php

Joomla! Component Joomanager 2.0.0 – ‘com_Joomanager’ Arbitrary File Download

#!/usr/bin/python2

WordPress Plugin Ultimate Product Catalogue 4.2.2 – SQL Injection

# Exploit Title: Ultimate Product Catalogue 4.2.2 Sql Injection – Plugin WordPress – Sql Injection

GLPI 0.90.4 – SQL Injection

# Exploit Title: Multiple SQL injection vulnerabilities in GLPI 0.90.4

PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution

#!/usr/bin/python

WonderCMS 2.1.0 – Cross-Site Request Forgery

Joomla! Component JoomRecipe 1.0.3 – SQL Injection

# # # # #

Real Estate Classifieds Script – SQL Injection

# # # # #

WordPress Plugin WP Jobs < 1.5 - SQL Injection

# Exploit Title: WordPress Plugin WP Jobs < 1.5 - SQL Injection

PaulShop – SQL Injection

# Exploit Title: [PaulShop CMS

eCom Cart 1.3 – SQL Injection

# Exploit Title: eCom Cart 1.3 Exploit

nuevoMailer 6.0 – SQL Injection

# Exploit Title: nuevoMailer version 6.0 and earlier time-based SQL Injection

Nuevomailer < 6.0 - SQL Injection

# Exploit Title: Nuevo mailer version

Craft CMS 2.6 – Cross-Site Scripting

# Exploit Title: Craft CMS 2.6 - Cross-Site Scripting/Unrestricted File Upload

Robert 0.5 – Multiple Vulnerabilities

# Exploit Title: Robert 0.5 - Multiple Vulnerabilities XSS, CSRF, Directory

Xavier 2.4 – SQL Injection

Document Title:

Grav CMS 1.4.2 Admin Plugin – Cross-Site Scripting

# Exploit Title: GravCMS Core (Admin Plugin) v1.4.2 - Persistent Cross-Site Scripting

WordPress Plugin Tribulant Newsletters 4.6.4.2 – File Disclosure / Cross-Site Scripting

DefenseCode WebScanner DAST Advisory

WordPress Plugin Event List < 0.7.8 - SQL Injection

# Exploit Title: WordPress Plugin Event List

WordPress Plugin WP-Testimonials < 3.4.1 - SQL Injection

# Exploit Title: WP-Testimonials < 3.4.1 Union Based SQL Injection

Joomla! Component Payage 2.05 – ‘aid’ SQL Injection

# Exploit Title: Joomla Payage 2.05 - SQL Injection

CMS Web-Gooroo < 1.141 - Multiple Vulnerabilities

# Exploit Title: CMS Web-Gooroo

Piwigo Plugin Facetag 0.0.3 – Cross-Site Scripting

# Exploit Title: Piwigo plugin Facetag , Persistent XSS

OV3 Online Administration 3.0 – SQL Injection

OV3 Online Administration 3.0 Multiple Unauthenticated SQL Injection Vulnerabilities

OV3 Online Administration 3.0 – Remote Code Execution

OV3 Online Administration 3.0 – Directory Traversal

OV3 Online Administration 3.0 Parameter Traversal Arbitrary File Access PoC Exploit

Piwigo Plugin Facetag 0.0.3 – SQL Injection

# Exploit Title: Facetag Extension in Piwigo, Multiple SQL injection

TerraMaster F2-420 NAS TOS 3.0.30 – Root Remote Code Execution

# Source: https://www.evilsocket.net/2017/05/30/Terramaster-NAS-Unauthenticated-RCE-as-root/

WordPress Plugin Huge-IT Video Gallery 2.0.4 – SQL Injection

DefenseCode ThunderScan SAST Advisory

PlaySMS 1.4 – ‘import.php’ Remote Code Execution

# Exploit Title: PlaySMS 1.4 Remote Code Execution using Phonebook import Function in import.php

Mantis Bug Tracker 1.3.10/2.3.0 – Cross-Site Request Forgery

[+] Credits: John Page a.k.a hyp3rlinx

KMCIS CaseAware – Cross-Site Scripting

# Exploit Title: CaseAware Cross Site Scripting Vulnerability

Tecnovision DLX Spot – Arbitrary File Upload

# Exploit Title: DlxSpot - Player4 LED video wall - Arbitrary File Upload

Tecnovision DLX Spot – Authentication Bypass

# Exploit Title: DlxSpot - Player4 LED video wall - Admin Interface SQL

PlaySMS 1.4 – Remote Code Execution

Exploit Title: PlaySMS 1.4 Remote Code Execution (to Poisoning admin log)

Belden Garrettcom 6K/10K Switches – Authentication Bypass / Memory Corruption

Introduction

Joomla! 3.7.0 – ‘com_fields’ SQL Injection

# Exploit Title: Joomla 3.7.0 - Sql Injection

BuilderEngine 3.5.0 – Arbitrary File Upload and Execution (Metasploit)

##

WordPress Plugin PHPMailer 4.6 – Host Header Command Injection (Metasploit)

##

Mailcow 0.14 – Cross-Site Request Forgery

[+] Credits: John Page a.k.a hyp3rlinx

PlaySMS 1.4 – ‘/sendfromfile.php’ Remote Code Execution / Unrestricted File Upload

# Exploit Title: PlaySMS 1.4 Code Execution using $filename and Unrestricted File Upload in sendfromfile.php

Vanilla Forums < 2.3 - Remote Code Execution

#!/bin/bash

CMS Made Simple 2.1.6 – Multiple Vulnerabilities

# Title: CMSMS 2.1.6 Multiple Vulnerabilities

Gongwalker API Manager 1.1 – Cross-Site Request Forgery

# Exploit Title: gongwalker API Manager v1.1 - CSRF(Add/Delete/Edit API)

BanManager WebUI 1.5.8 – PHP Code Injection

BanManager WebUI 1.5.8 - PHP Code Injection & Stored XSS

QNAP PhotoStation 5.2.4 / MusicStation 4.8.4 – Authentication Bypass

# Exploit QNAP PhotoStation 5.2.4 and MusicStation 4.8.4 Authentication Bypass

I, Librarian 4.6/4.7 – Command Injection / Server Side Request Forgery / Directory Enumeration / Cross-Site Scripting

SEC Consult Vulnerability Lab Security Advisory < 20170509-0 >

ViMbAdmin 3.0.15 – Multiple Cross-Site Request Forgery Vulnerabilities

# [CVE-2017-6086] Multiple CSRF vulnerabilities in ViMbAdmin version 3.0.15

WordPress Plugin WebDorado Gallery 1.3.29 – SQL Injection

Source: http://www.defensecode.com/advisories/DC-2017-02-011_WordPress_WebDorado_Gallery_Plugin_Advisory.pdf

Tuleap Project Wiki 8.3 < 9.6.99.86 - Command Injection

# Tuleap - Command Injection in Project Wiki

Admidio 3.2.8 – Cross-Site Request Forgery

# Exploit Title :Admidio 3.2.8 (CSRF to Delete Users)