Mantis Bug Tracker 1.3.10/2.3.0 – Cross-Site Request Forgery
[+] Credits: John Page a.k.a hyp3rlinx
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
KMCIS CaseAware – Cross-Site Scripting
# Exploit Title: CaseAware Cross Site Scripting Vulnerability
Tecnovision DLX Spot – Arbitrary File Upload
# Exploit Title: DlxSpot - Player4 LED video wall - Arbitrary File Upload
Tecnovision DLX Spot – Authentication Bypass
# Exploit Title: DlxSpot - Player4 LED video wall - Admin Interface SQL
D-Link DIR-600M Wireless N 150 – Authentication Bypass
# Exploit Title: D-Link DIR-600M Wireless N 150 Login Page Bypass
PlaySMS 1.4 – Remote Code Execution
Exploit Title: PlaySMS 1.4 Remote Code Execution (to Poisoning admin log)
ManageEngine ServiceDesk Plus 9.0 – Authentication Bypass
Title: ManageEngine ServiceDesk Plus Application Compromise
SAP Business One for Android 1.2.3 – XML External Entity Injection
Exploit Title: Blind XXE (XML External Entity)in SAP
Oracle PeopleSoft – Server-Side Request Forgery
Application: Oracle PeopleSoft
Joomla! 3.7.0 – ‘com_fields’ SQL Injection
# Exploit Title: Joomla 3.7.0 - Sql Injection
INFOR EAM 11.0 Build 201410 – Persistent Cross-Site Scripting via Comment Fields
Stored XSS in INFOR EAM V11.0 Build 201410 via comment fields
INFOR EAM 11.0 Build 201410 – ‘filtervalue’ SQL Injection
SQL injection in INFOR EAM V11.0 Build 201410 search fields (web/base/..) via filtervalue parameter
Mailcow 0.14 – Cross-Site Request Forgery
[+] Credits: John Page a.k.a hyp3rlinx
PlaySMS 1.4 – ‘/sendfromfile.php’ Remote Code Execution / Unrestricted File Upload
# Exploit Title: PlaySMS 1.4 Code Execution using $filename and Unrestricted File Upload in sendfromfile.php
Cisco DPC3928 Router – Arbitrary File Disclosure
## Vulnerability Summary
CMS Made Simple 2.1.6 – Multiple Vulnerabilities
# Title: CMSMS 2.1.6 Multiple Vulnerabilities
Gongwalker API Manager 1.1 – Cross-Site Request Forgery
# Exploit Title: gongwalker API Manager v1.1 - CSRF(Add/Delete/Edit API)
BanManager WebUI 1.5.8 – PHP Code Injection
BanManager WebUI 1.5.8 - PHP Code Injection & Stored XSS
QNAP PhotoStation 5.2.4 / MusicStation 4.8.4 – Authentication Bypass
# Exploit QNAP PhotoStation 5.2.4 and MusicStation 4.8.4 Authentication Bypass
Personify360 7.5.2/7.6.1 – Improper Database Schema Access Restrictions
# Exploit Title: Discover all tables and columns in database when creating new customer role
Personify360 7.5.2/7.6.1 – Improper Access Restrictions
# Exploit Title: Access and read and create vendor / API credentials in plaintext
I, Librarian 4.6/4.7 – Command Injection / Server Side Request Forgery / Directory Enumeration / Cross-Site Scripting
SEC Consult Vulnerability Lab Security Advisory < 20170509-0 >
Sitecore CMS 8.2 – Cross-Site Scripting / Arbitrary File Disclosure
Exploit title: Sitecore CMS v8.2 multiple vulnerabilities
ViMbAdmin 3.0.15 – Multiple Cross-Site Request Forgery Vulnerabilities
# [CVE-2017-6086] Multiple CSRF vulnerabilities in ViMbAdmin version 3.0.15
WordPress Plugin WebDorado Gallery 1.3.29 – SQL Injection
Source: http://www.defensecode.com/advisories/DC-2017-02-011_WordPress_WebDorado_Gallery_Plugin_Advisory.pdf
WordPress Core < 4.7.4 - Unauthorized Password Reset
=============================================
WordPress Core 4.6 – Remote Code Execution
#!/bin/bash
Serviio PRO 1.8 DLNA Media Streaming Server – REST API Arbitrary Code Execution
#!/usr/bin/env python
Serviio PRO 1.8 DLNA Media Streaming Server – REST API Arbitrary Password Change
#!/usr/bin/env python
Serviio PRO 1.8 DLNA Media Streaming Server – REST API Information Disclosure
#!/usr/bin/env python
Zyxel P-660HW-61 Firmware < 3.40(PE.11)C0 Router - Local File Inclusion
# Exploit Title: Zyxel P-660HW-61 < 3.40(PE.11)C0 - Local File Inclusion
Tuleap Project Wiki 8.3 < 9.6.99.86 - Command Injection
# Tuleap - Command Injection in Project Wiki
Emby MediaServer 3.2.5 – Directory Traversal
Emby MediaServer 3.2.5 Directory Traversal File Disclosure Vulnerability
Emby MediaServer 3.2.5 – Password Reset
Emby MediaServer 3.2.5 Password Reset Vulnerability
Emby MediaServer 3.2.5 – SQL Injection
Emby MediaServer 3.2.5 Boolean-based Blind SQL Injection Vulnerability
Admidio 3.2.8 – Cross-Site Request Forgery
# Exploit Title :Admidio 3.2.8 (CSRF to Delete Users)
Easy File Uploader – Arbitrary File Upload
# Exploit Title: Easy File Uploader - Arbitrary File Upload
Simple File Uploader – Arbitrary File Download
# Exploit Title: Simple File Uploader - Arbitrary File Download
TYPO3 Extension News – SQL Injection
# Exploit Title: TYPO3 News Module SQL Injection
Revive Ad Server 4.0.1 – Cross-Site Scripting / Cross-Site Request Forgery
---------------------------------------------------------------
October CMS 1.0.412 – Multiple Vulnerabilities
October CMS v1.0.412 several vulnerabilities
HPE OpenCall Media Platform (OCMP) 4.3.2 – Cross-Site Scripting / Remote File Inclusion
Source: https://blogs.securiteam.com/index.php/archives/3087
Oracle E-Business Suite 12.2.3 – ‘IESFOOTPRINT’ SQL Injection
Application: Oracle E-Business Suite
Oracle PeopleSoft – ‘PeopleSoftServiceListeningConnector’ XML External Entity via DOCTYPE
Application: Oracle PeopleSoft
WordPress Plugin Wow Forms 2.1 – SQL Injection
# Exploit Title: Wow Forms v2.1 WordPress Plugin SQL Injection
WordPress Plugin Wow Viral Signups 2.1 – SQL Injection
# Exploit Title: Wow Viral Signups v2.1 WordPress Plugin SQL Injection
WordPress Plugin Car Rental System 2.5 – SQL Injection
# Exploit Title: Car Rental System v2.5