SevenIT SevDesk 3.10 – Multiple Web Vulnerabilities
Document Title:
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
AZBB < 1.0.07d - Multiple Vulnerabilities
AZBB Multiple Vulnerabilities
WordPress Plugin Ajax Store Locator 1.2 – SQL Injection
######################
WordPress Plugin MiwoFTP 1.0.5 – Arbitrary File Download (1)
# Exploit Title :WordPress MiwoFTP Plugin 1.0.5 Arbitrary File Download Exploit
WordPress Plugin MiwoFTP 1.0.5 – Cross-Site Request Forgery / Arbitrary File Creation / Remote Code Execution
WordPress MiwoFTP Plugin 1.0.5 CSRF Arbitrary File Creation Exploit (RCE)
WordPress Plugin MiwoFTP 1.0.5 – Multiple Cross-Site Request Forgery / Cross-Site Scripting Vulnerabilities
WordPress MiwoFTP Plugin 1.0.5 Multiple CSRF XSS Vulnerabilities
WordPress Plugin MiwoFTP 1.0.5 – Cross-Site Request Forgery / Arbitrary File Deletion
WordPress MiwoFTP Plugin 1.0.5 CSRF Arbitrary File Deletion Exploit
WordPress Plugin Video Gallery 2.8 – SQL Injection
######################
Traidnt Up 3.0 – SQL Injection
# Exploit Title: Traidnt Up v3.0 SQL Injection
WordPress Plugin Duplicator 0.5.14 – SQL Injection / Cross-Site Request Forgery
######################
WordPress Plugin WP Mobile Edition 2.7 – Remote File Disclosure
# Exploit Title: Wordpress Plugin 'WP Mobile Edition' Remote File Disclosure Vulnerability
WordPress Plugin Windows Desktop and iPhone Photo Uploader – Arbitrary File Upload
##################################################################################################
Novell ZENworks Configuration Management 11.3.1 – Remote Code Execution
>> Remote code execution in Novell ZENworks Configuration Management 11.3.1
WordPress Plugin Traffic Analyzer 3.4.2 – Blind SQL Injection
# Exploit Title: Wordpress plugin 'Traffic Analyzer' Blind SQL Injection
Balero CMS 0.7.2 – Multiple JS/HTML Injection Vulnerabilities
; path=/balerocms/";
Balero CMS 0.7.2 – Multiple Blind SQL Injections
Balero CMS v0.7.2 Multiple Blind SQL Injection Vulnerabilities
WordPress Plugin Shareaholic 7.6.0.3 – Cross-Site Scripting
# Exploit Title: Shareaholic 7.6.0.3 XSS
WordPress Plugin All In One WP Security & Firewall 3.9.0 – SQL Injection
######################
u-Auctions – Multiple Vulnerabilities
# Exploit Title: *u-Auctions Multiple Vulnerabilities*
WordPress Plugin Work The Flow File Upload 2.5.2 – Arbitrary File Upload
######################
Ericsson Drutt MSDP (Instance Monitor) – Directory Traversal
+------------------------------------------------------------------------------------------------------+
WordPress Plugin VideoWhisper Video Conference Integration 4.91.8 – Arbitrary File Upload
Title: Remote file upload vulnerability in videowhisper-video-conference-integration wordpress plugin v4.91.8
WordPress Plugin VideoWhisper Video Presentation 3.31.17 – Arbitrary File Upload
Title: Remote file upload vulnerability in wordpress plugin videowhisper-video-presentation v3.31.17
phpSFP Schedule Facebook Posts 1.5.6 – SQL Injection
######################################################################
WordPress Plugin Simple Ads Manager – Information Disclosure
#Vulnerability title: Wordpress plugin Simple Ads Manager - Information Disclosure
WordPress Plugin Simple Ads Manager 2.5.94 – Arbitrary File Upload
#Vulnerability title: Wordpress plugin Simple Ads Manager - Arbitrary File Upload
WordPress Plugin Simple Ads Manager – Multiple SQL Injections
#Vulnerability title: Wordpress plugin Simple Ads Manager - SQL Injection
WordPress Plugin WP Easy Slideshow 1.0.3 – Multiple Vulnerabilities
# Exploit Title: Wordpress WP Easy Slideshow Plugin Multiple Vulnerabilities
Multiple WordPress UpThemes Themes – Arbitrary File Upload
# Exploit Title: Wordpress SimpleCart Theme File Upload and Execution
WordPress Plugin Video Gallery 2.8 – Multiple Cross-Site Request Forgery Vulnerabilities
# Exploit Title: Wordpress Video Gallery Plugin Multiple CSRF File Upload
Kemp Load Master 7.1.16 – Multiple Vulnerabilities
# Exploit Title: Kemp Load Master - Multiple Vulnerabilities (RCE, CSRF, XSS, DoS)
Joomla! Component com_rand – SQL Injection
##################################################################################################
WordPress Plugin Business Intelligence – SQL Injection (Metasploit)
##################################################################################################
Fiyo CMS 2.0.1.8 – Multiple Vulnerabilities
# Exploit Title: FiyoCMS Multiple Vulnerabilities
WordPress Plugin SP Project & Document Manager 2.5.3 – Blind SQL Injection
# Exploit Title: WordPress SP Project & Document Manager 2.5.3 Blind SQL Injection
JBoss AS 3/4/5/6 – Remote Command Execution
# coding: utf-8
Joomla! Component Contact Form Maker 1.0.1 – SQL Injection
[+]Title: Joomla Contact Form Maker v1.0.1 Component - SQL injection vulnerability
Joomla! Component com_gallery_wd – SQL Injection
######################################################################
WordPress Plugin aspose-doc-exporter 1.0 – Arbitrary File Download
|*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*|
WordPress Plugin Slider REvolution 4.1.4 – Arbitrary File Download
# Exploit Title : WordPress Slider Revolution Responsive
JBoss JMXInvokerServlet JMXInvoker 0.3 – Remote Command Execution
import java.io.BufferedReader;
Berta CMS – Arbitrary File Upload
Berta CMS is a web based content management system using PHP and local file storage.
pfSense 2.2 – Multiple Vulnerabilities
Advisory ID: HTB23251
WordPress Plugin Marketplace 2.4.0 – Remote Code Execution (Add Admin)
#!/usr/bin/python
WordPress Plugin Marketplace 2.4.0 – Arbitrary File Download
# Exploit Title: WP Marketplace 2.4.0 Arbitrary File Download
Joomla! Component Spider FAQ – SQL Injection
##################################################################################################
Telescope 0.9.2 – Markdown Persistent Cross-Site Scripting
# Exploit Title: Persistent XSS via Markdown on Telescope