ProQuiz 2.0.2 – Multiple Vulnerabilities
####################################################
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
MobileCartly 1.0 – Arbitrary File Write
# -----------------------------------------------------------
WordPress Plugin Mz-jajak 2.1 – SQL Injection
# Exploit Title: WordPress Mz-jajak plugin query("UPDATE " . $table_name . " SET ".$answert."=".$answert."+1 WHERE id...
MobileCartly 1.0 – Arbitrary File Deletion
# Exploit Title: MobileCartly 1.0
GalaxyScripts Mini File Host and DaddyScripts Daddy’s File Host – Local File Inclusion
source: https://www.securityfocus.com/bid/54992/info
mIRC – ‘projects.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/54989/info
Hotel Booking Portal 0.1 – Multiple SQL Injections / Cross-Site Scripting
source: https://www.securityfocus.com/bid/54980/info
Cyclope Employee Surveillance Solution 6.0/6.1.0/6.2.0/6.2.1/6.3.0 – SQL Injection
# Author: loneferret of Offensive Security
IBM Proventia Network Mail Security System 2.5 – POST File Read
#!/usr/bin/python
xeams email server 4.4 build 5720 – Persistent Cross-Site Scripting
#!/usr/bin/python
winwebmail server 3.8.1.6 – Persistent Cross-Site Scripting
#!/usr/bin/python
Surgemail 6.0a4 – Persistent Cross-Site Scripting
#!/usr/bin/python
T-dah Webmail Client 3.2.0-2.3 – Persistent Cross-Site Scripting
#!/usr/bin/python
smartermail free 9.2 – Persistent Cross-Site Scripting
#!/usr/bin/python
WordPress Plugin simplemail 1.0.6 – Persistent Cross-Site Scripting
#!/usr/bin/python
WordPress Plugin postie 1.4.3 – Persistent Cross-Site Scripting
#!/usr/bin/python
Alt-N MDaemon free 12.5.4 – Persistent Cross-Site Scripting
#!/usr/bin/python
ManageEngine ServiceDesk Plus 8.1 – Persistent Cross-Site Scripting
#!/usr/bin/python
mailtraq 2.17.3.3150 – Persistent Cross-Site Scripting
#!/usr/bin/python
mailenable enterprise 6.5 – Persistent Cross-Site Scripting
#!/usr/bin/python
escon supportportal pro 3.0 – Persistent Cross-Site Scripting
#!/usr/bin/python
Axigen Mail Server 8.0.1 – Persistent Cross-Site Scripting
#!/usr/bin/python
Joomla! Component com_enmasse 1.2.0.4 – SQL Injection
# Exploit Title: Joomla com_enmasse Remote Exploit
dirLIST 0.3.0 – Local File Inclusion
source: https://www.securityfocus.com/bid/54933/info
PBBoard – ‘admin.php?xml_name’ Arbitrary PHP Code Execution
source: https://www.securityfocus.com/bid/54916/info
PBBoard – ‘member_id’ Validation Password Manipulation
source: https://www.securityfocus.com/bid/54916/info
PBBoard – ‘index.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/54916/info
phpList 2.10.18 – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/54912/info
AraDown – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/54891/info
phpList 2.10.18 – ‘unconfirmed’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/54887/info
ConcourseSuite – Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities
source: https://www.securityfocus.com/bid/54881/info
Getsimple CMS 3.1.2 – ‘path’ Local File Inclusion
source: https://www.securityfocus.com/bid/54866/info
PBBoard – Authentication Bypass
source: https://www.securityfocus.com/bid/54862/info
TCExam 11.2.x – ‘/admin/code/tce_edit_question.php?subject_module_id’ SQL Injection
source: https://www.securityfocus.com/bid/54861/info
TCExam 11.2.x – ‘/admin/code/tce_edit_answer.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/54861/info
Dir2web – ‘/system/src/dispatcher.php?oid’ SQL Injection
source: https://www.securityfocus.com/bid/54845/info
Zoho BugTracker – Multiple Persistent Cross-Site Scripting Vulnerabilities
Zoho BugTracker Multiple Stored XSS Vulnerabilities