SPIP 3.1.1/3.1.2 – File Enumeration / Path Traversal
## SPIP 3.1.1/3.1.2 File Enumeration / Path Traversal (CVE-2016-7982)
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
SPIP 3.1.2 Template Compiler/Composer – PHP Code Execution
## SPIP 3.1.2 Template Compiler/Composer PHP Code Execution (CVE-2016-7998)
Event Calendar PHP 1.5 – SQL Injection
=====================================================
Classifieds Rental Script – SQL Injection
# Exploit Title: SQL Injection in Classifieds Rental Script
Intel(R) PROSet/Wireless WiFi Software 15.01.1000.0927 – Unquoted Service Path Privilege Escalation
# Exploit Title: Intel(R) PROSet/Wireless WiFi Software - Unquoted Service Path Privilege Escalation
XhP CMS 0.5.1 – Cross-Site Request Forgery / Persistent Cross-Site Scripting
# Exploit Title: XhP CMS 0.5.1 - Cross-Site Request Forgery to Persistent Cross-Site Scripting
CNDSOFT 2.3 – Cross-Site Request Forgery / Arbitrary File Upload
# Exploit Title: CNDSOFT 2.3 - Arbitrary File Upload with CSRF (shell.php)
Pluck CMS 4.7.3 – Cross-Site Request Forgery (Add Page)
# Exploit Title: Pluck CMS 4.7.3 - Add-Page Cross-Site Request Forgery
PHP Business Directory – Multiple Vulnerabilities
# Exploit Title: PHP Business Directory - Multiple Vulnerabilities
Subrion CMS 4.0.5 – Cross-Site Request Forgery Bypass / Persistent Cross-Site Scripting
# Exploit Title: Subrion CMS 4.0.5 - CSRF Bypass to Persistent XSS and Add-Admin
PHP NEWS 1.3.0 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: PHP NEWS 1.3.0 - Cross-Site Request Forgery (Add Admin)
PHP Image Database – Multiple Vulnerabilities
# Exploit Title: PHP Image Database - Multiple Vulnerabilities
PHP Telephone Directory – Multiple Vulnerabilities
# Exploit Title: PHP Telephone Directory - Multiple Vulnerabilities
School Full CBT 0.1 – SQL Injection
# Exploit Title.............. School Full CBT SQL Injection
Simple Shopping Cart Application 0.1 – SQL Injection
# Exploit Title.............. Simple Shopping Cart Application SQL Injection
Health Record System 0.1 – Authentication Bypass
# Exploit Title.............. Health Record System Auth Bypass
Fashion Shopping Cart 0.1 – SQL Injection
# Exploit Title.............. Fashion Shopping Cart SQL Injection
Learning Management System 0.1 – Authentication Bypass
# Exploit Title.............. Learning Management System Auth Bypass
Simple Dynamic Web 0.1 – SQL Injection
# Exploit Title.............. Simple Dynamic Web SQL Injection
Web Based Alumni Tracking System 0.1 – SQL Injection
# Exploit Title.............. Web Based Alumni Tracking System Multiple Vulnerability
Student Information System (SIS) 0.1 – Authentication Bypass
# Exploit Title............... Student Information System (SIS) Auth Bypass
YouTube Automated CMS 1.0.7 – Cross-Site Request Forgery / Persistent Cross-Site Scripting
# Exploit Title: YouTube Automated CMS 1.0.1 / 1.0.7 - CSRF to Persistent XSS
Simple Forum PHP 2.4 – SQL Injection
=====================================================
JonhCMS 4.5.1 – SQL Injection
# Exploit Title :----------------- : JonhCMS 4.5.1 - (go.php?id) - SQL Injection
RSS News AutoPilot Script 1.0.1/3.1.0 – Admin Panel Authentication Bypass
# Exploit Title: RSS News AutoPilot Script - Admin Panel Authentication Bypass
Colorful Blog – Cross-Site Request Forgery (Change Admin Password)
# Exploit Title :----------- : Colorful Blog - Cross-Site Request Forgery (Change Admin Pass)
Colorful Blog – Persistent Cross-Site Scripting
# Exploit Title : ----------- : Colorful Blog - Stored Cross Site Scripting
Thatware 0.4.6 – SQL Injection
# Exploit Title :----------------- : Thatware 0.4.6 - (friend.php) - SQL Injection
Simple Blog PHP 2.0 – SQL Injection
=====================================================
Simple Blog PHP 2.0 – Multiple Vulnerabilities
=====================================================
ApPHP MicroCMS 3.9.5 – Cross-Site Request Forgery (Add Admin)
# Exploit Title :----------------- : ApPHP MicroCMS 3.9.5 - Cross-Site Request Forgery (Add Admin (Main))
ApPHP MicroCMS 3.9.5 – Persistent Cross-Site Scripting
# Exploit Title :----------------- : ApPHP MicroCMS 3.9.5 - Stored Cross Site Scripting
OpenCimetiere 3.0.0-a5 – Blind SQL Injection
# Exploit Title: OpenCimetiere v3.0.0-a5 | Blind SQL Injection
NetBilletterie 2.8 – Multiple Vulnerabilities
# Exploit Title: NetBilletterie 2.8 | Multiple Vulnerabilities
Categorizator 0.3.1 – SQL Injection
# Exploit Title: Categorizator 0.3.1 | SQL Injection
ApPHP MicroBlog 1.0.2 – Cross-Site Request Forgery (Add New Author)
# Exploit Title : ApPHP MicroBlog 1.0.2 - Cross-Site Request Forgery (Add New Author)
ApPHP MicroBlog 1.0.2 – Persistent Cross-Site Scripting
# Exploit Title : ApPHP MicroBlog 1.0.2 - Stored Cross
Spacemarc News – Cross-Site Request Forgery (Add New Post)
# Exploit Title : Spacemarc News - Cross-Site Request
Maian Weblog 4.0 – Cross-Site Request Forgery (Add New Post)
# Exploit Title : Maian Weblog 4.0 - Cross-Site Request
PHP Press Release – Persistent Cross-Site Scripting
# Exploit Title : PHP Press Release* - Stored Cross Site
PHP Press Release – Cross-Site Request Forgery (Add Admin)
# Exploit Title : PHP Press Release - Cross-Site Request Forgery (Add Admin - Super User )
miniblog 1.0.1 – Cross-Site Request Forgery (Add New Post)
# Exploit Title : miniblog 1.0.1 - Cross-Site Request Forgery (Add New Post)
Entrepreneur Job Portal Script 2.06 – SQL Injection
[x]==================================================================================================================...
Just Dial Clone Script – ‘fid’ SQL Injection
[x]==================================================================================================================...
MLM Unilevel Plan Script 1.0.2 – SQL Injection
######################
B2B Portal Script – Blind SQL Injection
[x]==================================================================================================================...