Max’s File Uploader – Arbitrary File Upload
in the name of allah
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
PonVFTP – ‘login.php’ SQL Injection
source: https://www.securityfocus.com/bid/40608/info
Triburom – ‘forum.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40316/info
LetoDms 1.4.x – ‘lang’ Local File Inclusion
source: https://www.securityfocus.com/bid/37828/info
Joomla! Component com_marketplace 1.2 – ‘catid’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37819/info
Xforum 1.4 – ‘nbpageliste’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37818/info
Technology for Solutions 1.0 – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37811/info
Zend Framework 1.9.6 – Multiple Input Validation Vulnerabilities / Security Bypass
source: https://www.securityfocus.com/bid/37809/info
dokuwiki 2009-12-25 – Multiple Vulnerabilities
Reported: 13-01-2010
Joomla! Component com_articlemanager – SQL Injection
########################################################################
Public Media Manager – SQL Injection
#################################################
PSI CMS 0.3.1 – SQL Injection
###########################################
Hesk Help Desk 2.1 – Cross-Site Request Forgery
#############################################################
Populum 2.3 – SQL Injection
# Exploit Title: Populum SQL injection vulnerability
CiviCRM 3.1 < Beta 5 - Multiple Cross-Site Scripting Vulnerabilities
# Author: h00die (mcyr2@csc.com) & Ch3nz (vpierorazio@csc.com)
StivaSoft Stiva SHOPPING CART 1.0 – ‘demo.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40310/info
Tribisur – ‘cat’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37800/info
Joomla! Component com_tienda – ‘categoria’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37798/info
Simple PHP Blog 0.5.x – ‘search.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37752/info
Docmint 1.0/2.1 – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37721/info
PHPepperShop 2.5 – ‘USER_ARTIKEL_HANDLING_AUFRUF.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37707/info
Layout CMS 1.0 – SQL Injection / Cross-Site Scripting
+===================================================================================+
Alwjeez Script – Database Backup
::::::::::::::::Exploit:::::::::::
tincan ltd – ‘section’ SQL Injection
+/=============================================\+
FAQEngine 4.24.00 – Remote File Inclusion
###################################################################################
Image Hosting Script – Arbitrary File Upload
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
gridcc script 1.0 – SQL Injection / Cross-Site Scripting
+===================================================================================+
CMScontrol 7.x – Arbitrary File Upload
#############################################################
Alex Guestbook – Multiple Vulnerabilities
==============================================================================
Active Calendar 1.2 – ‘$_SERVER[‘PHP_SELF’]’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37709/info
@lex Guestbook 5.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37706/info
Jamit Job Board – ‘post_id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37701/info
DELTAScripts PHP Links 1.0 – ’email’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37700/info
Smart Statistics 1.0 – ‘smart_Statistics_admin.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40468/info
DigitalHive – ‘mt’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37697/info
Simply Classified 0.2 – Cross-Site Scripting / Cross-Site Request Forgery
#################################################################
Joomla! Component com_jashowcase – Directory Traversal
@~~=======================================~~@
Joomla! Component com_jvideodirect – Directory Traversal
@~~=======================================~~@
Joomla! Component com_jcollection – Directory Traversal
@~~=======================================~~@
ZeeWays Script – SQL Injection
# Exploit Title: ZeEwAyS ScRiPt SQL Injection Vulnerability
Joomla! Component com_dashboard – Directory Traversal
@~~=======================================~~@
phpMDJ 1.0.3 – SQL Injection
,--------------------------------------------------------------,
PHPCalendars – Multiple Vulnerabilities
==============================================================================
TermiSBloG 1.0 – SQL Injections
#############################################################
ProArcadeScript to Game – SQL Injection
# Software Link: proarcadescript.com
PPVChat – Multiple Vulnerabilities
##########################[andresg888]##########################
ProfitCode Shopping Cart – Multiple Local/Remote File Inclusion Vulnerabilities
# Author: Zer0 Thunder
DELTAScripts PHPClassifieds – ‘rate.php’ Blind SQL Injection
Name : DELTAScripts PHPClassifieds
DELTAScripts PHPLinks – ‘catid’ SQL Injection
Name : DELTAScripts PHPLinks
Joomla! Component com_ksadvertiser – SQL Injection
########################################################################