e-ticketing – SQL Injection
'e-ticketing' SQL Injection (CVE-2012-1673)
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Plume CMS 1.2.4 – Multiple Persistent Cross-Site Scripting Vulnerabilities
+--------------------------------------------------------------------------------------------------------------------...
vBulletin 4.1.10 – ‘announcementid’ SQL Injection
source: https://www.securityfocus.com/bid/52897/info
osCMax 2.5 – ‘/admin/stats_monthly_sales.php?status’ SQL Injection
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/login.php?Username’ SQL Injection
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/new_attributes_include.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/geo_zones.php?zID’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/information_manager.php?information_id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/stats_customers.php?sorted’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/stats_monthly_sales.php?status’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/stats_products_purchased.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/xsell.php?search’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/htaccess.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52886/info
osCMax 2.5 – ‘/admin/login.php?Username’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52886/info
Simple PHP Agenda 2.2.8 – Cross-Site Request Forgery (Add Admin / Add Event)
+--------------------------------------------------------------------------------------------------------------------...
JBMC Software DirectAdmin 1.403 – ‘domain’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52845/info
FlatnuX CMS – Cross-Site Request Forgery (Add Admin)
source: https://www.securityfocus.com/bid/52846/info
FlatnuX CMS – Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/52846/info
ManageEngine Firewall Analyzer 7.2 – ‘fw/syslogViewer.do?port’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52841/info
ManageEngine Firewall Analyzer 7.2 – ‘fw/mindex.do?url’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52841/info
ManageEngine Firewall Analyzer 7.2 – ‘fw/createAnomaly.do?subTab’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52841/info
ManageEngine Firewall Analyzer 7.2 – ‘/fw/index2.do’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52841/info
WordPress Plugin BuddyPress Plugin 1.5.x < 1.5.5 - SQL Injection
# Exploit Title: Buddypress plugin of Wordpress remote SQL Injection
Woltlab Burning Board 2.2/2.3 [WN]KT KickTipp 3.1 – SQL Injection
========================================================================================
SyndeoCMS 3.0.01 – Persistent Cross-Site Scripting
+--------------------------------------------------------------------------------------------------------------------...
dalbum 144 build 174 – Cross-Site Request Forgery
dalbum 144 build 174 and earlier CSRF Vulnerabilities
ArticleSetup – Multiple Persistence Cross-Site Scripting / SQL Injections
##############################################################################
coppermine 1.5.18 – Multiple Vulnerabilities
[waraxe-2012-SA#081] - Multiple Vulnerabilities in Coppermine 1.5.18
JamWiki 1.1.5 – ‘num’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52829/info
e107 1.0 – ‘view’ SQL Injection
source: https://www.securityfocus.com/bid/52821/info
PHP Designer 2007 Personal – Multiple SQL Injections
source: https://www.securityfocus.com/bid/52819/info
Simple Machines Forum (SMF) 2.0.2 – ‘scheduled’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52822/info
EZ Publish 4.x ‘ezjscore’ Module – Cross-Site Scripting
source: https://www.securityfocus.com/bid/52807/info
EasyPHP – ‘main.php’ SQL Injection
source: https://www.securityfocus.com/bid/52781/info
ocPortal 7.1.5 – ‘code_editor.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52768/info
TomatoCart 1.2.0 Alpha 2 – ‘json.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/52766/info
Invision Power Board (IP.Board) 4.2.1 – ‘searchText’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52740/info
WordPress Plugin Integrator 1.32 – ‘redirect_to’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52739/info
BoastMachine 3.1 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: boastMachine v3.1
PicoPublisher 2.0 – SQL Injection
# Exploit Title : PicoPublisher v2.0 Remote SQL injection
Matthew1471 BlogX – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52730/info
NextBBS 0.6 – ‘index.php?do’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52728/info
NextBBS 0.6 – ‘ajaxserver.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/52728/info
Geeklog 1.8.1 – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/52725/info
vBshop – Multiple Persistent Cross-Site Scripting Vulnerabilities
# Exploit Title: vBshop persistent XSS 0day
Family CMS 2.9 – Multiple Vulnerabilities
Family CMS 2.9 and earlier multiple Vulnerabilities
Zumset.com FbiLike 1.00 – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52720/info
Event Calendar PHP – ‘cal_year’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52701/info