Joomla! 3.4.4 < 3.6.4 - Account Creation / Privilege Escalation
Source: https://github.com/XiphosResearch/exploits/tree/master/Joomraa
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Boonex Dolphin 7.3.2 – Authentication Bypass
# Exploit Title : Boonex Dolphin all versoin array
Industrial Secure Routers EDR-810 / EDR-G902 / EDR-G903 – Insecure Configuration Management
Title: Industrial Secure Routers - Insecure Configuration Management
EC-CUBE 2.12.6 – Server-Side Request Forgery
# Exploit Title: EC-CUBE 2.12.6 Server-Side Request Forgery
Orange Inventel LiveBox 5.08.3-sp – Cross-Site Request Forgery
# Exploit Title: Orange Inventel LiveBox CSRF
Zenbership 107 – Multiple Vulnerabilities
1. ADVISORY INFORMATION
FreePBX 13 – Remote Command Execution / Privilege Escalation
#!/usr/bin/env python
Just Dial Clone Script – ‘srch’ SQL Injection
# Exploit Title: SQL Injection in Just Dial Clone Script
SPIP 3.1.2 – Cross-Site Request Forgery
## SPIP 3.1.2 Exec Code Cross-Site Request Forgery (CVE-2016-7980)
SPIP 3.1.1/3.1.2 – File Enumeration / Path Traversal
## SPIP 3.1.1/3.1.2 File Enumeration / Path Traversal (CVE-2016-7982)
SPIP 3.1.2 Template Compiler/Composer – PHP Code Execution
## SPIP 3.1.2 Template Compiler/Composer PHP Code Execution (CVE-2016-7998)
Event Calendar PHP 1.5 – SQL Injection
=====================================================
Classifieds Rental Script – SQL Injection
# Exploit Title: SQL Injection in Classifieds Rental Script
Oracle BI Publisher 11.1.1.6.0/11.1.1.7.0/11.1.1.9.0/12.2.1.0.0 – XML External Entity Injection
# Exploit Title: Oracle BI Publisher (formerly XML Publisher) - XML External Entity Injection w/o authentication
Intel(R) PROSet/Wireless WiFi Software 15.01.1000.0927 – Unquoted Service Path Privilege Escalation
# Exploit Title: Intel(R) PROSet/Wireless WiFi Software - Unquoted Service Path Privilege Escalation
XhP CMS 0.5.1 – Cross-Site Request Forgery / Persistent Cross-Site Scripting
# Exploit Title: XhP CMS 0.5.1 - Cross-Site Request Forgery to Persistent Cross-Site Scripting
CNDSOFT 2.3 – Cross-Site Request Forgery / Arbitrary File Upload
# Exploit Title: CNDSOFT 2.3 - Arbitrary File Upload with CSRF (shell.php)
Cgiemail 1.6 – Source Code Disclosure
#!/usr/bin/env perl
ManageEngine ServiceDesk Plus 9.2 Build 9207 – Unauthorized Information Disclosure
Title: ManageEngine ServiceDesk Plus Low Privileged User View All Tickets
Pluck CMS 4.7.3 – Cross-Site Request Forgery (Add Page)
# Exploit Title: Pluck CMS 4.7.3 - Add-Page Cross-Site Request Forgery
PHP Business Directory – Multiple Vulnerabilities
# Exploit Title: PHP Business Directory - Multiple Vulnerabilities
Subrion CMS 4.0.5 – Cross-Site Request Forgery Bypass / Persistent Cross-Site Scripting
# Exploit Title: Subrion CMS 4.0.5 - CSRF Bypass to Persistent XSS and Add-Admin
PHP NEWS 1.3.0 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: PHP NEWS 1.3.0 - Cross-Site Request Forgery (Add Admin)
PHP Image Database – Multiple Vulnerabilities
# Exploit Title: PHP Image Database - Multiple Vulnerabilities
PHP Telephone Directory – Multiple Vulnerabilities
# Exploit Title: PHP Telephone Directory - Multiple Vulnerabilities
School Full CBT 0.1 – SQL Injection
# Exploit Title.............. School Full CBT SQL Injection
Simple Shopping Cart Application 0.1 – SQL Injection
# Exploit Title.............. Simple Shopping Cart Application SQL Injection
Health Record System 0.1 – Authentication Bypass
# Exploit Title.............. Health Record System Auth Bypass
Fashion Shopping Cart 0.1 – SQL Injection
# Exploit Title.............. Fashion Shopping Cart SQL Injection
Learning Management System 0.1 – Authentication Bypass
# Exploit Title.............. Learning Management System Auth Bypass
Simple Dynamic Web 0.1 – SQL Injection
# Exploit Title.............. Simple Dynamic Web SQL Injection
Web Based Alumni Tracking System 0.1 – SQL Injection
# Exploit Title.............. Web Based Alumni Tracking System Multiple Vulnerability
Student Information System (SIS) 0.1 – Authentication Bypass
# Exploit Title............... Student Information System (SIS) Auth Bypass
YouTube Automated CMS 1.0.7 – Cross-Site Request Forgery / Persistent Cross-Site Scripting
# Exploit Title: YouTube Automated CMS 1.0.1 / 1.0.7 - CSRF to Persistent XSS
Simple Forum PHP 2.4 – SQL Injection
=====================================================
JonhCMS 4.5.1 – SQL Injection
# Exploit Title :----------------- : JonhCMS 4.5.1 - (go.php?id) - SQL Injection
RSS News AutoPilot Script 1.0.1/3.1.0 – Admin Panel Authentication Bypass
# Exploit Title: RSS News AutoPilot Script - Admin Panel Authentication Bypass
Colorful Blog – Cross-Site Request Forgery (Change Admin Password)
# Exploit Title :----------- : Colorful Blog - Cross-Site Request Forgery (Change Admin Pass)
Colorful Blog – Persistent Cross-Site Scripting
# Exploit Title : ----------- : Colorful Blog - Stored Cross Site Scripting
Thatware 0.4.6 – SQL Injection
# Exploit Title :----------------- : Thatware 0.4.6 - (friend.php) - SQL Injection
Simple Blog PHP 2.0 – SQL Injection
=====================================================
Simple Blog PHP 2.0 – Multiple Vulnerabilities
=====================================================
ApPHP MicroCMS 3.9.5 – Cross-Site Request Forgery (Add Admin)
# Exploit Title :----------------- : ApPHP MicroCMS 3.9.5 - Cross-Site Request Forgery (Add Admin (Main))
ApPHP MicroCMS 3.9.5 – Persistent Cross-Site Scripting
# Exploit Title :----------------- : ApPHP MicroCMS 3.9.5 - Stored Cross Site Scripting
OpenCimetiere 3.0.0-a5 – Blind SQL Injection
# Exploit Title: OpenCimetiere v3.0.0-a5 | Blind SQL Injection
NetBilletterie 2.8 – Multiple Vulnerabilities
# Exploit Title: NetBilletterie 2.8 | Multiple Vulnerabilities
Categorizator 0.3.1 – SQL Injection
# Exploit Title: Categorizator 0.3.1 | SQL Injection
ApPHP MicroBlog 1.0.2 – Cross-Site Request Forgery (Add New Author)
# Exploit Title : ApPHP MicroBlog 1.0.2 - Cross-Site Request Forgery (Add New Author)
ApPHP MicroBlog 1.0.2 – Persistent Cross-Site Scripting
# Exploit Title : ApPHP MicroBlog 1.0.2 - Stored Cross