BigDump 0.35b – Arbitrary File Upload
[+] Arbitrary Upload on BigDump v0.35b
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Symphony 2.2.4 – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/66536/info
WordPress Theme Felici – ‘Uploadify.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/66490/info
LifeSize UVC 1.2.6 – (Authenticated) Remote Code Execution
LifeSize UVC 1.2.6 authenticated vulnerabilities
innoEDIT – ‘innoedit.cgi’ Remote Command Execution
source: https://www.securityfocus.com/bid/66367/info
D-Link DIR-600L AX 1.00 – Cross-Site Request Forgery
####################################################################################
Wireless Drive 1.1.0 iOS – Multiple Web Vulnerabilities
Document Title:
OXID eShop < 4.7.11/5.0.11 / < 4.8.4/5.1.4 - Multiple Vulnerabilities
# Exploit Title: OXID eShop v
McAfee Asset Manager 6.6 – Multiple Vulnerabilities
Cloud SSO is vuln to unauthed XSS in the authentication audit form:
BigACE 2.7.5 – ‘LANGUAGE’ Directory Traversal
source: https://www.securityfocus.com/bid/66350/info
GNUBoard 4.3x – ‘ajax.autosave.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/66228/info
osCMax 2.5 – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/66272/info
Joomla! Component AJAX Shoutbox 1.6 – SQL Injection
###################################################################################
OpenSupports 2.0 – Blind SQL Injection
Open Support Blind SQL Injection v2.0 Vulnerability
OpenSupports 2.x – Authentication Bypass / Cross-Site Request Forgery
[+] Author: TUNISIAN CYBER
Church Edit – Blind SQL Injection
Exploit Title: Church Edit Blind SQL Injection
OpenX 2.8.x – Multiple Cross-Site Request Forgery Vulnerabilities
source: https://www.securityfocus.com/bid/66251/info
Fonality trixbox – ‘mac’ Remote Code Injection
# App : Trixbox all versions
Fonality trixbox – SQL Injection
# Exploit Title: SQL injection in Trixbox All Versions
Ubee EVW3200 – Cross-Site Request Forgery
# Exploit Title: Ubee EVW3200 - Multiple Cross Site Request Forgery
Ubee EVW3200 – Multiple Persistent Cross-Site Scripting Vulnerabilities
# Exploit Title: Ubee EVW3200 - Multiple Persistent Cross Site Scripting
FreePBX 2.11.0 – Remote Command Execution
#!/usr/bin/perl
vTiger CRM 5.4.0/6.0 RC/6.0.0 GA – ‘browse.php’ Local File Inclusion
CVE: CVE-2014-1222
Procentia IntelliPen 1.1.12.1520 – ‘data.aspx’ Blind SQL Injection
CVE: CVE-2014-2043
LuxCal 3.2.2 – Cross-Site Request Forgery / Blind SQL Injection
[+] Author: TUNISIAN CYBER
GNUPanel 0.3.5_R4 – Multiple Vulnerabilities
# Exploit Title :GNUpanel 0.3.5_R4 - Multiple Vulnerabilities
ZYXEL P-660HN-T1A Router – Authentication Bypass
# Exploit Title: ZyXEL Router P-660HN-T1A - Login Bypass
ownCloud 4.0.x/4.5.x – ‘upload.php?Filename’ Remote Code Execution
Vulnerability title: Remote Code Execution in ownCloud
Huawei E5331 MiFi Mobile Hotspot 21.344.11.00.414 – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20140307-0 >
Kentico CMS 7.0.75 – User Information Disclosure
# Exploit Title: Kentico CMS User Enumeration Bug
MeiuPic 2.1.2 – ‘ctl’ Local File Inclusion
source: https://www.securityfocus.com/bid/66317/info
ClipSharePro 4.1 – Local File Inclusion
# Exploit Title : ClipSharePro 0){ $config_file = $_GET['config_file']; }
Professional Designer E-Store – ‘id’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/66100/info
Ajax File Manager – Directory Traversal
# Exploit Title: Ajax File Manager DirectoryTraversal
WordPress Plugin Premium Gallery Manager – Arbitrary File Upload
source: https://www.securityfocus.com/bid/66044/info
Cory Jobs Search – ‘cid’ SQL Injection
source: https://www.securityfocus.com/bid/65969/info
Ilch CMS 2.0 – Persistent Cross-Site Scripting
Advisory ID: HTB23203
OpenDocMan 1.2.7 – Multiple Vulnerabilities
Advisory ID: HTB23202
WordPress Plugin Relevanssi – ‘category_name’ SQL Injection
source: https://www.securityfocus.com/bid/65960/info
SpagoBI 4.0 – Arbitrary Cross-Site Scripting / Arbitrary File Upload
###################################################
SpagoBI 4.0 – Persistent HTML Script Insertion
###################################################
SpagoBI 4.0 – Persistent Cross-Site Scripting
###################################################
couponPHP CMS 1.0 – Multiple Persistent Cross-Site Scripting / SQL Injections
couponPHP CMS 1.0 Multiple Stored XSS and SQL Injection Vulnerabilities
SpagoBI 4.0 – Privilege Escalation
###################################################