arbitrary File Upload / Arbitrary PHP Code Execution
source: https://www.securityfocus.com/bid/40712/info
Bits Video Script 2.04/2.05 – ‘/addvideo.php’ Arbitrary File Upload / Arbitrary PHP Code Execution
source: https://www.securityfocus.com/bid/40712/info
Hitmaaan Gallery 1.3 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/40711/info
Bits Video Script 2.05 Gold Beta – ‘showcase2search.php?rowptem[template]’ Remote File Inclusion
source: https://www.securityfocus.com/bid/40709/info
Bits Video Script 2.05 Gold Beta – ‘showcasesearch.php?rowptem[template]’ Remote File Inclusion
source: https://www.securityfocus.com/bid/40709/info
Mobile Chat 2.0.2 – ‘chatsmileys.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40232/info
vBulletin 4.0.1 – ‘misc.php’ SQL Injection
source: https://www.securityfocus.com/bid/37854/info
Easysitenetwork Jokes Complete Website – ‘searchingred’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37852/info
Easysitenetwork Jokes Complete Website – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37852/info
TestLink 1.8.5 – ‘order_by_login_dir’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37839/info
Joomla! Component com_libros – SQL Injection
########################################################################
Joomla! Component com_prime – Directory Traversal
@~~=======================================~~@
Max’s Image Uploader – Arbitrary File Upload
========================================================================================
Joomla! Component com_pc – Local File Inclusion
#############################################################
Uploader by CeleronDude 5.3.0 – Arbitrary File Upload (2)
#############################
Ebay Clone from clone2009 – SQL Injection
Name : Ebay Clone from (clone2009.com)
ITechSctipts Alibaba Clone – Multiple Vulnerabilities
Name : ITechSctipts Alibaba Clone
CLONEBID B2B Marketplace – Multiple Vulnerabilities
Name : CLONEBID B2B Marketplace
Transload Script – Arbitrary File Upload
# Exploit Title: Translod Script Uplaod Vulnerability
PonVFTP – Bypass / Arbitrary File Upload
in the name of allah