Yealink VOIP Phone – Persistent Cross-Site Scripting
==============================================================
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WebfolioCMS 1.1.4 – Cross-Site Request Forgery (Add Admin/Modify Pages)
+--------------------------------------------------------------------------------------------------------------------...
Fork CMS 3.x – ‘/backend/modules/error/actions/index.php?parse()’ Multiple Error Display Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52236/info
Fork CMS 3.x – ‘/private/en/locale/index?name’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52236/info
OSQA’s CMS – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/52184/info
Bontq – ‘user/’ URI Cross-Site Scripting
source: https://www.securityfocus.com/bid/52183/info
Webglimpse 2.x – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52170/info
MyJobList 0.1.3 – ‘eid’ SQL Injection
source: https://www.securityfocus.com/bid/52168/info
ContaoCMS (aka TYPOlight) 2.11 – Cross-Site Request Forgery (Delete Admin / Delete Article)
+--------------------------------------------------------------------------------------------------------------------...
YVS Image Gallery – SQL Injection
-=[+] Application: YVS Image Gallery
webgrind 1.0 – ‘file’ Local File Inclusion
webgrind 1.0 (file param) Local File Inclusion Vulnerability
cPassMan 1.82 – Remote Command Execution
Product. Collaborative Passwords Manager (cPassMan)
PHP Gift Registry 1.5.5 – SQL Injection
# Exploit Title: PHP Gift Registry 1.5.5 SQL Injection
Snom IP Phone – Privilege Escalation
Sense of Security - Security Advisory - SOS-12-001
phpDenora 1.4.6 – Multiple SQL Injections
############################################################
Mobile Mp3 Search Script 2.0 – ‘dl.php’ HTTP Response Splitting
source: https://www.securityfocus.com/bid/52136/info
Oxwall 1.1.1 – ‘plugin’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52125/info
Chyrp 2.1.2 – ‘/includes/error.php?body’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52117/info
Chyrp 2.1.1 – ‘ajax.php’ HTML Injection
source: https://www.securityfocus.com/bid/52115/info
Dolibarr ERP/CRM 3.2 Alpha – Multiple Directory Traversal Vulnerabilities
source: https://www.securityfocus.com/bid/52113/info
ContentLion Alpha 1.3 – ‘login.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52112/info
DFLabs PTK 1.0.5 – Steal Authentication Credentials
+--------------------------------------------------------------------------------------------------------------------...
D-Link DSL-2640B ADSL Router – Authentication Bypass
+--------------------------------------------------------------------------------------------------------------------...
WebcamXP and webcam 7 – Directory Traversal
# Exploit Title: WebcamXP and Webcam7 Directory Traversal Vulnerability
D-Link DCS Series – Cross-Site Request Forgery (Change Admin Password)
Title: Dlink DCS series CSRF Change Admin Password
LimeSurvey (PHPSurveyor 1.91+ stable) – Blind SQL Injection
# Exploit Title: LimeSurvey Blind SQL injection
Brim < 2.0.0 - SQL Injection
BRIM < 2.0.0 SQL InjectionExploit information
Sagem F@ST 2604 ADSL Router – Cross-Site Request Forgery
================================================================================
Fork CMS 3.2.5 – Multiple Vulnerabilities
+--------------------------------------------------------------------------------------------------------------------...
Cisco Linksys WAG54GS – Cross-Site Request Forgery (Change Admin Password)
+--------------------------------------------------------------------------------------------------------------------...
CPG Dragonfly CMS 9.3.3.0 – Multiple Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52100/info
Xavi 7968 ADSL Router – ‘/webconfig/lan/lan_config.html/local_lan_config?host_name_txtbox’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52098/info
Dolphin 7.0.x – ‘explanation.php?explain’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52088/info
Dolphin 7.0.x – ‘viewFriends.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52088/info
Joomla! Component Machine – Multiple SQL Injections
source: https://www.securityfocus.com/bid/52095/info
TestLink – Multiple SQL Injections
source: https://www.securityfocus.com/bid/52086/info
F*EX 20100208/20111129-2 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52085/info
VOXTRONIC Voxlog Professional 3.7.x – ‘userlogdetail.php?idclient’ SQL Injection
source: https://www.securityfocus.com/bid/52081/info
VOXTRONIC Voxlog Professional 3.7.x – ‘get.php?v’ Arbitrary File Access
source: https://www.securityfocus.com/bid/52081/info
Plume CMS 1.2.4 – Cross-Site Request Forgery
+--------------------------------------------------------------------------------------------------------------------...
D-Link DSL-2640B ADSL Router – Cross-Site Request Forgery
+--------------------------------------------------------------------------------------------------------------------...
SyndeoCMS 3.0 – Cross-Site Request Forgery
+--------------------------------------------------------------------------------------------------------------------...
4PSA CMS – SQL Injection
#################################################################################
almnzm 2.4 – Cross-Site Request Forgery (Add Admin)
# Title: almnzm 2.4 >
Joomla! Component com_xvs – ‘Controller’ Local File Inclusion
source: https://www.securityfocus.com/bid/52091/info
Tiki Wiki CMS Groupware – ‘url’ Open Redirection
source: https://www.securityfocus.com/bid/52079/info
Joomla! Component com_xcomp – Local File Inclusion
source: https://www.securityfocus.com/bid/52078/info
Joomla! Component com_x-shop – ‘idd’ SQL Injection
source: https://www.securityfocus.com/bid/52077/info
JaWiki – ‘versionNo’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52060/info