Webspell FIRSTBORN Movie-Addon – Blind SQL Injection
========================================================================================
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WordPress Plugin Omni Secure Files 0.1.13 – Arbitrary File Upload
# Exploit Title: Wordpress Omni-secure-files 0.1.13 Arbitrary File Upload
WordPress Plugin Front End Upload 0.5.3 – Arbitrary File Upload
# Exploit Title: Wordpress front-end-upload 0.5.3 Arbitrary File Upload
SN News 1.2 – ‘/admin/loger.php’ Authentication Bypass
##############################################################################
WordPress Plugin FCChat Widget 2.2.x – ‘upload.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/53855/info
WordPress Plugin VideoWhisper Video Presentation 3.17 – ‘vw_upload.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/53851/info
WordPress Plugin Email NewsLetter 8.0 – ‘option’ Information Disclosure
source: https://www.securityfocus.com/bid/53850/info
MyBB 1.6.8 – ‘member.php’ SQL Injection
source: https://www.securityfocus.com/bid/53814/info
vanilla kpoll plugin 1.2 – Persistent Cross-Site Scripting
# Title: Vanilla kPoll 1.2 Stored XSS
WordPress Plugin Gallery 3.06 – Arbitrary File Upload
##################################################
WordPress Plugin MM Forms Community 2.2.6 – Arbitrary File Upload
##################################################
WordPress Plugin Font Uploader 1.2.4 – Arbitrary File Upload
##################################################
WordPress Plugin Asset Manager 0.2 – Arbitrary File Upload
##################################################
WordPress Plugin Foxypress 0.4.1.1 < 0.4.2.1 - Arbitrary File Upload
##################################################
WordPress Plugin HTML5 AV Manager 0.2.7 – Arbitrary File Upload
##################################################
WordPress Plugin Google Maps via Store Locator 2.7.1 < 3.0.1 - Multiple Vulnerabilities
##################################################
WordPress Plugin Marketplace Plugin 1.5.0 < 1.6.1 - Arbitrary File Upload
##################################################
WordPress Plugin WP-Property 1.35.0 – Arbitrary File Upload
##################################################
pyrocms 2.1.1 – Multiple Vulnerabilities
PyroCMS 2.1.1 CRLF Injection And Stored XSS Vulnerability
Bigware Shop 2.1x – ‘main_bigware_54.php’ SQL Injection
source: https://www.securityfocus.com/bid/53810/info
Hexamail Server 4.4.5 – Persistent Cross-Site Scripting
#Title: Hexamail Server meal.txt
Vanilla Forums 2.0.18.4 – Tagging Persistent Cross-Site Scripting
# Title: Vanilla Tagging Stored XSS
vanilla forums poll plugin 0.9 – Persistent Cross-Site Scripting
# Title: Vanilla Poll 0.9 Stored XSS
WordPress Plugin Picturesurf Gallery – ‘upload.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/53894/info
Ignite Solutions CMS – ‘car-details.php’ SQL Injection
source: https://www.securityfocus.com/bid/53771/info
AdaptCMS 2.0.2 TinyURL Plugin – ‘admin.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/53764/info
AdaptCMS 2.0.2 TinyURL Plugin – ‘index.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/53764/info
TinyCMS 1.3 – ‘/admin/admin.php?do’ Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/53761/info
TinyCMS 1.3 – ‘index.php?page’ Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/53761/info
TinyCMS 1.3 – Arbitrary File Upload / Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/53761/info
Vanilla Forum Tagging Plugin Enchanced 1.0.1 – Persistent Cross-Site Scripting
# Title: Vanilla Tagging Enchanced 1.0.1 Stored XSS
Membris 2.0.1 – Multiple Vulnerabilities
###################################
4PSA VoIPNow Professional 2.5.3 – Multiple Vulnerabilities
4PSA VoipNow Professional 2.5.3 Reflected XSS / CSRF (Add Reseller) Vulnerabilities
VoipNow Professional 2.5.3 – ‘nsextt’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53759/info
PHP4dvd – ‘config.php’ PHP Code Injection
source: https://www.securityfocus.com/bid/60257/info
WHMCompleteSolution (WHMCS) 5.0 – ‘KnowledgeBase.php?search’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53740/info
WHMCompleteSolution (WHMCS) 5.0 – Cross-Site Request Forgery (Multiple Application Function)
source: https://www.securityfocus.com/bid/53740/info
Supernews 2.6.1 – ‘noticias.php?cat’ SQL Injection
##########################################################################
NewsAdd 1.0 – ‘lerNoticia.php?id’ SQL Injection
##########################################################################
Simple Web Content Management System 1.1 < 1.3 - Multiple SQL Injections
######################################################################################
Ganesha Digital Library 4.0 – Multiple Vulnerabilities
=====================================================
NewsAdd 1.0 – Multiple SQL Injections
# Exploit Title: NewsAdd
PBBoard 2.1.4 – Multiple SQL Injections
# Title: PBBoard v2.1.4 multiple SQLi Vulnerabilities
WHMCompleteSolution (WHMCS) – ‘boleto_bb.php’ SQL Injection
source: https://www.securityfocus.com/bid/53711/info
Yamamah Photo Gallery 1.1 – Database Information Disclosure
source: https://www.securityfocus.com/bid/53709/info