WordPress Plugin Recent Backups 0.7 – Arbitrary File Download
Title: Remote file download vulnerability in recent-backups v0.7 wordpress plugin
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WordPress Plugin WPTF Image Gallery 1.03 – Arbitrary File Download
Title: Remote file download vulnerability in wptf-image-gallery v1.03
WDS CMS – SQL Injection
# ( In The Name Of ALLAH )
WordPress Plugin Video Gallery 2.7 – SQL Injection
# Exploit Title: WordPress Video Gallery 2.7 SQL Injection
WordPress Plugin Job Manager 0.7.22 – Persistent Cross-Site Scripting
Job Manager Persistent XSS
Microweber 1.0.3 – Arbitrary File Upload / Filter Bypass / PHP Remote Code Execution
Microweber v1.0.3 File Upload Filter Bypass Remote PHP Code Execution
Microweber 1.0.3 – Persistent Cross-Site Scripting / Cross-Site Request Forgery (Add Admin)
Microweber v1.0.3 Stored XSS And CSRF Add Admin Exploit
OSSEC WUI 0.8 – Denial of Service
###########################################################
PHP News Script 4.0.0 – SQL Injection
# Exploit Title: PHP News Script 4.0.0 Sql Injection
Froxlor Server Management Panel 0.9.33.1 – MySQL Login Information Disclosure
#------------------------------------------------------------------------------------------#
Tendoo CMS 1.3 – Cross-Site Scripting
# Exploit Title: Tendoo CMS Stored And Reflected Xss Vulnerability
JoomShopping – Blind SQL Injection
# Exploit Title: [JoomShopping Blind Sql injection]
2Moons – Multiple Vulnerabilities
# Title: 2Moons - Multiple Vulnerabilities
phpFileManager 0.9.8 – Cross-Site Request Forgery
# Exploit Title: CSRF Remote Backdoor Shell
phpFileManager 0.9.8 – Remote Command Execution
# Exploit Title: Remote Command Execution
Xceedium Xsuite – Multiple Vulnerabilities
See also: http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt
WordPress Plugin Count Per Day 3.4 – SQL Injection
Advisory ID: HTB23267
WordPress Plugin Unite Gallery Lite 1.4.6 – Multiple Vulnerabilities
# Title: Cross-Site Request Forgery & SQL Injection Vulnerabilities in Unite Gallery Lite Wordpress Plugin v1.4.6
XPCOM – Race Condition
XPCOM Race Condition
phpVibe < 4.20 - Persistent Cross-Site Scripting
# phpVibe < 4.20 Stored XSS
WordPress Plugin Download Manager Free 2.7.94 & Pro 4 – (Authenticated) Persistent Cross-Site Scripting
# WordPress Download Manager Free 2.7.94 & Pro 4 Authenticated Stored XSS
Joomla! Component com_docman – Multiple Vulnerabilities
# Joomla docman Component 'com_docman' Full Path Disclosure(FPD) & Local File Disclosure/Include(LFD/LFI)
SquirrelMail < 1.4.5-RC1 - Arbitrary Variable Overwrite
SquirrelMail Arbitrary Variable Overwrite
sysPass 1.0.9 – SQL Injection
-----BEGIN PGP SIGNED MESSAGE-----
SO Planning 1.32 – Multiple Vulnerabilities
SOPlanning - Simple Online Planning Tool multiple vulnerabilities
WordPress Plugin CP Contact Form with Paypal 1.1.5 – Multiple Vulnerabilities
# Title: Cross-Site Request Forgery, Cross-Site Scripting and SQL Injection
ZenPhoto 1.4.8 – Multiple Vulnerabilities
Vulnerability: SQL Injection, Reflected XSS, Path Traversal
WordPress Plugin Swim Team 1.44.10777 – Arbitrary File Download
Title: Remote file download vulnerability in Wordpress Plugin wp-swimteam v1.44.10777
ArticleFR 3.0.6 – Multiple Vulnerabilities
ArticleFR 3.0.6 CSRF Add Admin Exploit
phpVibe – Arbitrary File Disclosure
## In The Name Of ALLAH ##
Arab Portal 3 – SQL Injection
## In The Name Of ALLAH ##
FreiChat 9.6 – SQL Injection
# Exploit Title: FreiChat 9.6 SQL Injection
phpSQLiteCMS – Multiple Vulnerabilities
# Exploit Title: CSRF, Unrestricted File Upload, Privilege escalation & XSS
WordPress Plugin CP Multi View Event Calendar 1.1.7 – SQL Injection
# Exploit Title: WordPress cp-multi-view-calendar.1.1.7 [Unauthenticated SQL injection vulnerabilities]
WordPress Plugin CP Image Store with Slideshow 1.0.5 – Arbitrary File Download
# Exploit Title: WordPress CP Image Store with Slideshow 1.0.5 [Arbitrary file download vulnerability]
WordPress Plugin Easy2Map 1.24 – SQL Injection
Title: SQL Injection in easy2map wordpress plugin v1.24
WordPress Plugin WP E-Commerce Shop Styling 2.5 – Arbitrary File Download
Title: Remote file download vulnerability in wordpress plugin wp-ecommerce-shop-styling v2.5
Centreon 2.5.4 – Multiple Vulnerabilities
Merethis Centreon - Unauthenticated blind SQLi and Authenticated Remote Command Execution
phpLiteAdmin 1.1 – Multiple Vulnerabilities
# Exploit Title: CSRF & XSS
WordPress Plugin ACF Frontend Display 2.0.5 – Arbitrary File Upload
+---------------------------------------------------------------------------+
WordPress Plugin S3Bubble Cloud Video With Adverts & Analytics 0.7 – Arbitrary File Download
# Exploit Title: Wordpress S3Bubble Cloud Video With Adverts & Analytics - Arbitrary File Download
CuteNews 2.0.3 – Arbitrary File Upload
CuteNews 2.0.3 Remote File Upload Vulnerability
PHPXMLRPC < 1.1 - Remote Code Execution
PHPXMLRPC Remote Code Execution
WordPress Plugin Albo Pretorio Online 3.2 – Multiple Vulnerabilities
# Exploit Title: Albo Pretorio Online 3.2 Multiple Vulnerabilities
PEAR XML_RPC < 1.3.0 - Remote Code Execution
PEAR XML_RPC Remote Code Execution
Fiyo CMS 2.0_1.9.1 – SQL Injection
# Exploit Title: Fiyo CMS multiple SQL vulnerability
Novius 5.0.1 – Multiple Vulnerabilities
[+] Credits: John Page ( hyp3rlinx )