Simple E-document 1.31 – Authentication Bypass
##########################################################################
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
godontologico 5 – SQL Injection
########################################################################################
iTechClassifieds 3.03.057 – SQL Injection
# Exploit Title: iTechClassifieds v3.03.057 - SQL Injection
Web Video Streamer – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/65350/info
Imageview – ‘upload.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/65059/info
BLUE COM Router 5360/52018 – Password Reset
# Exploit Title: BLUE COM Router - 5360/52018 Password Reset Exploit
Teracom Modem T2-B-Gawv1.4U10Y-BI – Persistent Cross-Site Scripting
# Exploit Title: Teracom Modem Stored XSS Vulnerability
Doodle4Gift – Multiple Vulnerabilities
# Exploit Title : Doodle4Gift
WordPress Plugin Global Flash Gallery – ‘swfupload.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/65060/info
BloofoxCMS 0.5.0 – ‘fileurl’ Local File Inclusion
source: https://www.securityfocus.com/bid/65019/info
BloofoxCMS – ‘/admin/index.php’ Cross-Site Request Forgery (Add Admin)
source: https://www.securityfocus.com/bid/65019/info
BloofoxCMS – ‘/bloofox/admin/index.php?Username’ SQL Injection
source: https://www.securityfocus.com/bid/65019/info
BloofoxCMS – ‘/bloofox/index.php?Username’ SQL Injection
source: https://www.securityfocus.com/bid/65019/info
BloofoxCMS 0.5.0 – Multiple Vulnerabilities
bloofoxCMS V0.5.0 - Multiple Vulnerabilties
Joomla! Component Sexy polling 1.0.8 – ‘answer_id’ SQL Injection
source: https://www.securityfocus.com/bid/64991/info
PHPJabbers Vacation Rental Script 3.0 – Multiple Vulnerabilities
Vacation Rental Script V3.0 - Multiple Vulnerabilties
PHPJabbers Hotel Booking System 3.0 – Multiple Vulnerabilities
Hotel Booking System V3.0 - Multiple Vulnerabilties
PHPJabbers Vacation Packages Listing 2.0 – Multiple Vulnerabilities
Vacation Packages Listing V2.0 - Multiple Vulnerabilities
PHPJabbers Property Listing Script 2.0 – Cross-Site Request Forgery (Add Admin)
Property Listing Script V2.0 - Add Admin CSRF Vulnerability
PHPJabbers Pet Listing Script 1.0 – Multiple Vulnerabilities
Pet Listing Script V1.0 - Multiple Vulnerabilities
Collabtive 1.1 – ‘managetimetracker.php’ SQL Injection
##=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+##
Horizon QCMS 4.0 – Multiple Vulnerabilities
Advisory ID: HTB23191
Burden 1.8 – Authentication Bypass
Advisory ID: HTB23192
Conceptronic Wireless Pan & Tilt Network Camera – Cross-Site Request Forgery
Affected Product: Conceptronic camera CIPCAMPTIWL
PHPJabbers Event Booking Calendar 2.0 – Multiple Vulnerabilities
Event Booking Calendar V2.0 - Multiple Vulnerabilities
PHPJabbers Car Rental Script – Multiple Vulnerabilities
Car Rental Script - Multiple Vulnerabilities
PHPJabbers Appointment Scheduler 2.0 – Multiple Vulnerabilities
Appointment Scheduler V2.0 - Multiple Vulnerabilities
Auto Classifieds Script 2.0 – Cross-Site Request Forgery (Add Admin)
Auto Classifieds Script v2.0 - CSRF Vulnerabilty [Add Admin]
PHPJabbers Job Listing Script – Multiple Vulnerabilities
Job Listing Script - Multiple Vulnerabilties
Feixun Wireless Router FWR-604H – Remote Code Execution
# Exploit Title: [Feixun FWR-604H Wireless Router Remote Code Execution]
Apache Struts2 2.0.0 < 2.3.15 - Prefixed Parameters OGNL Injection
CVE Number: CVE-2013-2251
Atmail Webmail Server – Email Body HTML Injection
source: https://www.securityfocus.com/bid/64779/info
Dell Kace 1000 Systems Management Appliance DS-2014-001 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/65029/info
DomPHP 0.83 – SQL Injection
-------------------------------------------------------------
DomPHP 0.83 – Local Directory Traversal
-------------------------------------------------------------
Joomla! Component Almond Classifieds – Arbitrary File Upload
source: https://www.securityfocus.com/bid/64788/info
EZGenerator – Local File Disclosure / Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/64740/info
Built2Go PHP Shopping – Cross-Site Request Forgery (Admin Password)
source: https://www.securityfocus.com/bid/64735/info
UAEPD Shopping Script – ‘news.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/64734/info
UAEPD Shopping Script – ‘products.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/64734/info
Dredge School Administration System – ‘/DSM/Backup/processbackup.php’ Database Backup Information Disclosure
source: https://www.securityfocus.com/bid/64720/info
Dredge School Administration System – ‘/DSM/loader.php’ Cross-Site Request Forgery (Admin Account Manipulation)
source: https://www.securityfocus.com/bid/64720/info
Dredge School Administration System – ‘/DSM/loader.php’ Account Information Disclosure
source: https://www.securityfocus.com/bid/64720/info
Dredge School Administration System – ‘/DSM/loader.php?Id’ SQL Injection
source: https://www.securityfocus.com/bid/64720/info
Command School Student Management System – ‘/sw/add_topic.php’ Cross-Site Request Forgery (Topic Creation)
source: https://www.securityfocus.com/bid/64707/info
Command School Student Management System – ‘/sw/Admin_change_Password.php’ Cross-Site Request Forgery (Admin Password Manipulation)
source: https://www.securityfocus.com/bid/64707/info
Command School Student Management System – ‘/sw/backup/backup_ray2.php’ Database Backup Direct Request Information Disclosure
source: https://www.securityfocus.com/bid/64707/info
Command School Student Management System – ‘/sw/admin_subjects.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/64707/info