WordPress Plugin WP-SendSms 1.0 – Multiple Vulnerabilities
=============================================================
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Concrete5 CMS 5.6.1.2 – Multiple Vulnerabilities
=============================================================
Resin Application Server 4.0.36 – Source Code Disclosure
Resin Application Server 4.0.36 Source Code Disclosure Vulnerability
ScriptCase – ‘scelta_categoria.php’ SQL Injection
source: https://www.securityfocus.com/bid/60461/info
Lokboard – ‘index_4.php’ PHP Code Injection
source: https://www.securityfocus.com/bid/60459/info
HP Insight Diagnostics 9.4.0.4710 – Local File Inclusion
source: https://www.securityfocus.com/bid/60449/info
HP Insight Diagnostics – Remote Code Injection
source: https://www.securityfocus.com/bid/60447/info
WordPress Theme Ambience – ‘src’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/60458/info
Max Forum – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/60455/info
Caucho Resin – ‘index.php?logout’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/60426/info
Caucho Resin – ‘/resin-admin/’ URI Cross-Site Scripting
source: https://www.securityfocus.com/bid/60426/info
Asus RT56U 3.0.0.4.360 – Remote Command Injection
# Exploit Title: Asus RT56U Remote Command Injection
Ruubikcms 1.1.1 – Persistent Cross-Site Scripting
# Exploit Title: [ruubikcms v1.1.1 Stored XSS]
Netgear DGN1000 / DGN2200 – Multiple Vulnerabilities
Unauthenticated command execution on Netgear DGN devices
Imperva SecureSphere Operations Manager 9.0.0.5 – Multiple Vulnerabilities
Original: http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt
DS3 Authentication Server – Multiple Vulnerabilities
Original: http://www.digitalsec.net/stuff/explt+advs/DS3.AuthServer.txt
Ruubikcms 1.1.1 – ‘tinybrowser.php?folder’ Directory Traversal
# Exploit Title: [ruubikcms v1.1.1 Path Traversal vulnerability]
Cuppa CMS – ‘/alertConfigField.php’ Local/Remote File Inclusion
# Exploit Title : Cuppa CMS File Inclusion
Seowonintech Routers fw: 2.3.9 – File Disclosure
#!/usr/bin/perl
QNAP VioStor NVR / QNAP NAS – Remote Code Execution
source: https://www.securityfocus.com/bid/60354/info
CMS Gratis Indonesia – ‘config.php’ PHP Code Injection
source: https://www.securityfocus.com/bid/60337/info
Telaen 2.7.x – Open Redirection
source: https://www.securityfocus.com/bid/60290/info
Telaen 2.7.x – Cross-Site Scripting
source: https://www.securityfocus.com/bid/60288/info
Telaen – Information Disclosure
source: https://www.securityfocus.com/bid/60340/info
PHD Help Desk 2.12 – SQL Injection
# Exploit Title: PHD Help Desk 2.12 SQLi
Zavio IP Cameras Firmware 1.6.03 – Multiple Vulnerabilities
Core Security - Corelabs Advisory
MayGion IP Cameras Firmware 09.27 – Multiple Vulnerabilities
Core Security - Corelabs Advisory
TP-Link IP Cameras Firmware 1.6.18P12 – Multiple Vulnerabilities
Core Security - Corelabs Advisory
YeaLink IP Phone Firmware 9.70.0.100 – Phone Call
# Exploit Title: [YeaLink IP Phone SIP-TxxP firmware
TP-Link WR842ND – Remote Multiple SSID Directory Traversals
#!/usr/bin/python
HostBill – ‘cpupdate.php’ Authentication Bypass
source: https://www.securityfocus.com/bid/60958/info
Elastix – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/60262/info
WordPress Plugin ADIF Log Search Widget – ‘logbook_search.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/60198/info
RadioCMS 2.2 – ‘menager.php?playlist_id’ SQL Injection
#################################################
WordPress Plugin Spider Catalog 1.4.6 – Multiple Vulnerabilities
[waraxe-2013-SA#105] - Multiple Vulnerabilities in Spider Catalog Wordpress Plugin
WordPress Plugin Spider Event Calendar 1.3.0 – Multiple Vulnerabilities
[waraxe-2013-SA#104] - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin
WordPress Plugin User Role Editor 3.12 – Cross-Site Request Forgery
# Exploit Title: WP User Role Editor CSRF
Vanilla Forums 2.0.18.8 – Multiple Vulnerabilities
# Exploit Title: Vanilla Forums Insecure Permissions Vulnerability
AVE.CMS 2.09 – ‘index.php?module’ Blind SQL Injection
#!/usr/bin/env python
HP LaserJet Pro P1606dn – Webadmin Password Reset
#!/usr/bin/python
Matterdaddy Market – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/60150/info
Weyal CMS – Multiple SQL Injections
source: https://www.securityfocus.com/bid/60089/info
Kimai 0.9.2.1306-3 – SQL Injection
# Exploit Title: Kimai 0.9.2.1306-3 SQLi
WordPress Plugin ProPlayer 4.7.9.1 – SQL Injection
##############
Exponent CMS 2.2.0 Beta 3 – Multiple Vulnerabilities
Advisory ID: HTB23154