PHP-Charts 1.0 – Code Execution
# Exploit Title: PHP-CHARTS v1.0 code execution vulnerability
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Drupal Module CKEditor < 4.1WYSIWYG (Drupal 6.x/7.x) - Persistent Cross-Site Scripting
# Exploit Title: Persistent XSS in wysiwyg CKEditor
WordPress Plugin WP Cleanfix – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/59940/info
WordPress Plugin Mail On Update – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/59932/info
Jojo CMS – ‘x-forwarded-for’ HTTP header SQL Injection
source: https://www.securityfocus.com/bid/59934/info
Jojo CMS – ‘search’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/59933/info
WordPress Plugin wp-FileManager – ‘path’ Arbitrary File Download
source: https://www.securityfocus.com/bid/59886/info
Open Flash Chart – ‘get-data’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/59928/info
Gallery Server Pro – Arbitrary File Upload
source: https://www.securityfocus.com/bid/59831/info
UMI CMS 2.9 – Cross-Site Request Forgery
Advisory ID: HTB23151
Alienvault Open Source SIEM (OSSIM) 4.1.2 – Multiple SQL Injections
RunRunLevel Web Security Research - AlienVault OSSIM multiple SQL Injection vulnerabilities
WHMCS 4.x – ‘invoicefunctions.php?id’ SQL Injection
# Title: WHMCS 4.x SQL Injection Vulnerability
Invision Power Board 1.x?/2.x/3.x – Admin Takeover
IPB (Invision Power Board) all versions (1.x? / 2.x / 3.x) Admin account Takeover leading to code execution
WordPress Plugin wp-FileManager – Arbitrary File Download
Title: Wordpress wp-FileManager Local File Download Vulnerability
Joomla! Component com_s5clanroster – ‘id’ SQL Injection
Joomla Component com_s5clanroster Sql Injection Vulnerability
Ajax Availability Calendar 3.x – Multiple Vulnerabilities
Ajax Availability Calendar 3.X.X Multiple Vulnerabilties
Getsimple CMS 3.2.1 – Arbitrary File Upload
GetSimpleCMS Version 3.2.1 Arbitrary File Upload Vulnerability
WordPress Plugin Securimage-WP – ‘siwp_test.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/59816/info
Securimage – ‘example_form.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/59796/info
ColdFusion 9-10 – Credential Disclosure
#!/usr/bin/env python
MoinMoin – Arbitrary Command Execution
#!/usr/bin/env python
b2evolution 4.1.6 – Multiple Vulnerabilities
Advisory ID: HTB23152
Cisco Linksys E4200 – Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE-----
MyBB Game Section Plugin – ‘games.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/59690/info
NetApp OnCommand System Manager – ‘/zapiServlet’ User Management Interface Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/59688/info
NetApp OnCommand System Manager – ‘/zapiServlet’ CIFS Configuration Management Interface Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/59688/info
D-Link DSL-320B – Multiple Vulnerabilities
Device: DSL-320B
OpenDocMan 1.2.6.5 – Persistent Cross-Site Scripting
# Exploit Title: OpenDocMan 1.2.6.5 Stored/Reflective XSS
WeBid 1.0.6 – Multiple Vulnerabilities
# Title: Webid Blind SQL Injection / Local File Disclosure Vulnerability
Joomla! Component dj-classifieds 2.0 – Blind SQL Injection
$$$$$$\ $$\ $$\ $$$$$$\
Craigslist Gold – SQL Injection
# Exploit Title: Craigslist Clone Gold SQL injection Vulnerability
Social Site Generator 2.2 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: social generator Remote Add Admin Exploit
D-Link DNS-323 – Multiple Vulnerabilities
###############################################################################
Vivotek IP Cameras – Multiple Vulnerabilities
Core Security - Corelabs Advisory
D-Link IP Cameras – Multiple Vulnerabilities
Core Security - Corelabs Advisory
EggBlog 4.1.2 – Arbitrary File Upload
# Exploit Title: eggBlog Arbitrary File Upload Vulnerability
Foe CMS 1.6.5 – Multiple Vulnerabilities
Title: Foe CMS 1.6.5 SQL Injection Vulnerability
Ipswitch IMail 11.01 – Cross-Site Scripting
#!/usr/bin/perl
PHPValley Micro Jobs Site Script – Spoofing
source: https://www.securityfocus.com/bid/59536/info
Joomla! 3.0.3 – ‘remember.php’ PHP Object Injection
------------------------------------------------------------------
D-Link DIR-635 – Multiple Vulnerabilities
Device Name: DIR-635
phpMyAdmin 3.5.8/4.0.0-RC2 – Multiple Vulnerabilities
[waraxe-2013-SA#103] - Multiple Vulnerabilities in phpMyAdmin
WordPress Plugin WP Super Cache – PHP Remote Code Execution
source: https://www.securityfocus.com/bid/59470/info