webapps

Concrete5 CMS 5.7.3.1 – ‘Application::dispatch’ Method Local File Inclusion

-------------------------------------------------------------------------------

Ubiquiti Administration Portal – Remote Command Execution (via Cross-Site Request Forgery)

WordPress Plugin Ultimate Membership Pro 3.3 – SQL Injection

Symantec Endpoint Protection Manager 12.1 – Multiple Vulnerabilities

[+] Credits: John Page aka HYP3RLINX

Untangle NGFW 12.1.0 Beta – ‘execEvil()’ Command Injection

#!/usr/bin/python

Riverbed SteelCentral NetProfiler & NetExpress 10.8.7 – Multiple Vulnerabilities

( , ) (,

SugarCRM 6.5.18 – PHP Code Injection

---------------------------------------------------------

BigTree CMS 4.2.11 – SQL Injection

1. ADVISORY INFORMATION

My Little Forum 2.3.5 – PHP Command Injection

[+] Credits: hyp3rlinx

Kagao 3.0 – Multiple Vulnerabilities

######################

Option CloudGate CG0192-11897 – Multiple Vulnerabilities

Option CloudGate Insecure Direct Object References Authorization Bypass

CodoForum 3.4 – Persistent Cross-Site Scripting

# Exploit Title: Codoforum v3.4 Stored Cross-Site Scripting (Stored XSS)

OPAC KpwinSQL – SQL Injection

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

WordPress Plugin Ultimate Product Catalog 3.8.6 – Arbitrary File Upload

# Exploit Title: Wordpress Ultimate-Product-Catalog v3.8.6 Arbitrary file (RCE)

iBilling 3.7.0 – Persistent Cross-Site Scripting / Reflected Cross-Site Scripting

iBilling v3.7.0 Multiple Stored and Reflected Cross Site Scripting Vulnerabilities

FinderView – Multiple Vulnerabilities

# Exploit Title: FinderView - Multiple Vulnerability(Path Traversal/Reflected XSS)

XuezhuLi FileSharing – Cross-Site Request Forgery (Add User)

XuezhuLi FileSharing – Directory Traversal

# Exploit Title: XuezhuLi FileSharing - Path Traversal Vulnerability

Getsimple CMS 3.3.10 – Arbitrary File Upload

# Exploit Title: Getsimple CMS

Alibaba Clone B2B Script – Arbitrary File Disclosure

# Exploit Title: Alibaba Clone B2B Script File Read Vulnerability

YetiForce CRM < 3.1 - Persistent Cross-Site Scripting

# Exploit Title: YetiForce CRM < 3.1 - Persistant XSS Vulnerability

Radiant CMS 1.1.3 – Multiple Persistent Cross-Site Scripting Vulnerabilities

# Exploit Title: Radiant CMS 1.1.3 - Mutiple Persistant XSS Vulnerabilities

SAP NetWeaver AS JAVA 7.1 < 7.5 - Directory Traversal

Application: SAP NetWeaver AS JAVA

SAP NetWeaver AS JAVA 7.1 < 7.5 - 'ctcprotocol Servlet' XML External Entity

Application: SAP NetWeaver AS JAVA

Joomla! Component com_publisher – SQL Injection

# Exploit Title: Joomla com_publisher component SQL Injection vulnerability

Yona CMS – Cross-Site Request Forgery

IonizeCMS 1.0.8 – Cross-Site Request Forgery (Add Admin)

Symphony CMS 2.6.7 – Session Fixation

[+] Credits: John Page aka hyp3rlinx

Airia – Arbitrary File Upload

# Exploit Title: Airia - Webshell Upload Vulnerability

Airia – Cross-Site Request Forgery (Add Content)

WordPress Plugin Premium SEO Pack 1.9.1.3 – wp_options Overwrite

Joomla! Component com_bt_media 1.0 – SQL Injection

######################

sNews CMS 1.7.1 – Multiple Vulnerabilities

[+] Credits: hyp3rlinx

WordPress Plugin Ultimate Product Catalog 3.8.1 – Privilege Escalation

phpATM 1.32 – Multiple Vulnerabilities

phpATM 1.32 (Windows) – Arbitrary File Upload / Remote Command Execution

Vicidial 2.11 – Scripts Persistent Cross-Site Scripting

# Exploit Title: Vicidial 2.11 Scripts - Authenticated Stored XSS

WordPress Plugin Gravity Forms 1.8.19 – Arbitrary File Upload

Gemalto Sentinel License Manager 18.0.1.55505 – Directory Traversal

Gemalto Sentinel License Manager 18.0.1 Directory Traversal Vulnerability

Tiki Wiki CMS Calendar 6.15/9.11 LTS/12.5 LTS/14.2 – Remote Code Execution

# Exploit Title: Tiki-Calendar-RCE

SlimCMS 0.1 – Cross-Site Request Forgery (Change Admin Password)

Roxy Fileman 1.4.4 – Arbitrary File Upload

# Exploit Title: Roxy Fileman

ATCOM PBX IP01 / IP08 / IP4 / IP2G4A – Authentication Bypass

# Title: ATCOM PBX system , auth bypass exploit

PHPLive 4.4.8 < 4.5.4 - Password Recovery SQL Injection

#!/bin/env python

jbFileManager – Directory Traversal

# Exploit Title: jbFileManager - Path Traversal(view/add/delete)

BookingWizz Booking System < 5.5 - Multiple Vulnerabilities

1. ADVISORY INFORMATION

Joomla! Component com_enmasse 5.1 < 6.4 - SQL Injection

# Exploit Title: Joomla com_enmasse - SQL Injection

Dokeos 2.2.1 – Blind SQL Injection

# Exploit Title: Dokeos Blind SQL Injection

Hyperoptic (Tilgin) Router HG23xx – Multiple Vulnerabilities

Hyperoptic (Tilgin) Router HG23xx Multiple XSS And CSRF Vulnerabilities

w2wiki – Multiple Cross-Site Scripting Vulnerabilities

# Exploit Title: w2wiki - Multiple XSS(Stored/Reflected)