Ovidentia absences Module 2.64 – Remote File Inclusion
# Title: Ovidentia Module absences 2.64 Remote File Include Vulnerability
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Bitrix bitrix.xscan Module 1.0.3 – Directory Traversal
Advisory ID: HTB23278
Bitrix bitrix.mpbuilder Module 1.0.10 – Local File Inclusion
Advisory ID: HTB23281
WordPress Plugin Admin Management Xtended 2.4.0 – Privilege escalation
# Exploit Title: Admin Management Xtended 2.4.0 Privilege escalation
ECommerceMajor – ‘productdtl.php?prodid’ SQL Injection
#Exploit Title : ECommerceMajor SQL Injection Vulnerability
GoAutoDial CE 3.3 – Multiple SQL Injections / Command Injection
# Title : GoAutoDial CE 3.3 Multiple SQL injections, Command Injection
Gökhan Balbal Script 2.0 – Cross-Site Request Forgery
.__ _____ _______
iy10 Dizin Scripti – Multiple Vulnerabilities
.__ _____ _______
WordPress Plugin WP Easy Poll 1.1.3 – Cross-Site Scripting / Cross-Site Request Forgery
Exploit Title: WP Easy Poll 1.1.3 XSS and CSRF
dotCMS 3.2.4 – Multiple Vulnerabilities
dotCMS 3.2.4 Multiple Vulnerabilities
WordPress Plugin Polls Widget 1.0.7 – SQL Injection
Exploit Title : wordpress poll widget version 1.0.7 SQL Injection vulnerability
PHP Utility Belt – Remote Code Execution
Exploit Title : PHP utility belt Remote Code Execution vulnerability
SIMOGEO FileManager 2.3.0 – Multiple Vulnerabilities
# Exploit Title: SIMOGEO FileManager 2.3.0 - Path Traversal Vulnerability
WordPress Plugin TheCartPress 1.4.7 – Multiple Vulnerabilities
###########################################
WordPress Plugin Sell Download 1.0.16 – Local File Disclosure
###########################################
WordPress Plugin Advanced uploader 2.10 – Multiple Vulnerabilities
###########################################
WordPress Plugin Gwolle Guestbook 1.5.3 – Remote File Inclusion
Advisory ID: HTB23275
ZenPhoto 1.4.10 – Local File Inclusion
[+] Credits: hyp3rlinx
Invision Power Board (IP.Board) 4.1.4.x – Persistent Cross-Site Scripting
# Exploit Title: IP.Board Persistent XSS Vulnerability
HumHub 0.11.2/0.20.0-beta.2 – SQL Injection
=== LSE Leading Security Experts GmbH - Security Advisory 2015-10-14 ===
MyCustomers CMS 1.3.873 – SQL Injection
######################
WordPress Plugin WP-Client 3.8.7 – Persistent Cross-Site Scripting
#####################################################################################
vBulletin 5.x – Remote Code Execution
#[+] Title: Vbulletin 5.x - Remote Code Execution Exploit
Horde Groupware 5.2.10 – Cross-Site Request Forgery
Advisory ID: HTB23272
XCart 5.2.6 – Code Execution
#!/usr/local/bin/python
ClipperCMS 1.3.0 – Code Execution
#!/usr/local/bin/python
ClipperCMS 1.3.0 – Multiple SQL Injections
Security Advisory - Curesec Research Team
AlegroCart 1.2.8 – Local/Remote File Inclusion
Security Advisory - Curesec Research Team
AlegroCart 1.2.8 – Multiple SQL Injections
Security Advisory - Curesec Research Team
CF Image Host 1.65 – PHP Command Injection
[+] Credits: hyp3rlinx
b374k 3.2.3/2.8 (Web Shell) – Cross-Site Request Forgery / Command Injection
[+] Credits: hyp3rlinx
R-Scripts Vacation Rental Script 7R – Multiple Vulnerabilities
R-Scripts VRS 7R Multiple Stored XSS And CSRF Vulnerabilities
WordPress Plugin WP Fastest Cache 0.8.4.8 – Blind SQL Injection
# Exploit Title: WP Fastest Cache 0.8.4.8 Blind SQL Injection
YesWiki 0.2 – ‘template’ Directory Traversal
# Exploit Title: YESWIKI 0.2 - Path Traversal (template param)
TestLink 1.9.14 – Cross-Site Request Forgery
Information
Google AdWords 6.2.0 API client libraries – XML eXternal Entity Injection
# Date: 06.11.2015
eBay Magento CE 1.9.2.1 – Unrestricted Cron Script (Code Execution / Denial of Service)
# Exploit Title: eBay Magento CE
Google AdWords API PHP client library 6.2.0 – Arbitrary PHP Code Execution
# Date: 06.11.2015
WordPress Plugin My Calendar 2.4.10 – Multiple Vulnerabilities
Exploit TItle: My Calendar 2.4.10 CSRF and XSS
vBulletin 5.1.x – Remote Code Execution
# Exploit Title: Vbulletin 5.1.X unserialize 0day preauth RCE exploit