YT-Videos Script – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/54859/info
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Joomla! Component com_photo – Multiple SQL Injections
source: https://www.securityfocus.com/bid/54814/info
Worksforweb iAuto – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/54812/info
Mibew Messenger 1.6.4 – ‘threadid’ SQL Injection
source: https://www.securityfocus.com/bid/54857/info
PolarisCMS – ‘WebForm_OnSubmit()’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/54817/info
WordPress Plugin Effective Lead Management 3.0.0 – Persistent Cross-Site Scripting
# Exploit Title: WP Lead Management v3.0.0 Persistent XSS
Tickets CAD 2.20G – Multiple Vulnerabilities
# Exploit Title: Tickets CAD 2.20G Multiple Vulnerabilities
Wiki Web Help – ‘configpath’ Remote File Inclusion
source: https://www.securityfocus.com/bid/55387/info
Open Constructor – ‘confirm.php?q’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/54822/info
Open Constructor – ‘/data/file/edit.php?result’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/54822/info
Open Constructor – ‘/users/users.php?keyword’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/54822/info
Elefant CMS – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/54805/info
ntop – ‘arbfile’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/54792/info
WordPress Theme ShopperPress – SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/55062/info
Mahara 1.4.1 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/54776/info
am4ss 1.2 – Multiple Vulnerabilities
###########################################
Joomla! Component com_joomgalaxy 1.2.0.4 – Multiple Vulnerabilities
_______________________________________________________________________________________
Joomla! Component com_movm – SQL Injection
_______________________________________________________________________________________
Joomla! Component com_niceajaxpoll 1.3.0 – SQL Injection
############################################################
tekno.Portal 0.1b – ‘link.php’ SQL Injection
source: https://www.securityfocus.com/bid/54786/info
WordPress Plugin G-Lock Double Opt-in Manager – SQL Injection
source: https://www.securityfocus.com/bid/54767/info
ManageEngine Applications Manager – Multiple Cross-Site Scripting / SQL Injections
source: https://www.securityfocus.com/bid/54759/info
Distimo Monitor – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/54757/info
ManageEngine Applications Manager – Multiple SQL Injections
source: https://www.securityfocus.com/bid/54756/info
Limny – ‘index.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/54753/info
DataWatch Monarch Business Intelligence – Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/54733/info
Dr. Web Control Center 6.00.3.201111300 – Cross-Site Scripting
Dr. Web Control Center Admin UI Remote Script Code Injection
Zenoss 3.2.1 – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/54793/info
Zenoss 3.2.1 – (Authenticated) Remote Command Execution
source: https://www.securityfocus.com/bid/54793/info
Scrutinizer 9.0.1.19899 – HTTP Authentication Bypass
source: https://www.securityfocus.com/bid/54727/info
Scrutinizer 9.0.1.19899 – Arbitrary File Upload
source: https://www.securityfocus.com/bid/54726/info
Scrutinizer 9.0.1.19899 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/54725/info
eNdonesia – ‘cid’ SQL Injection
source: https://www.securityfocus.com/bid/54741/info
JW Player – ‘playerready’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/54739/info
ocPortal 7.1.5 – ‘redirect’ Open Redirection
source: https://www.securityfocus.com/bid/54715/info
phpBB – Multiple SQL Injections
source: https://www.securityfocus.com/bid/54734/info
tekno.Portal 0.1b – ‘anket.php’ SQL Injection
source: https://www.securityfocus.com/bid/54698/info
Joomla! Component Odudeprofile 2.8 – ‘profession’ SQL Injection
source: https://www.securityfocus.com/bid/54677/info
phpProfiles – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/54660/info
Zabbix 2.0.1 – Session Extractor
#!/usr/bin/python
WordPress Plugin Front End Upload 0.5.4.4 – Arbitrary ‘.PHP’ File Upload
# Exploit Title: WordPress Front End Upload v0.5.4.4 Arbitrary PHP File Upload Vulnerability