Iris ID IrisAccess ICU 7000-2 – Multiple Vulnerabilities
Iris ID IrisAccess ICU 7000-2 Multiple XSS and CSRF Vulnerabilities
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
PHP File Vault 0.9 – Directory Traversal
PHP File Vault version 0.9 , remote directory traversal and read file vulnerabilty
Micro Focus Filr 2 2.0.0.421/1.2 1.2.0.846 – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20160725-0 >
Compal CH7465LG-LC Modem/Router CH7465LG-NCIP-4.50.18.13-NOSH – Multiple Vulnerabilities
Compal CH7465LG-LC modem/router multiple vulnerabilities
Hitron CGNV4 Modem/Router 4.3.9.9-SIP-UPC – Multiple Vulnerabilities
Hitron CGNV4 modem/router multiple vulnerabilities
PHP gettext 1.0.12 – ‘gettext.php’ Code Execution
[CVE-2016-6175] gettext.php
CodoForum 3.2.1 – SQL Injection
1. Advisory Information
TeamPass Passwords Management System 2.1.26 – Arbitrary File Download
1. ADVISORY INFORMATION
Wowza Streaming Engine 4.5.0 – Multiple Cross-Site Scripting Vulnerabilities
Wowza Streaming Engine 4.5.0 Multiple Cross-Site Scripting Vulnerabilities
newsp.eu PHP Calendar Script 1.0 – User Credentials Disclosure
# Exploit Title: PHP calendar script Password Download File
NewsP Free News Script 1.4.7 – User Credentials Disclosure
# Exploit Title: Free News Script User Password Download File
Clear Voyager Hotspot IMW-C910W – Arbitrary File Disclosure
- # Exploit Title: clear voyager hotspot IMW-C910W - file disclosure
Joomla! Component Guru Pro – ‘Itemid’ SQL Injection
# Exploit Title: Joomla Guru Pro (com_guru) Component - SQL Injection
Apache Archiva 1.3.9 – Multiple Cross-Site Request Forgery Vulnerabilities
RCE Security Advisory
GSX Analyzer 10.12/11 – ‘main.swf’ Hard-Coded Superadmin Credentials
# Exploit Title: GSX Analyzer hardcoded superadmin credentials in Main.swf
IPS Community Suite 4.1.12.3 – PHP Code Injection
---------------------------------------------------------------------------
WordPress Plugin Activity Log 2.3.1 – Persistent Cross-Site Scripting
Persistent Cross-Site Scripting in WordPress Activity Log plugin
WordPress Plugin All in One SEO Pack 2.3.6.1 – Persistent Cross-Site Scripting
Persistent Cross-Site Scripting in All in One SEO Pack WordPress Plugin
Tiki Wiki CMS 15.0 – Arbitrary File Download
# Exploit Title: Tiki Wiki CMS 15.0 Arbitrary File Download
Streamo Online Radio And TV Streaming CMS – SQL Injection
######################
CyberPower Systems PowerPanel 3.1.2 – XML External Entity Out-Of-Band Data Retrieval
CyberPower Systems PowerPanel 3.1.2 XXE Out-Of-Band Data Retrieval
PHP Real Estate Script 3 – Arbitrary File Disclosure
# Exploit Title: php Real Estate Script Arbitrary File Disclosure
WordPress Plugin Lazy Content Slider 3.4 – Cross-Site Request Forgery (Add Catetory)
######################
OPAC KpwinSQL – Multiple Vulnerabilities
OPAC KpwinSQL LFI/XSS Vulnerabilities
Tiki Wiki 15.1 – File Upload
#!/usr/bin/python
OpenFire 3.10.2 < 4.0.1 - Multiple Vulnerabilities
# Several vulnerabilities doscovered in OpenFire version 3.10.2 to 4.0.1
PaKnPost Pro 1.14 – Multiple Vulnerabilities
# Exploit Title: PaKnPost Pro Arbitrary File Upload & Remote Code Execution
Advanced Webhost Billing System (AWBS) 2.9.6 – Multiple Vulnerabilities
AWBS v2.9.6 Multiple Remote Vulnerabilities
24online SMS_2500i 8.3.6 build 9.0 – SQL Injection
# Exploit Title: SQL Injection In 24 Online Billing API
CIMA DocuClass ECM – Multiple Vulnerabilities
# Exploit Title: [CIMA DocuClass Enterprise Content Management - Multiple Vulnerabilities]
eCardMAX 10.5 – Multiple Vulnerabilities
Advisory ID: ZSL-2016-5336
WebCalendar 1.2.7 – Multiple Vulnerabilities
[+] Credits: John Page aka HYP3RLINX
WordPress Plugin Real3D FlipBook – Multiple Vulnerabilities
#########################################################################
Ktools Photostore 4.7.5 – Multiple Vulnerabilities
#-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-#
XpoLog Center 6 – Remote Command Execution / Cross-Site Request Forgery
XpoLog Center V6 CSRF Remote Command Execution
Phoenix Exploit Kit – Remote Code Execution
# Exploit Title: Phoenix Exploit Kit - Remote Code Execution
Ktools Photostore 4.7.5 – Blind SQL Injection
Title : Ktools Photostore