XCloner Standalone 3.5 – Cross-Site Request Forgery
Advisory ID: HTB23207
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Quick.CMS 5.4 – Multiple Vulnerabilities
# Exploit Title: QuickCms 5.4 Multiple Vulnerabilites
csUpload Script Site – Authentication Bypass
# Exploit Title: ["csUpload Script Site" Authentication Bypass]
eazyCMS – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/66769/info
Joomla! Component Inneradmission – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/66708/info
XAMPP 3.2.1 & phpMyAdmin 4.1.6 – Multiple Vulnerabilities
# Title: XAMPP 3.2.1 & phpMyAdmin 4.1.6 "'> } in the url resulting in a reflected cross site scripting attack.
Puntopy – ‘novedad.php’ SQL Injection
source: https://www.securityfocus.com/bid/67241/info
PHPFox – Access Control Security Bypass
source: https://www.securityfocus.com/bid/66677/info
Private Photo+Video 1.1 Pro iOS – Persistent
Document Title:
WordPress Plugin XCloner 3.1.0 – Cross-Site Request Forgery
Advisory ID: HTB23206
Oracle Identity Manager 11g R2 SP1 (11.1.2.1.0) – Unvalidated Redirects
Unvalidated Redirects on Oracle Identity Manager
CMS Made Simple 1.11.10 – Multiple Cross-Site Scripting Vulnerabilities
Exploit Title : CMS Made Simple 1.11.10 Multiple XSS Vulnerability
Kloxo-MR 6.5.0 – Cross-Site Request Forgery
# Exploit Title :Kloxo-MR 6.5.0 CSRF Vulnerability
Kloxo 6.1.18 Stable – Cross-Site Request Forgery
# Exploit Title :Kloxo 6.1.18 Stable CSRF Vulnerability
iShare Your Moving Library 1.0 iOS – Multiple Vulnerabilities
Document Title:
CIS Manager CMS – SQL Injection
[+] Sql Injection on CIS Manager CMS
ZamFoo – Multiple Remote Command Execution Vulnerabilities
source: https://www.securityfocus.com/bid/67215/info
Alienvault 4.5.0 – (Authenticated) SQL Injection (Metasploit)
The following request is vulnerable to a SQL injection attack from authenticated users.
Horde Webmail 5.1 – Open Redirect
[+] Horde webmail - Open Redirect Vulnerability
EMC Cloud Tiering Appliance 10.0 – XML External Entity Arbitrary File Read (Metasploit)
EMC Cloud Tiering Appliance v10.0 Unauthed XXE
Vanctech File Commander 1.1 iOS – Multiple Vulnerabilities
Document Title:
PhotoWIFI Lite 1.0 iOS – Multiple Vulnerabilities
Document Title:
Primo Interactive CMS – ‘pcm.cgi’ Remote Command Execution
source: https://www.securityfocus.com/bid/66549/info
ASP-Nuke 2.0.7 – ‘gotourl.asp’ Open Redirect
[+] ASP-Nuke 2.0.7 - Open Redirect Vulnerability in gotourl
iStArtApp FileXChange 6.2 iOS – Multiple Vulnerabilities
Document Title:
Joomla! Component Kunena 3.0.4 – Persistent Cross-Site Scripting
Persistent XSS in Joomla::Kunena 3.0.4
LinEx – Password Reset
# Exploit Title: LinEx All Versions Password Reset Vulnerability
ePhone Disk 1.0.2 iOS – Multiple Vulnerabilities
Document Title:
Easy FileManager 1.1 iOS – Multiple Vulnerabilities
Document Title:
Lazybone Studios WiFi Music 1.0 iOS – Multiple Vulnerabilities
Document Title:
FTP Drive + HTTP 1.0.4 iOS – Code Execution
Document Title:
IBM Tealeaf CX 8.8 – Remote OS Command Injection
# IBM Tealeaf CX (v8 release 8) Remote OS Command Injection
Allied Telesis AT-RG634A ADSL Broadband Router – Web Shell
Allied Telesis AT-RG634A ADSL Broadband router hidden administrative
OpenCart 1.5.6.1 – ‘openbay’ Multiple SQL Injections
# Exploit Title : OpenCart log('getEbayItemId() - Product ID: '.$product_id);
InterWorx Control Panel 5.0.13 build 574 – ‘xhr.php?i’ SQL Injection
=================================================
Beheer Systeem – ‘pbs.cgi’ Remote Command Execution
source: https://www.securityfocus.com/bid/66489/info
DotItYourself – ‘dot-it-yourself.cgi’ Remote Command Execution
source: https://www.securityfocus.com/bid/66487/info
qEngine 4.1.6/6.0.0 – ‘task.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/66401/info
Kemana Directory 1.5.6 – ‘qvc_init()’ Cookie Poisoning CAPTCHA Bypass
#!C:\Perl64\bin\perl.exe
Kemana Directory 1.5.6 – ‘task.php’ Local File Inclusion
Kemana Directory 1.5.6 (run param) Local File Inclusion Vulnerability
Kemana Directory 1.5.6 – Remote Code Execution
Kemana Directory 1.5.6 Remote Code Execution
Kemana Directory 1.5.6 – kemana_admin_passwd Cookie User Password Hash Disclosure
Kemana Directory 1.5.6 kemana_admin_passwd Cookie User Password Hash Disclosure
Cart Engine 3.0.0 – ‘task.php’ Local File Inclusion
Cart Engine 3.0.0 (task.php) Local File Inclusion Vulnerability
Cart Engine 3.0.0 – Remote Code Execution
Cart Engine 3.0.0 Remote Code Execution
Getsimple CMS 3.3.1 – Persistent Cross-Site Scripting
# Exploit Title: etSimple CMS v3.3.1 Persistent Cross Site Scripting