ATutor 2.2 – Multiple Cross-Site Scripting Vulnerabilities
Security Advisory - Curesec Research Team
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
OpenDocMan 1.3.4 – Cross-Site Request Forgery
Security Advisory - Curesec Research Team
UliCMS v9.8.1 – SQL Injection
=============================================
TimeClock Software 0.995 – (Authenticated ) Multiple SQL Injections
#############################
iScripts EasyCreate 3.0 – Remote Code Execution
#!C:/Python27/python.exe -u
iScripts EasyCreate 3.0 – Multiple Vulnerabilities
iScripts EasyCreate 3.0 Multiple Vulnerabilities
ProjectSend r582 – Multiple Vulnerabilities
Advisory ID: SGMA-16001
WordPress Plugin Simple Add Pages or Posts 1.6 – Cross-Site Request Forgery
########################################################################
Ramui Web Hosting Directory Script 4.0 – Remote File Inclusion
# Title: Ramui web hosting directory script 4.0 Remote File Include Vulnerability
Ramui Forum Script 9.0 – SQL Injection
# Title: Ramui forum script 9.0 SQL Injection Exploit
WordPress Plugin Booking Calendar Contact Form 1.1.24 – addslashes SQL Injection
# Exploit Title: WordPress appointment-booking-calendar query("update ".CPABC_TDEAPP_CONFIG." set specialDates='".$_...
WordPress Plugin Booking Calendar Contact Form 1.1.24 – Multiple Vulnerabilities
# Exploit Title: WordPress appointment-booking-calendar
BK Mobile jQuery CMS 2.4 – Multiple Vulnerabilities
#Product : BK Mobile CMS
Gongwalker API Manager 1.1 – Blind SQL Injection
gongwalker API Manager v1.1 - Blind SQL Injection
WordPress Plugin Booking Calendar Contact Form 1.1.23 – Shortcode SQL Injection
# Exploit Title: WordPress appointment-booking-calendar
WordPress Plugin Booking Calendar Contact Form 1.1.23 – SQL Injection
# Exploit Title: WordPress appointment-booking-calendar get_results( "SELECT * FROM ".CPABC_TDEAPP_CALENDAR_DATA_TABL...
SeaWell Networks Spectrum – Multiple Vulnerabilities
# Exploit Title: [SeaWell Networks Spectrum - Multiple Vulnerabilities]
Advanced Electron Forum 1.0.9 – Remote File Inclusion / Cross-Site Request Forgery
[+] Credits: hyp3rlinx
Advanced Electron Forum 1.0.9 – Persistent Cross-Site Scripting
[+] Credits: hyp3rlinx
Advanced Electron Forum 1.0.9 – Cross-Site Request Forgery
[+] Credits: hyp3rlinx
mcart.xls Bitrix Module 6.5.2 – SQL Injection
Advisory ID: HTB23279
Roundcube Webmail 1.1.3 – Directory Traversal
Advisory ID: HTB23283
phpDolphin 2.0.5 – Multiple Vulnerabilities
# Exploit Title: phpDolphin http://target.com/index.php?a=search&q=teste&filter=m">XSS
SevOne NMS 5.3.6.0 – Remote Command Execution
#!/usr/bin/env python
WordPress Plugin WP Symposium Pro Social Network Plugin 15.12 – Multiple Vulnerabilities
#Product : WP Symposium Pro Social Network plugin
PHPIPAM 1.1.010 – Multiple Vulnerabilities
######################################################################
Simple PHP Polling System – Multiple Vulnerabilities
Exploit Title : Multiple Vulnerabilities in Simple PHP Polling System.
Online Airline Booking System – Multiple Vulnerabilities
Exploit Title : Online Airline Booking System multiple vulnerabilities
Open Audit – SQL Injection
#Exploit Title : Open Audit SQL Injection Vulnerability
WordPress Plugin Simple Ads Manager 2.9.4.116 – SQL Injection
# Exploit Title: Simple Ads Manager 2.9.4.116 SQL Injection
Rips Scanner 0.5 – ‘code.php’ Local File Inclusion
================================================================================
Beezfud – Remote Code Execution
================================================================================
PhpSocial 2.0.0304_20222226 – Cross-Site Request Forgery
Security Advisory - Curesec Research Team
Arastta 1.1.5 – SQL Injection
Security Advisory - Curesec Research Team
Grawlix 1.0.3 – Cross-Site Request Forgery
Security Advisory - Curesec Research Team
Bigware Shop 2.3.01 – Multiple Local File Inclusions
# Title: Bigware Shop 2.3.01 Multiple Local File Inclusion Vulnerabilities
Ovidentia Widgets 1.0.61 – Remote Command Execution
# Title: Ovidentia Widgets 1.0.61 Remote Command Execution Exploit
Ovidentia online Module 2.8 – ‘GLOBALS[babAddonPhpPath]’ Remote File Inclusion
# Title: Ovidentia Module online 2.8 GLOBALS[babAddonPhpPath] Remote File Include Vulnerability
pfSense 2.2.5 – Directory Traversal
# Title : PFSense
Ovidentia maillist Module 4.0 – Remote File Inclusion
Not for kiddies!
Joomla! 1.5 < 3.4.6 - Object Injection 'x-forwarded-for' Header Remote Code Execution
#!/usr/bin/env python
Zen Cart 1.5.4 – Local File Inclusion
Advisory ID: HTB23282
Ovidentia NewsLetter Module 2.2 – ‘admin.php’ Remote File Inclusion
# Title: Ovidentia Module newsletter 2.2 (admin.php) Remote File Inclusion Exploit
ArticleSetup Article Script 1.00 – SQL Injection
########################################################################################
Ovidentia bulletindoc Module 2.9 – Multiple Remote File Inclusions
# Title: Ovidentia Module bulletindoc 2.9 Multiple Remote File Inclusion Vulnerabilities
Tequila File Hosting 1.5 – Multiple Vulnerabilities
================================================================================