CubeCart < 3.0.12 - Multiple Vulnerabilities
CubeCart Multiple Vulnerabilities
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WordPress Plugin CYSTEME Finder 1.3 – Arbitrary File Disclosure/Arbitrary File Upload
Exploit Title: WordPress CYSTEME Finder Plugin 1.3 - Arbitrary File Dislcosure/Arbitrary File Upload
chatNow – Multiple Vulnerabilities
# Exploit Title: chatNow - Multiple Vulnerabilities
SimplePHPQuiz – Blind SQL Injection
# Exploit Title: SimplePHPQuiz - Blind SQL Injection
WordPress Plugin Mail Masta 1.0 – Local File Inclusion
[+] Date: [23-8-2016]
WordPress Core 4.5.3 – Directory Traversal / Denial of Service
Path traversal vulnerability in WordPress Core Ajax handlers
Ocomon 2.0 – SQL Injection
# Exploit Title: Ocomon 2.0: Acess administrative Bypass / Multiple Sql
tcPbX – ‘tcpbx_lang’ Local File Inclusion
Vulnerable hardware : tcpbx voip distro
X-Cart < 4.1.3 - Arbitrary Variable Overwrite
X-Cart Arbitrary Variable Overwrite
Lepton CMS 2.2.0/2.2.1 – PHP Code Injection
[+] Credits: John Page (HYP3RLINX)
Lepton CMS 2.2.0/2.2.1 – Directory Traversal
[+] Credits: John Page (HYP3RLINX)
Zabbix 2.2.x/3.0.x – SQL Injection
==========================================
Claroline < 1.7.7 - Arbitrary File Inclusion
Claroline Arbitrary File Inclusion
SquirrelMail < 1.4.7 - Arbitrary Variable Overwrite
SquirrelMail Arbitrary Variable Overwrite
EyeLock nano NXT 3.5 – Remote Code Execution
#!/usr/bin/env python
EyeLock nano NXT 3.5 – Local File Disclosure
EyeLock nano NXT 3.5 Local File Disclosure Vulnerability
Nagios Network Analyzer 2.2.1 – Multiple Cross-Site Request Forgery Vulnerabilities
[+] Credits: John Page ( hyp3rlinx )
WordPress Plugin Add From Server < 3.3.2 - Cross-Site Request Forgery (Arbitrary File Upload)
Cross-Site Request Forgery vulnerability in Add From Server WordPress Plugin
PHPCollab CMS 2.5 – ’emailusers.php’ SQL Injection
Document Title:
NUUO NVRmini 2 3.0.8 – ‘strong_user.php’ Backdoor Remote Shell Access
NUUO Backdoor (strong_user.php) Remote Shell Access
NUUO NVRmini 2 3.0.8 – Arbitrary File Deletion
NUUO Arbitrary File Deletion Vulnerability
NUUO NVRmini 2 3.0.8 – Multiple OS Command Injections
NUUO Multiple OS Command Injection Vulnerabilities
NUUO NVRmini 2 3.0.8 – Local File Disclosure
NUUO Local File Disclosure Vulnerability
NUUO NVRmini 2 3.0.8 – Remote Code Execution
#!/usr/bin/env python
WordPress Plugin Count Per Day 3.5.4 – Persistent Cross-Site Scripting
Stored Cross-Site Scripting vulnerability in Count per Day WordPress Plugin
PHP Power Browse 1.2 – Directory Traversal
# Exploit Title: PHP Power Browse v1.2 - Path Traversal
Subrion CMS 4.0.5 – SQL Injection
Document Title:
Open Upload 0.4.2 – Cross-Site Request Forgery (Add Admin)
================================================================================================================
WordPress Plugin ALO EasyMail NewsLetter 2.9.2 – Cross-Site Request Forgery (Add/Import Arbitrary Subscribers)
Cross-Site Request Forgery in ALO EasyMail Newsletter WordPress Plugin
WordPress Plugin WP Live Chat Support 6.2.03 – Persistent Cross-Site Scripting
Stored Cross-Site Scripting vulnerability in WP Live Chat Support WordPress Plugin
WordPress Plugin Booking Calendar 6.2 – SQL Injection
SQL injection vulnerability in Booking Calendar WordPress Plugin
phpMyAdmin 4.6.2 – (Authenticated) Remote Code Execution
#!/usr/bin/env python
WordPress Plugin Ultimate Product Catalog 3.9.8 – do_shortcode via ajax Blind SQL Injection
# Exploit Title: Wordpress Ultimate-Product-Catalog get_results("SELECT * FROM $catalogue_items_table_name WHERE Cata...
PHP File Vault 0.9 – Directory Traversal
PHP File Vault version 0.9 , remote directory traversal and read file vulnerabilty
PHP gettext 1.0.12 – ‘gettext.php’ Code Execution
[CVE-2016-6175] gettext.php
CodoForum 3.2.1 – SQL Injection
1. Advisory Information
TeamPass Passwords Management System 2.1.26 – Arbitrary File Download
1. ADVISORY INFORMATION
newsp.eu PHP Calendar Script 1.0 – User Credentials Disclosure
# Exploit Title: PHP calendar script Password Download File