php

Magento < 2.0.6 - Arbitrary Unserialize / Arbitrary Write File

Web Interface for DNSmasq / Mikrotik – SQL Injection

[+] Credits: hyp3rlinx

eXtplorer 2.1.9 – ‘.ZIP’ Directory Traversal

[+] Credits: John Page aka hyp3rlinx

CakePHP Framework 3.2.4 – IP Spoofing

=============================================

WordPress Plugin Huge-IT Image Gallery 1.8.9 – Multiple Vulnerabilities

# Exploit Title: WordPress plugin Image Gallery Full Path Disclosure and SQL Injection

WordPress Plugin Q and A (Focus Plus) FAQ 1.3.9.7 – Multiple Vulnerabilities

# Exploit Title: WordPress Q and A (Focus Plus) FAQ Full Path Disclosure and SQL Injection

ZeewaysCMS – Multiple Vulnerabilities

ZeewaysCMS Multiple Vulnerabilities

Ajaxel CMS 8.0 – Multiple Vulnerabilities

Ajaxel CMS 8.0 Multiple Vulnerabilities

Imagick 3.3.0 (PHP 5.4) – disable_functions Bypass

# Exploit Title: PHP Imagick disable_functions Bypass

WordPress Plugin Acunetix WP Security Plugin 3.0.3 – Cross-Site Scripting

1. Introduction

CMS Made Simple < 1.12.1 / < 2.1.3 - Web Server Cache Poisoning

=============================================

Alibaba Clone B2B Script – Admin Authentication Bypass

# Exploit Title: Alibaba Clone B2B Script Admin Authentication Bypass

WordPress Plugin Ghost 0.5.5 – Unrestricted Export Download

# Exploit Title: WordPress Export to Ghost Unrestricted Export Download

GLPi 0.90.2 – SQL Injection

Advisory ID: HTB23301

Observium 0.16.7533 – (Authenticated) Arbitrary Command Execution

# Exploit title: Observium Commercial - Authenticated RCE

Observium 0.16.7533 – Cross-Site Request Forgery

Change admin password

PHP 7.0.5 – ZipArchive::getFrom* Integer Overflow

Details

ImpressCMS 1.3.9 – SQL Injection

=============================================

phpLiteAdmin 1.9.6 – Multiple Vulnerabilities

#####################################################################################################################...

PHPBack 1.3.0 – SQL Injection

[+] Credits: hyp3rlinx

modified eCommerce Shopsoftware 2.0.0.0 rev 9678 – Blind SQL Injection

# Title: Blind Injection modified eCommerce 2.0.0.0 rev 9678

pfSense Community Edition 2.2.6 – Multiple Vulnerabilities

( , ) (,

Webutler CMS 3.2 – Cross-Site Request Forgery

Dear OffSec,

WordPress Plugin Kento Post View Counter 2.8 – Cross-Site Request Forgery / Cross-Site Scripting

I would like to disclose CSRF and stored XSS vulnerability in Kento post view counter plugin version 2.8 .

WordPress Plugin leenk.me 2.5.0 – Cross-Site Request Forgery / Cross-Site Scripting

I would like to disclose CSRF and stored XSS vulnerability in Wordpress

PHPmongoDB 1.0.0 – Multiple Vulnerabilities

#####################################################################################################################...

pfSense Firewall 2.2.6 – Services Cross-Site Request Forgery

# Exploit Title: pfSense Firewall

Ovidentia troubleticketsModule 7.6 – Remote File Inclusion

# Title: Ovidentia Module troubletickets 7.6 GLOBALS[babInstallPath] Remote File Inclusion Vulnerability

RockMongo PHP MongoDB Administrator 1.1.8 – Multiple Vulnerabilities

#####################################################################################################################...

OpenCart 2.1.0.2 < 2.2.0.0 - json_decode Function Remote Code Execution

OpenCart json_decode function Remote PHP Code Execution

WPN-XM Serverstack 0.8.6 – Cross-Site Request Forgery

[+] Credits: hyp3rlinx

op5 7.1.9 – Remote Command Execution

[+] Credits: hyp3rlinx

SocialEngine 4.8.9 – SQL Injection

Advisory ID: HTB23286

PHP 5.5.33 – Invalid Memory Write

# Exploit Title: Invalid memory write in phar on filename with \0 in name

WordPress Plugin Advanced Video 1.0 – Local File Inclusion

#!/usr/bin/env python

ATutor 2.2.1 – Directory Traversal / Remote Code Execution (Metasploit)

##

CubeCart 6.0.10 – Multiple Vulnerabilities

Advisory ID: HTB23298

WordPress Plugin Photocart Link 1.6 – Local File Inclusion

# Exploit Title: Wordpress Plugin Photocart Link - Local File Inclusion

WordPress Plugin IMDb Profile Widget 1.0.8 – Local File Inclusion

# Exploit Title: Wordpress Plugin IMDb Profile Widget - Local File Inclusion

WordPress Plugin Memphis Document Library 3.1.5 – Arbitrary File Download

# Exploit Title: Arbitrary file download in Memphis Document Library 3.1.5

WordPress Plugin Dharma Booking 2.38.3 – Remote File Inclusion

# Exploit Title: Wordpress Dharma booking File Inclusion

WordPress Plugin Brandfolder 3.0 – Local/Remote File Inclusion

# Exploit Title: Wordpress brandfolder plugin / RFI & LFI

Joomla! Component Easy Youtube Gallery 1.0.2 – SQL Injection

######################

WordPress Plugin HB Audio Gallery Lite 1.0.0 – Arbitrary File Download

# Exploit Title: Wordpress Plugin HB Audio Gallery Lite - Arbitrary File Download

ProjectSend r582 – Multiple Cross-Site Scripting Vulnerabilities

Description

iTop 2.2.1 – Cross-Site Request Forgery

Advisory ID: HTB23293

Dating Pro Genie 2015.7 – Cross-Site Request Forgery

Advisory ID: HTB23294

WordPress Plugin Image Export 1.1.0 – Arbitrary File Disclosure

# Exploit Title: Wordpress image-export LFD

XOOPS 2.5.7.2 – Directory Traversal Bypass

[+] Credits: John Page aka hyp3rlinx

Xoops 2.5.7.2 – Cross-Site Request Forgery (Arbitrary User Deletions)