php

Disc ORGanizer (DORG) – Multiple Vulnerabilities

Exploit Title: DORG - Disc Organization System SQL Injection And Cross Site Scripting

WordPress Plugin Abtest – Local File Inclusion

# Exploit Title: Wordpress Plugin Abtest - Local File Inclusion

WordPress Plugin Import CSV 1.0 – Directory Traversal

# Exploit Title: Wordpress Import CSV | Directory Traversal

WordPress Plugin eBook Download 1.1 – Directory Traversal

# Exploit Title: Wordpress eBook Download 1.1 | Directory Traversal

PivotX 2.3.11 – Directory Traversal

Security Advisory - Curesec Research Team

ZenPhoto 1.4.11 – Remote File Inclusion

Security Advisory - Curesec Research Team

Monstra CMS 3.0.3 – Multiple Vulnerabilities

Exploit Title: Monstra CMS 3.0.3 - Privilege Escalation / Remote Password Change

Kaltura Community Edition < 11.1.0-2 - Multiple Vulnerabilities

( , ) (,

TeamPass 2.1.24 – Multiple Vulnerabilities

Affected Product: TeamPass

WordPress Plugin Site Import 1.0.1 – Local/Remote File Inclusion

# Exploit Title: Wordpress Site Import 1.0.1 | Local and Remote file inclusion

PHP Utility Belt – Remote Code Execution (Metasploit)

##

WordPress Plugin DZS Videogallery < 8.60 - Multiple Vulnerabilities

* Exploit Title: Wordpress DZS Videogallery Plugin - Multiple Vulnerabilities

WordPress Theme Beauty & Clean 1.0.8 – Arbitrary File Upload

Description

WordPress Plugin WP Advanced Comment 0.10 – Persistent Cross-Site Scripting

1. Introduction

WordPress Plugin Best Web Soft Captcha 4.1.5 – Multiple Vulnerabilities

PoC

WordPress Theme SiteMile Project 2.0.9.5 – Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

Bluethrust Clan Scripts v4 R17 – Multiple Vulnerabilities

Cerberus Helpdesk (Cerb5) 5 < 6.7 - Password Hash Disclosure

#!/bin/bash

ATutor LMS – ‘/install_modules.php’ Cross-Site Request Forgery / Remote Code Execution

ATutor LMS

PHPLib < 7.4 - SQL Injection

PHPLib SQL Injection

WordPress Plugin Bulk Delete 5.5.3 – Privilege Escalation

'''

Gallery 2 < 2.0.2 - Multiple Vulnerabilities

Gallery 2 Multiple Vulnerabilities

ATutor 2.2.1 – SQL Injection / Remote Code Execution (Metasploit)

##

WordPress Plugin CP Polls 1.0.8 – Multiple Vulnerabilities

# Exploit Title: WordPress CP Polls 1.0.8 - CSRF - Update poll settings & Persistent XSS

WordPress Plugin More Fields 2.1 – Cross-Site Request Forgery

# Exploit Title: Wordpress More Fields Plugin 2.1 Cross-Site Request Forgery

phpRPC < 0.7 - Remote Code Execution

phpRPC Remote Code Execution

Joomla! Component com_poweradmin 2.3.0 – Multiple Vulnerabilities

---------------------------------------------------------

Centreon 2.5.3 – Remote Command Execution

Unauthenticated Remote Command Execution in Centreon Web Interface

WordPress Plugin Ocim MP3 – SQL Injection

========

Mambo < 4.5.3h - Multiple Vulnerabilities

Mambo Multiple Vulnerabilities

WordPress Plugin Extra User Details 0.4.2 – Privilege Escalation

"""

PEAR LiveUser < 0.16.8 - Arbitrary File Access

PEAR LiveUser Arbitrary File Access

SOLIDserver < 5.0.4 - Local File Inclusion

Title: SOLIDserver

Geeklog < 1.4.0 - Multiple Vulnerabilities

Geeklog Multiple Vulnerabilities

Chamilo LMS – Persistent Cross-Site Scripting

Document Title:

Chamilo LMS IDOR – ‘messageId’ Delete POST Injection

Document Title:

ADOdb < 4.71 - Cross Site Scripting

ADOdb Cross Site Scripting

DirectAdmin 1.491 – Cross-Site Request Forgery

=============================================================================

Vesta Control Panel 0.9.8-15 – Persistent Cross-Site Scripting

# Exploit Title :Vesta Control Panel

Redaxo 5.0.0 – Multiple Vulnerabilities

=== LSE Leading Security Experts GmbH - Security Advisory 2016-01-18 ===

OCS Inventory NG 2.2 – SQL Injection

# Exploit Title: OCS Inventory NG

phpMyBackupPro 2.5 – Remote Command Execution / Cross-Site Request Forgery

[+] Credits: hyp3rlinx

WordPress Plugin ALO EasyMail NewsLetter 2.6.01 – Cross-Site Request Forgery

# Exploit Title: Wordpress ALO EasyMail Newsletter plugin cross-site request forgery vulnerability

Tiny Tiny RSS – Blind SQL Injection

# Exploit Title: Tiny Tiny RSS Blind SQL Injection

Yeager CMS 1.2.1 – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20160210-0 >

WordPress Plugin Booking Calendar Contact Form 1.0.23 – Multiple Vulnerabilities

# Exploit Title: Wordpress booking calendar contact form '',

WordPress Plugin WP User Frontend < 2.3.11 - Unrestricted Arbitrary File Upload

'''

WordPress Plugin WooCommerce Store Toolkit 1.5.5 – Privilege Escalation

'''

WordPress Plugin User Meta Manager 3.4.6 – Information Disclosure

## Description

Symphony CMS 2.6.3 – Multiple SQL Injections

================================================================