Command School Student Management System – ‘/sw/admin_school_names.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/64707/info
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Command School Student Management System – ‘/sw/health_allergies.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/64707/info
Command School Student Management System – ‘/sw/admin_titles.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/64707/info
Command School Student Management System – ‘/sw/admin_relations.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/64707/info
Command School Student Management System – ‘/sw/admin_generations.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/64707/info
Command School Student Management System – ‘/sw/admin_infraction_codes.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/64707/info
Command School Student Management System – ‘/sw/admin_media_codes_1.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/64707/info
Command School Student Management System – ‘/sw/admin_sgrades.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/64707/info
Command School Student Management System – ‘/sw/admin_school_years.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/64707/info
Command School Student Management System – ‘/sw/admin_terms.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/64707/info
Command School Student Management System – ‘/sw/admin_grades.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/64707/info
Joomla! Component com_aclsfgpl – ‘index.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/64705/info
Cubic CMS – Multiple Vulnerabilities
I. BACKGROUND
Middle School Homework Page 1.3 Beta 1 – Multiple Vulnerabilities
Middle School Homework Page V1.3 Beta 1 - Multiple Vulnerabilties
Seagate BlackArmor NAS sg2000-2000.1331 – Multiple Persistent Cross-Site Scripting Vulnerabilities
# Exploit Title: Seagate BlackArmor NAS - Multiple Persistent Cross Site
Seagate BlackArmor NAS sg2000-2000.1331 – Cross-Site Request Forgery
# Exploit Title: Seagate BlackArmor NAS - Cross Site Request Forgery
Seagate BlackArmor NAS sg2000-2000.1331 – Remote Command Execution
# Exploit Title: Seagate BlackArmor NAS - Remote Command Execution
DirectControlTM 3.1.7.0 – Multiple Vulnerabilities
DirectControlTM Version 3.1.7.0 - Multiple Vulnerabilties
Technicolor TC7200 – Multiple Cross-Site Scripting Vulnerabilities
# Exploit Title: Technicolor TC7200 - Multiple XSS Vulnerabilities
Technicolor TC7200 – Multiple Cross-Site Request Forgery Vulnerabilities
# Exploit Title: Technicolor TC7200 - Multiple CSRF Vulnerabilities
Nisuta NS-WIR150NE / NS-WIR300N Wireless Routers – Remote Management Web Interface Authentication Bypass
Nisuta NS-WIR150NE, NS-WIR300N Wireless Routers Remote Management Web Interface Authentication Bypass Vulnerability
WordPress Plugin Advanced Dewplayer – ‘download-file.php’ Script Directory Traversal
source: https://www.securityfocus.com/bid/64587/info
CMS Afroditi – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/64572/info
D-Link DSL-2750u ME_1.09 – Cross-Site Request Forgery
######################################################################
JForum ‘adminUsers’ Module – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/64540/info
AFCommerce – ‘controlheader.php’ Remote File Inclusion
source: https://www.securityfocus.com/bid/64541/info
AFCommerce – ‘adminpassword.php’ Remote File Inclusion
source: https://www.securityfocus.com/bid/64541/info
AFCommerce – ‘adblock.php’ Remote File Inclusion
source: https://www.securityfocus.com/bid/64541/info
xBoard 5.0/5.5/6.0 – ‘view.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/64619/info
Song Exporter 2.1.1 RS iOS – Local File Inclusion
Document Title:
Synology DSM 4.3-3810 – Directory Traversal
Title: Synology DSM multiple directory traversal
WordPress Theme Persuasion 2.x – Arbitrary File Download / File Deletion
Exploit Title: Persuasion Wordpress Theme - Arbitrary File Download and File Deletion Exploit
Cisco EPC3925 – Persistent Cross-Site Scripting
#######################################################################
SonarQube Jenkins Plugin – Plain Text Password
###################################################
Jenkins 1.523 – Persistent HTML Code
###################################################
Leed – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/64426/info
WordPress Core 2.0.11 – ‘/wp-admin/options-discussion.php’ Script Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/64564/info
Piwigo – ‘admin.php’ Cross-Site Request Forgery (User Creation)
source: https://www.securityfocus.com/bid/64357/info
InstantCMS 1.10.3 – Blind SQL Injection
Advisory ID: HTB23185
Ditto Forensic FieldStation 2013Oct15a – Multiple Vulnerabilities
Title: Ditto Forensic FieldStation, multiple vulnerabilities
FileMaster SY-IT 3.1 iOS – Multiple Web Vulnerabilities
Document Title:
Penny Auction 5 – SQL Injection
##################################################################################
Lowest Unique Bid Auction – SQL Injection
##################################################################################
Cisco EPC3925 – Cross-Site Request Forgery
#######################################################################
Beetel TC1-450 Airtel Wireless Router – Multiple Cross-Site Request Forgery Vulnerabilities
# Exploit Title: Beetel TC1-450 Airtel Wireless Router - Multiple CSRF Vulnerabilities
UPC Ireland Cisco EPC 2425 Router / Horizon Box – WPA-PSK Handshake Information
# Exploit Title: UPC Ireland Cisco EPC 2425 Router / Horizon Box