php

Super Cms Blog Pro 1.0 – SQL Injection

# # # # #

Joomla! Component Dutch Auction Factory 2.0.2 – ‘filter_order_Dir’ SQL Injection

# Exploit Title: Joomla! Component Dutch Auction Factory 2.0.2 - 'filter_order_Dir' SQL Injection

Joomla! Component Auction Factory 4.5.5 – ‘filter_order’ SQL Injection

# Exploit Title: Joomla! Component Auction Factory 4.5.5 - 'filter_order' SQL Injection

Joomla! Component Micro Deal Factory 2.4.0 – ‘id’ SQL Injection

# Exploit Title: Joomla! Component Micro Deal Factory 2.4.0 - 'id' SQL Injection

Joomla! Component AMGallery 1.2.3 – ‘filter_category_id’ SQL Injection

# Exploit Title: Joomla! Component AMGallery 1.2.3 - 'filter_category_id' SQL Injection

MyBB Visual Editor 1.8.18 – Cross-Site Scripting

# Title: MyBB Visual Editor 1.8.18 - Cross-Site Scripting

Joomla! Component CW Article Attachments 1.0.6 – ‘id’ SQL Injection

# Exploit Title: Joomla! CW Article Attachments 1.0.6 - 'id' SQL Injection

Navigate CMS 2.8 – Cross-Site Scripting

# Title: Navigate CMS 2.8 - Cross-Site Scripting

WordPress Plugin Localize My Post 1.0 – Local File Inclusion

# Exploit Title: WordPress Plugin Localize My Post 1.0 - Local File Inclusion

WordPress Plugin Wechat Broadcast 1.2.0 – Local File Inclusion

# Exploit Title: WordPress Plugin Wechat Broadcast 1.2.0 - Local File Inclusion

WordPress Plugin Arigato Autoresponder and Newsletter 2.5 – Blind SQL Injection / Reflected Cross-Site Scripting

Title: Blind SQL injection and multiple reflected XSS vulnerabilities in Wordpress Plugin Arigato Autoresponder and N...

Joomla! Component JCK Editor 6.4.4 – ‘parent’ SQL Injection

# Title: Joomla Component JCK Editor 6.4.4 - 'parent' SQL Injection

WordPress Plugin Survey & Poll 1.5.7.3 – ‘sss_params’ SQL Injection

# Exploit Title: Wordpress Plugin Survey & Poll 1.5.7.3 - 'sss_params' SQL Injection

MyBB 1.8.17 – Cross-Site Scripting

# Exploit Title: MyBB 1.8.17 - Cross-Site Scripting

IBM Identity Governance and Intelligence 5.2.3.2 / 5.2.4 – SQL Injection

# Exploit Title: [Unauthenticated Remote SQLi]

Bayanno Hospital Management System 4.0 – Cross-Site Scripting

# Exploit Title: Bayanno Hospital Management System 4.0 - Cross-Site Scripting

Softneta MedDream PACS Server Premium 6.7.1.1 – Directory Traversal

# Exploit Title: Softneta MedDream PACS Server Premium 6.7.1.1 - Directory Traversal

MedDream PACS Server Premium 6.7.1.1 – ’email’ SQL Injection

# Exploit Title: MedDream PACS Server Premium 6.7.1.1 - 'email' SQL Injection

Jorani Leave Management 0.6.5 – (Authenticated) ‘startdate’ SQL Injection

# Exploit Title: Jorani Leave Management 0.6.5 – 'startdate' SQL Injection

Jorani Leave Management 0.6.5 – Cross-Site Scripting

# Exploit Title: Jorani Leave Management System 0.6.5 – Cross-Site Scripting

mooSocial Store Plugin 2.6 – SQL Injection

# Exploit Title: mooSocial Store Plugin 2.6 - SQL Injection

Simple POS 4.0.24 – ‘columns[0][search][value]’ SQL Injection

# Exploit Title: Simple POS 4.0.24 - 'columns[0][search][value]' SQL Injection

PHP File Browser Script 1 – Directory Traversal

# Exploit Title: PHP File Browser Script 1 - Directory Traversal

Logicspice FAQ Script 2.9.7 – Remote Code Execution

# Exploit Title: Logicspice FAQ Script 2.9.7 - Remote Code Execution

Online Quiz Maker 1.0 – ‘catid’ SQL Injection

# Exploit Title: Online Quiz Maker 1.0 - 'catid' SQL Injection

Admidio 3.3.5 – Cross-Site Request Forgery (Change Permissions)

# Exploit Title: Admidio 3.3.5 - Cross-Site Request Forgery (Change Permissions)

DamiCMS 6.0.0 – Cross-Site Request Forgery (Change Admin Password)

# Exploit Title: DamiCMS 6.0.0 - Cross-Site Request Forgery (Change Admin Password)

WordPress Plugin Quizlord 2.0 – Cross-Site Scripting

# Exploit Title: WordPress Plugin Quizlord 2.0 - Cross-Site Scripting

WordPress Plugin Jibu Pro 1.7 – Cross-Site Scripting

# Exploit Title: WordPress Plugin Jibu Pro 1.7 - Cross-Site Scripting

phpMyAdmin 4.7.x – Cross-Site Request Forgery

# Exploit Title: phpMyAdmin 4.7.x - Cross-Site Request Forgery

WordPress Plugin Plainview Activity Monitor 20161228 – (Authenticated) Command Injection

Responsive FileManager < 9.13.4 - Directory Traversal

The following vulnerabilities were fixed in the version 9.13.4.

LiteCart 2.1.2 – Arbitrary File Upload

# Exploit Title: LiteCart 2.1.2 - Arbitrary File Upload

Gleez CMS 1.2.0 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: Gleez CMS 1.2.0 - Cross-Site Request Forgery (Add Admin)

WordPress Plugin Gift Voucher 1.0.5 – (Authenticated) ‘template_id’ SQL Injection

# Exploit Title: WordPress Plugin Gift Voucher 1.0.5 - 'template_id' SQL Injection

UltimatePOS 2.5 – Remote Code Execution

# Exploit Title: UltimatePOS 2.5 - Remote Code Execution

Twitter-Clone 1 – ‘code’ SQL Injection

# Exploit Title: Twitter-Clone 1 - 'code' SQL Injection

KingMedia 4.1 – File Upload

# Exploit Title: KingMedia 4.1 - Remote Code Execution

WordPress Plugin Ninja Forms 3.3.13 – CSV Injection

# Exploit Title: Wordpress Plugin Ninja Forms 3.3.13 - CSV Injection

Twitter-Clone 1 – Cross-Site Request Forgery (Delete Post)

# Exploit Title: Twitter-Clone 1 - Cross-Site Request Forgery (Delete Post)

Twitter-Clone 1 – ‘userid’ SQL Injection

# Exploit Title: Twitter-Clone 1 - 'userid' SQL Injection

Countly – Cross-Site Scripting

############################################################################

Easylogin Pro 1.3.0 – ‘Encryptor.php’ Unserialize Remote Code Execution

#!/usr/bin/php

WordPress Plugin Tagregator 0.6 – Cross-Site Scripting

# Exploit Title: WordPress Plugin Tagregator 0.6 - Cross-Site Scripting

MyBB Moderator Log Notes Plugin 1.1 – Cross-Site Request Forgery

# Exploit Title: MyBB Moderator Log Notes Plugin 1.1 - Cross-Site Request Forgery

WordPress Plugin Chained Quiz 1.0.8 – ‘answer’ SQL Injection

# Exploit Title: WordPress Plugin Chained Quiz 1.0.8 - 'answer' SQL Injection

Pimcore 5.2.3 – SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery

SEC Consult Vulnerability Lab Security Advisory < 20180813-0 >

WordPress Plugin Export Users to CSV 1.1.1 – CSV Injection

# Exploit Title: Wordpress Plugin Export Users to CSV 1.1.1 - CSV Injection

MyBB Like Plugin 3.0.0 – Cross-Site Scripting

# Exploit Title: MyBB Like Plugin 3.0.0 - Cross-Site Scripting

MyBB Thank You/Like Plugin 3.0.0 – Cross-Site Scripting

# Exploit Title: MyBB Thank You/Like Plugin 3.0.0 - Cross-Site Scripting