PhpSocial 2.0.0304_20222226 – Cross-Site Request Forgery
Security Advisory - Curesec Research Team
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Arastta 1.1.5 – SQL Injection
Security Advisory - Curesec Research Team
Grawlix 1.0.3 – Cross-Site Request Forgery
Security Advisory - Curesec Research Team
Bigware Shop 2.3.01 – Multiple Local File Inclusions
# Title: Bigware Shop 2.3.01 Multiple Local File Inclusion Vulnerabilities
Ovidentia Widgets 1.0.61 – Remote Command Execution
# Title: Ovidentia Widgets 1.0.61 Remote Command Execution Exploit
Ovidentia online Module 2.8 – ‘GLOBALS[babAddonPhpPath]’ Remote File Inclusion
# Title: Ovidentia Module online 2.8 GLOBALS[babAddonPhpPath] Remote File Include Vulnerability
pfSense 2.2.5 – Directory Traversal
# Title : PFSense
Ovidentia maillist Module 4.0 – Remote File Inclusion
Not for kiddies!
Joomla! 1.5 < 3.4.6 - Object Injection 'x-forwarded-for' Header Remote Code Execution
#!/usr/bin/env python
Zen Cart 1.5.4 – Local File Inclusion
Advisory ID: HTB23282
Ovidentia NewsLetter Module 2.2 – ‘admin.php’ Remote File Inclusion
# Title: Ovidentia Module newsletter 2.2 (admin.php) Remote File Inclusion Exploit
ArticleSetup Article Script 1.00 – SQL Injection
########################################################################################
Ovidentia bulletindoc Module 2.9 – Multiple Remote File Inclusions
# Title: Ovidentia Module bulletindoc 2.9 Multiple Remote File Inclusion Vulnerabilities
Tequila File Hosting 1.5 – Multiple Vulnerabilities
================================================================================
Ovidentia absences Module 2.64 – Remote File Inclusion
# Title: Ovidentia Module absences 2.64 Remote File Include Vulnerability
Bitrix bitrix.xscan Module 1.0.3 – Directory Traversal
Advisory ID: HTB23278
Bitrix bitrix.mpbuilder Module 1.0.10 – Local File Inclusion
Advisory ID: HTB23281
Polycom VVX-Series Business Media Phones – Directory Traversal
Polycom VVX-Series Business Media Phones Path Traversal Vulnerability
WordPress Plugin Admin Management Xtended 2.4.0 – Privilege escalation
# Exploit Title: Admin Management Xtended 2.4.0 Privilege escalation
ECommerceMajor – ‘productdtl.php?prodid’ SQL Injection
#Exploit Title : ECommerceMajor SQL Injection Vulnerability
GoAutoDial CE 3.3 – Multiple SQL Injections / Command Injection
# Title : GoAutoDial CE 3.3 Multiple SQL injections, Command Injection
Skybox Platform < 7.0.611 - Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20151210-0 >
Gökhan Balbal Script 2.0 – Cross-Site Request Forgery
.__ _____ _______
iy10 Dizin Scripti – Multiple Vulnerabilities
.__ _____ _______
WordPress Plugin WP Easy Poll 1.1.3 – Cross-Site Scripting / Cross-Site Request Forgery
Exploit Title: WP Easy Poll 1.1.3 XSS and CSRF
WIMAX MT711x – Multiple Vulnerabilities
### Exploit Title: WIMAX MT711x - Multiple Vulnerabilities
WIMAX LX350P(WIXFMR-108) – Multiple Vulnerabilities
### Exploit Title: WIMAX LX350P(WIXFMR-108) - Multiple Vulnerabilities
dotCMS 3.2.4 – Multiple Vulnerabilities
dotCMS 3.2.4 Multiple Vulnerabilities
WordPress Plugin Polls Widget 1.0.7 – SQL Injection
Exploit Title : wordpress poll widget version 1.0.7 SQL Injection vulnerability
PHP Utility Belt – Remote Code Execution
Exploit Title : PHP utility belt Remote Code Execution vulnerability
OpenMRS 2.3 (1.11.4) – Local File Disclosure
OpenMRS 2.3 (1.11.4) Local File Disclosure Vulnerability
OpenMRS 2.3 (1.11.4) – Multiple Cross-Site Scripting Vulnerabilities
OpenMRS 2.3 (1.11.4) Multiple Cross-Site Scripting Vulnerabilities
OpenMRS 2.3 (1.11.4) – Expression Language Injection
OpenMRS 2.3 (1.11.4) Expression Language Injection Vulnerability
OpenMRS 2.3 (1.11.4) – XML External Entity Processing
#!/usr/bin/env python
SIMOGEO FileManager 2.3.0 – Multiple Vulnerabilities
# Exploit Title: SIMOGEO FileManager 2.3.0 - Path Traversal Vulnerability
WordPress Plugin TheCartPress 1.4.7 – Multiple Vulnerabilities
###########################################
WordPress Plugin Sell Download 1.0.16 – Local File Disclosure
###########################################
WordPress Plugin Advanced uploader 2.10 – Multiple Vulnerabilities
###########################################
WordPress Plugin Gwolle Guestbook 1.5.3 – Remote File Inclusion
Advisory ID: HTB23275
ZenPhoto 1.4.10 – Local File Inclusion
[+] Credits: hyp3rlinx
Belkin N150 Wireless Router F9K1009 v1 – Multiple Vulnerabilities
##Full Disclosure:
Invision Power Board (IP.Board) 4.1.4.x – Persistent Cross-Site Scripting
# Exploit Title: IP.Board Persistent XSS Vulnerability
ntop-ng 2.0.151021 – Privilege Escalation
# Vulnerability title: ntop-ng
Kodi 15 – Web Interface Arbitrary File Access
# Exploit Title: arbitrary file access kodi web interface
HumHub 0.11.2/0.20.0-beta.2 – SQL Injection
=== LSE Leading Security Experts GmbH - Security Advisory 2015-10-14 ===
MyCustomers CMS 1.3.873 – SQL Injection
######################
SysAid Help Desk Software 14.4.32 b25 – SQL Injection (Metasploit)
# Exploit Title: Sysaid Helpdesk Software Unauthenticated SQLi