WordPress Plugin Share and Follow 1.80.3 – ‘admin.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53533/info
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WordPress Plugin Sharebar 1.2.1 – SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/53532/info
WordPress Plugin Pretty Link Lite 1.5.2 – SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/53531/info
WordPress Plugin WP Forum Server 1.7.3 – ‘/fs-admin/fs-admin.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53530/info
WordPress Plugin Mingle Forum 1.0.33 – ‘admin.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53529/info
WordPress Plugin GD Star Rating 1.9.16 – ‘tpl_section’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53527/info
WordPress Plugin Leaflet Maps Marker 0.0.1 – ‘leaflet_marker.php?id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53526/info
WordPress Plugin Leaflet Maps Marker 0.0.1 – ‘leaflet_layer.php?id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53526/info
WordPress Plugin LeagueManager 3.7 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53525/info
WordPress Plugin Media Library Categories – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53524/info
WordPress Plugin NewsLetter Manager 1.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53523/info
WordPress Plugin iFrame Admin Pages 0.1 – ‘main_page.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53522/info
WordPress Plugin 2 Click Social Media Buttons 0.32.2 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53521/info
WordPress Plugin CataBlog 1.6 – ‘admin.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53520/info
WordPress Plugin PDF & Print Button Joliprint 1.3.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53519/info
WordPress Plugin Network Publisher 5.0.1 – ‘networkpub_key’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53516/info
WordPress Plugin Dynamic Widgets 1.5.1 – ‘themes.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53513/info
WordPress Plugin GRAND Flash Album Gallery 1.71 – ‘admin.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53511/info
WordPress Plugin WP-FaceThumb 0.1 – ‘pagination_wp_facethum’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53497/info
Liferay Portal 6.0.x < 6.1 - Privilege Escalation
Liferay users can assign themselves to organizations, leading to
Galette – ‘picture.php’ SQL Injection
source: https://www.securityfocus.com/bid/53463/info
Sockso 1.51 – Persistent Cross-Site Scripting
#######################################################################
Belkin N150 Wireless Router – Password Disclosure
============================================
eLearning server 4g – Multiple Vulnerabilities
# Exploit Title: eLearning Server Multiple Remote Vulnerabilities
Kerio WinRoute Firewall Web Server < 6 - Source Code Disclosure
# Exploit Title: Kerio WinRoute Firewall Embedded Web ServerVersion: Source
Chevereto 1.91 – ‘/Upload/engine.php?v’ Traversal Arbitrary File Enumeration
source: https://www.securityfocus.com/bid/53448/info
Chevereto 1.91 – ‘/Upload/engine.php?v’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53448/info
PivotX 2.3.2 – ‘ajaxhelper.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53434/info
OrangeHRM 2.7 RC – ‘index.php?URI’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53433/info
OrangeHRM 2.7 RC – ‘/templates/hrfunct/emppop.php?sortOrder1’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53433/info
OrangeHRM 2.7 RC – ‘/plugins/ajaxCalls/haltResumeHsp.php?newHspStatus’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53433/info
OrangeHRM 2.7 RC – ‘/plugins/ajaxCalls/haltResumeHsp.php?hspSummaryId’ SQL Injection
source: https://www.securityfocus.com/bid/53433/info
X7 Chat 2.0.5.1 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit
S9Y Serendipity 1.6 – ‘Backend’ Cross-Site Scripting / SQL Injection
Advisory: Serendipity 1.6 Backend Cross-Site Scripting and SQL-Injection vulnerability
PHP Enter 4.1.2 – ‘banners.php’ PHP Code Injection
source: https://www.securityfocus.com/bid/53426/info
JibberBook 2.3 – ‘Login_form.php’ Authentication Bypass
source: https://www.securityfocus.com/bid/53413/info
Ramui Forum Script – ‘query’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/53411/info
Trombinoscope 3.x – ‘photo.php’ Server SQL Injection
source: https://www.securityfocus.com/bid/53398/info
PHP Agenda 2.2.8 – SQL Injection
# Title:Simple PHP Agenda 2.2.8 SQLi Vulnerability
Fortinet FortiWeb Web Application Firewall – Policy Bypass
BINAR10 Report on Fortinet Fortiweb Findings 02/05/2012
Schneider Electric Telecontrol Kerweb 3.0.0/6.0.0 – ‘kw.dll’ HTML Injection
source: https://www.securityfocus.com/bid/53409/info