PHP Volunteer Management System 1.0.2 – Multiple SQL Injections
# Title: PHP Volunteer Management System v 1.0.2 multiple SQLi Vulnerabilities
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
PHP Volunteer Management System 1.0.2 – Multiple Vulnerabilities
# Exploit Title: PHP Volunteer Management System v 1.0.2 Multiple Vulnerabilities
PBBoard 2.1.4 – Local File Inclusion
################################################################################################
b2ePms 1.0 – Multiple SQL Injection Vulnerabilities
# Title: b2ePMS 1.0 multiple SQLi Vulnerabilities
Nilehoster Topics Viewer 2.3 – Multiple SQL Injections / Local File Inclusion
source: https://www.securityfocus.com/bid/53708/info
AzDGDatingMedium 1.9.3 – Multiple Remote Vulnerabilities
source: https://www.securityfocus.com/bid/53692/info
Small-Cms – ‘hostname’ Remote PHP Code Injection
source: https://www.securityfocus.com/bid/53703/info
phpList 2.10.9 – ‘Sajax.php’ PHP Code Injection
source: https://www.securityfocus.com/bid/53693/info
SocialEngine 4.2.2 – Multiple Vulnerabilities
Social Engine 4.2.2 Multiples Vulnerabilities
DynPage 1.0 – ‘ckfinder’ Multiple Arbitrary File Upload Vulnerabilities
source: https://www.securityfocus.com/bid/53696/info
phpCollab 2.5 – Direct Request Multiple Protected Page Access
source: https://www.securityfocus.com/bid/53675/info
PHPCollab 2.5 – ‘uploadfile.php’ Crafted Request Arbitrary Non-PHP File Upload
source: https://www.securityfocus.com/bid/53675/info
Jaow 2.4.5 – Blind SQL Injection
# Exploit Title: Jaow
Yellow Duck Framework 2.0 Beta1 – Local File Disclosure
source: https://www.securityfocus.com/bid/53674/info
pragmaMx 1.12.1 – ‘/includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php?img_url’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53669/info
pragmaMx 1.12.1 – ‘modules.php’ URI Cross-Site Scripting
source: https://www.securityfocus.com/bid/53669/info
Pligg CMS 1.x – ‘module.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53662/info
Ajaxmint Gallery 1.0 – Local File Inclusion
source: https://www.securityfocus.com/bid/53659/info
phpCollab 2.5 – Database Backup Information Disclosure
source: https://www.securityfocus.com/bid/53656/info
Ruubikcms 1.1.x – Cross-Site Scripting / Information Disclosure / Directory Traversal
source: https://www.securityfocus.com/bid/53655/info
Plogger Photo Gallery – SQL Injection
source: https://www.securityfocus.com/bid/53644/info
PHPhq.Net phAlbum 1.5.1 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53648/info
Yandex.Server 2010 9.0 – ‘text’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53622/info
Acuity CMS 2.6.2 – ‘/admin/file_manager/browse.asp?path’ Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/53616/info
Acuity CMS 2.6.2 – ‘/admin/file_manager/file_upload_submit.asp’ Multiple Arbitrary File Upload / Code Executions
source: https://www.securityfocus.com/bid/53616/info
Vanilla FirstLastNames 1.3.2 Plugin – Persistent Cross-Site Scripting
# Title: Vanilla FirstLastNames 1.3.2 Plugin Persistant XSS Vulnerability
Vanilla Forums About Me Plugin – Persistent Cross-Site Scripting
# Title: Vanilla About Me Plugin Persistant XSS Vulnerability
AZ Photo Album – Cross-Site Scripting / Arbitrary File Upload
source: https://www.securityfocus.com/bid/53641/info
Concrete5 CMS FlashUploader – Arbitrary ‘.SWF’ File Upload
source: https://www.securityfocus.com/bid/53640/info
Concrete CMS < 5.5.21 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/53640/info
FreeNAC 3.02 – SQL Injection / Cross-Site Scripting
FreeNAC version 3.02 SQL Injection and XSS Vulnerabilties
PHP Address Book 7.0.0 – Multiple Vulnerabilities
##################################################################################
Vanilla Forums LatestComment 1.1 Plugin – Persistent Cross-Site Scripting
# Title: Vanilla LatestComment 1.1 Plugin Persistant XSS Vulnerability
Atlassian JIRA FishEye 2.5.7 / Crucible 2.5.7 Plugins – XML Parsing Security
source: https://www.securityfocus.com/bid/53603/info
PHP Address Book 7.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53598/info
ArtiPHP 5.5.0 Neo – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53586/info
Unijimpe Captcha – ‘captchademo.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53585/info
backupDB() 1.2.7a – ‘onlyDB’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53575/info
SiliSoftware PHPThumb() 1.7.11-201108081537 – ‘/demo/PHPThumb.demo.random.php?dir’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53572/info
SiliSoftware PHPThumb() 1.7.11-201108081537 – ‘/demo/PHPThumb.demo.showpic.php?title’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53572/info
LongTail JW Player – ‘debug’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53554/info
Axous 1.1.1 – Cross-Site Request Forgery / Persistent Cross-Site Scripting
+-----------------------------------------------------------------------------------------------------------+
b2ePms 1.0 – Authentication Bypass
#################################################
WordPress Plugin Track That Stat 1.0.8 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/53551/info
WordPress Plugin Soundcloud Is Gold 2.1 – ‘width’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53537/info