WordPress Plugin Download Monitor – ‘dlsearch’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/55487/info
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Crowbar – ‘file’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/55315/info
XM Forum – ‘search.asp’ SQL Injection
source: https://www.securityfocus.com/bid/55299/info
TomatoCart – ‘example_form.ajax.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/55295/info
Booking System Pro – Cross-Site Request Forgery
# Exploit Title: Booking System Pro CSRF Vulnerability
WordPress Plugin HD Webplayer 1.1 – SQL Injection
_______ _____ _ _ _______ _____
Disqus Blog Comments – Blind SQL Injection
:--------------------------------------------------------------------------------------------------------------------...
PrestaShop 1.4.7 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/55280/info
Phorum 5.2.18 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/55275/info
JW Player – ‘logo.link’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/55199/info
WordPress Plugin Simple:Press Forum – Arbitrary File Upload
source: https://www.securityfocus.com/bid/55243/info
WordPress Plugin Cloudsafe365 – ‘file’ Remote File Disclosure
source: https://www.securityfocus.com/bid/55241/info
RV Shopping Cart – Cross-Site Request Forgery
# Exploit Title: RV Shopping cart CSRF Vulnerability
RV Article Publisher – Cross-Site Request Forgery
# Exploit Title: RV Article publisher CSRF Vulnerability
mieric AddressBook 1.0 – SQL Injection
-----------------------------------------------------
CommPort 1.01 – Multiple Vulnerabilities
--------------------------------------------
aoop CMS 0.3.6 – Multiple Vulnerabilities
Inshell Security Advisory
Elcom CMS 7.4.10 – Community Manager Insecure Arbitrary File Upload
Elcom CMS - Community Manager Insecure File Upload Vulnerability - Security
xt:Commerce VEYTON 4.0.15 – ‘products_name_de’ Script Insertion
xt:Commerce VEYTON 4.0.15 (products_name_de) Script Insertion Vulnerability
WordPress Plugin Count Per Day 3.2.3 – Cross-Site Scripting
###################################################################################
Vlinks 2.0.3 – ‘id’ SQL Injection
#########################################################################################
web@all CMS 2.0 – Multiple Vulnerabilities
web@all CMS 2.0 (_order) SQL Injection Vulnerability
XWiki 4.2-milestone-2 – Multiple Persistent Cross-Site Scripting Vulnerabilities
# Exploit Title: Multiple Stored XSS Vulnerabilities in XWiki.
Wiki Web Help 0.3.9 – Multiple Persistent Cross-Site Scripting Vulnerabilities
# Exploit Title: Multiple Stored XSS Vulnerabilities in Wiki Web Help.
Joomla! Component Komento – ‘cid’ SQL Injection
source: https://www.securityfocus.com/bid/55212/info
IBM Rational ClearQuest 8.0 – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/55125/info
Mihalism Multi Host – ‘users.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/55237/info
LibGuides – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/55222/info
Web Wiz Forums – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/55220/info
WordPress Plugin Finder – ‘order’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/55217/info
Power-eCommerce – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/55216/info
PHP Web Scripts Text Exchange Pro – ‘page’ Local File Inclusion
source: https://www.securityfocus.com/bid/55205/info
Easy Banner Pro – ‘index.php’ Local File Inclusion
-----------------------------------------------------------
AB Banner Exchange – ‘index.php’ Local File Inclusion
-----------------------------------------------------------
Text Exchange Pro – ‘index.php’ Local File Inclusion
-----------------------------------------------------------
Ad Manager Pro – Multiple Vulnerabilities
-----------------------------------------------------------
webpa 1.1.0.1 – Multiple Vulnerabilities
:::::::-. ... ::::::. :::.
Ad Manager Pro 4 – Local File Inclusion
-=[--------------------ADVISORY-------------------]=-
op5 Monitoring 5.4.2 – VM Applicance Multiple Vulnerabilities
# Author: loneferret of Offensive Security
letodms 3.3.6 – Multiple Vulnerabilities
# Exploit Title: LetoDMS 3.3.6 Multiple Reflected/Stored XSS & Password Change CSRF Vulnerability
PHP Web Scripts Ad Manager Pro – ‘page’ Local File Inclusion
source: https://www.securityfocus.com/bid/55189/info
KindEditor – ‘name’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/55172/info
Monstra CMS 1.2.1 – Multiple HTML Injection Vulnerabilities
Monstra 1.2.1 Multiple HTML Injection Vulnerabilities
SiNG cms – ‘Password.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/55168/info
WordPress Plugin Monsters Editor for WP Super Edit – Arbitrary File Upload
source: https://www.securityfocus.com/bid/55175/info
WordPress Plugin Rich Widget – Arbitrary File Upload
source: https://www.securityfocus.com/bid/55174/info
1024 CMS 2.1.1 – ‘p’ SQL Injection
source: https://www.securityfocus.com/bid/55170/info
Joomla! Component CiviCRM – Multiple Arbitrary File Upload Vulnerabilities
source: https://www.securityfocus.com/bid/55166/info