Guppy CMS 5.0.9/5.00.10 – Authentication Bypass/Change Email
GuppY CMS 5.0.9 & 5.00.10 Authentication bypass/Change email. Other versions may be vulnerable but weren't tested.
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
eTouch SamePage 4.4.0.0.239 – Multiple Vulnerabilities
eTouch SamePage v4.4.0.0.239 multiple vulnerabilities
WordPress Plugin Fancybox 3.0.2 – Persistent Cross-Site Scripting
# Exploit Title: Wordpress plugin Fancybox-for-WordPress Stored XSS
WordPress Plugin WonderPlugin Audio Player 2.0 – Blind SQL Injection / Cross-Site Scripting
# Exploit Title: WonderPlugin Audio Player 2.0 Blind SQL Injection and XSS
Exponent CMS 2.3.1 – Multiple Cross-Site Scripting Vulnerabilities
######################
WordPress Plugin Video Gallery 2.7.0 – SQL Injection
######################
IBM Endpoint Manager – Persistent Cross-Site Scripting
Advisory: Cross-Site Scripting in IBM Endpoint Manager Relay Diagnostics
Pandora FMS 5.1 SP1 – SQL Injection
Document Title:
WordPress Plugin Survey and Poll 1.1 – Blind SQL Injection
#################################################################
LG DVR LE6016D – Remote File Disclosure
----------------------------------------------------------------------
ManageEngine OpManager / Applications Manager / IT360 – ‘FailOverServlet’ Multiple Vulnerabilities
>> Multiple vulnerabilities in FailOverServlet in ManageEngine OpManager, Applications Manager and IT360
Fork CMS 3.8.5 – SQL Injection
[CVE-2015-1467] Fork CMS - SQL Injection in Version 3.8.5
Chamilo LMS 1.9.8 – Blind SQL Injection
# Exploit Title: Chamilo LMS 1.9.8 Blind SQL Injection
StaMPi – Local File Inclusion
# Exploit Title: StaMPi - Local File Inclusion
u5CMS 3.9.3 – Multiple Persistent Cross-Site Scripting / Reflected Cross-Site Scripting Vulnerabilities
u5CMS 3.9.3 Multiple Stored And Reflected XSS Vulnerabilities
u5CMS 3.9.3 – ‘thumb.php’ Local File Inclusion
u5CMS 3.9.3 (thumb.php) Local File Inclusion Vulnerability
u5CMS 3.9.3 – Multiple SQL Injections
u5CMS 3.9.3 Multiple SQL Injection Vulnerabilities
u5CMS 3.9.3 – ‘deletefile.php’ Arbitrary File Deletion
u5CMS 3.9.3 (deletefile.php) Arbitrary File Deletion Vulnerability
RedaxScript CMS 2.2.0 – SQL Injection
# Exploit Title: Radexscript CMS 2.2.0 - SQL Injection vulnerability
Magento Server MAGMI Plugin – Multiple Vulnerabilities
Exploit Title: Magento Server MAGMI Plugin Local File Inclusion And Cross Site Scripting
Pragyan CMS 3.0 – SQL Injection
Advisory: SQL injection vulnerability in Pragyan CMS v.3.0
Hewlett-Packard (HP) UCMDB – JMX-Console Authentication Bypass
Mogwai Security Advisory MSA-2015-02
Sefrengo CMS 1.6.1 – Multiple SQL Injections
# Exploit Title: Sefrengo CMS v1.6.1 - Multiple SQL Injection Vulnerabilities
ManageEngine Firewall Analyzer 8.0 – Directory Traversal / Cross-Site Scripting
################################################################################################
Symantec Data Center Security – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20150122-0 >
jclassifiedsmanager – Multiple Vulnerabilities
# Exploit Title: jclassifiedsmanager Multiple Vulnerabilities
ManageEngine EventLog Analyzer 9.0 – Directory Traversal / Cross-Site Scripting
################################################################################################
SWFupload 2.5.0 – Cross Frame Scripting (XFS)
# Exploit Title: SWFupload All Version XSF Vulnerability
PHP Webquest 2.6 – SQL Injection
# Exploit Title: sql injection
ManageEngine ServiceDesk Plus 9.0 < Build 9031 - User Privileges Management
================================================================================
Barracuda Networks Cloud Series – Filter Bypass
Document Title:
Mangallam CMS – SQL Injection
Document Title:
NPDS CMS REvolution-13 – SQL Injection
Title - NPDS CMS Revolution-13 - SQL Injection Vulnerability
ManageEngine ServiceDesk Plus 9.0 – User Enumeration
================================================================================
ManageEngine ServiceDesk Plus 9.0 – SQL Injection
================================================================================
ecommerceMajor – SQL Injection / Authentication Bypass
##################################################################################################
ArticleFR CMS 3.0.5 – Arbitrary File Upload
# Exploit Title: Arbitrary File Upload in articleFR CMS 3.0.5
ArticleFR CMS 3.0.5 – SQL Injection
# Exploit Title: SQL injection vulnerability in articleFR CMS 3.0.5
vBulletin vBSSO Single Sign-On 1.4.14 – SQL Injection
# Exploit Title: vBulletin vBSSO Single Sign-On –
WordPress Plugin Pixarbay Images 2.3 – Multiple Vulnerabilities
Mogwai Security Advisory MSA-2015-01
RedaxScript 2.1.0 – Privilege Escalation
# Exploit Title: Privilege Escalation in RedaxScript 2.1.0
WordPress Plugin Cforms 14.7 – Remote Code Execution
# Exploit Title: Remote Code Execution via Unauthorised File upload in Cforms 14.7
WordPress Plugin Pie Register 2.0.13 – Privilege Escalation
# Exploit Title: Pie Register 2.0.13 Privilege escalation