Saman Portal – Local File Inclusion
===========================================================
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Zend Server 5.6.0 – Multiple Remote Script Insertion Vulnerabilities
Zend Server 5.6.0 Multiple Remote Script Insertion Vulnerabilities
Wikidforum 2.10 – Advanced Search Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52425/info
Wikidforum 2.10 – Search Field Cross-Site Scripting
source: https://www.securityfocus.com/bid/52425/info
Wikidforum 2.10 – Advanced Search Multiple Field SQL Injections
source: https://www.securityfocus.com/bid/52425/info
Synology Photo Station 5 DSM 3.2 – ‘photo_one.php’ Script Cross-Site Scripting
source: https://www.securityfocus.com/bid/52416/info
CreateVision CMS – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/52648/info
EJBCA 4.0.7 – ‘issuer’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52400/info
Singapore 0.10.1 – ‘gallery’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52399/info
PHP Address Book 6.2.12 – Multiple Vulnerabilities
Advisory: PHP Address Book 6.2.12 Multiple security vulnerabilities
PHPMyVisites 2.4 – ‘PHPmv2/index.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52377/info
SAP Business Objects InfoView System – ‘/webi/webi_modify.aspx?id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52361/info
SAP Business Objects InfoView System – ‘/help/helpredir.aspx?guide’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52361/info
SAP Business Objects InfoVew System – ‘listing.aspx?searchText’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52361/info
Ilient SysAid 8.5.5 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/52356/info
ToendaCMS 1.6.2 – ‘/setup/index.php?site’ Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/52350/info
LeKommerce – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/52347/info
RazorCMS 1.2.1 Stable – Cross-Site Request Forgery (Delete Web Pages)
+--------------------------------------------------------------------------------------------------------------------...
RazorCMS 1.2.1 STABLE – Arbitrary File Upload
# Exploit Title: RazorCMS
promise webpam 2.2.0.13 – Multiple Vulnerabilities
Promise WebPAM v2.2.0.13 Multiple Remote Vulnerabilities
HomeSeer HS2 and HomeSeer PRO – Multiple Vulnerabilities
# HomeSeer Home Automation Software Multiple Web Vulnerabilities (0day)
Iciniti Store – SQL Injection
Sense of Security - Security Advisory - SOS-12-003
OSClass 2.3.x – Directory Traversal / Arbitrary File Upload
source: https://www.securityfocus.com/bid/52336/info
Exponent CMS 2.0 – ‘src’ SQL Injection
source: https://www.securityfocus.com/bid/52328/info
Fork CMS 3.2.x – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/52319/info
Joomla! 2.5.1 – ‘redirect.php’ Blind SQL Injection
source: https://www.securityfocus.com/bid/52312/info
11in1 CMS 1.2.1 – ‘admin/tps?id’ SQL Injection
source: https://www.securityfocus.com/bid/52306/info
11in1 CMS 1.2.1 – ‘admin/comments?topicID’ SQL Injection
source: https://www.securityfocus.com/bid/52306/info
Open Realty 2.5.x – ‘select_users_template’ Local File Inclusion
source: https://www.securityfocus.com/bid/52296/info
Etano 1.20/1.22 – ‘photo_view.php?return’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52295/info
Etano 1.20/1.22 – ‘photo_search.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52295/info
Etano 1.20/1.22 – ‘search.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52295/info
lizard cart – ‘search.php’ SQL Injection
# Exploit Title: [lizard cart SQLi (search.php)]
Symfony2 – Local File Disclosure
Sense of Security - Security Advisory - SOS-12-002
AneCMS 2e2c583 – Local File Inclusion
# Exploit Title: AneCMS v.2e2c583 LFI exploit
DZCP (deV!L`z Clanportal) Witze Addon 0.9 – SQL Injection
========================================================================================
LastGuru ASP Guestbook – ‘View.asp’ SQL Injection
source: https://www.securityfocus.com/bid/52293/info
Timesheet Next Gen 1.5.2 – Multiple SQL Injections
# Exploit Title: Timesheet Next Gen 1.5.2 Multiple SQLi
Rivettracker 1.03 – Multiple SQL Injections
# Exploit Title: Multiple SQL injections in rivettracker
Drupal 7.12 – Multiple Vulnerabilities
+--------------------------------------------------------------------------------------------------------------------...
phxEventManager 2.0 Beta 5 – ‘search.php’ search_terms SQL Injection
# Exploit Title: phxEventManager 2.0 beta 5 search.php search_terms SQL
starCMS – ‘q’ URI Cross-Site Scripting
source: https://www.securityfocus.com/bid/52262/info
Traidnt Topics Viewer 2.0 – ‘main.php’ Cross-Site Request Forgery
# source: https://www.securityfocus.com/bid/52224/info
Dotclear 2.4.1.2 – ‘/admin/plugin.php?page’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52221/info
Dotclear 2.4.1.2 – ‘/admin/comments.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52221/info
Dotclear 2.4.1.2 – ‘/admin/blogs.php?nb’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52221/info
Dotclear 2.4.1.2 – ‘/admin/auth.php?login_data’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52221/info
ImgPals Photo Host 1.0 – Admin Account Disactivation
-=[--------------------ADVISORY-------------------]=-