Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_payload.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_maintenance.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_main.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_logout.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_local_rules.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_graph_main.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_graph_form.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_graph_display.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_graph_common.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_db_setup.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
Nova CMS – ‘/includes/function/usertpl.php?conf[blockfile]’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51976/info
Nova CMS – ‘/includes/function/gets.php?Filename’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51976/info
Nova CMS – ‘/optimizer/index.php?fileType’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51976/info
Nova CMS – ‘/administrator/modules/moduleslist.php?id’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51976/info
ProWiki – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/51987/info
RabbitWiki – ‘title’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/51971/info
Zen Cart 1.3.9h – ‘/path_to_admin/product.php’ Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/51968/info
CubeCart 3.0.20 – ‘switch.php?r’ Arbitrary Site Redirect
source: https://www.securityfocus.com/bid/51966/info
CubeCart 3.0.20 – ‘/admin/login.php?goto’ Arbitrary Site Redirect
source: https://www.securityfocus.com/bid/51966/info
CubeCart 3.0.20 – Multiple Script ‘redir’ Arbitrary Site Redirects
source: https://www.securityfocus.com/bid/51966/info
LxCenter Kloxo 6.1.10 – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/51964/info
Dolibarr ERP/CRM 3.x – ‘/adherents/fiche.php’ SQL Injection
source: https://www.securityfocus.com/bid/51956/info
Gazelle CMS 1.0 – Update Statement SQL Injection
# Exploit Title: Ananta Gazelle CMS - Update Statement Sql injection
Flyspray 0.9.9.6 – Cross-Site Request Forgery
#Exploit Title: Flyspray 0.9.9.6 CSRF Vulnerability
eFront 3.6.10 – ‘administrator.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/51894/info
ManageEngine ADManager Plus 5.2 Build 5210 – ‘domainName’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/51893/info
ManageEngine ADManager Plus 5.2 Build 5210 – ‘Operation’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/51893/info
Simple Groupware 0.742 – ‘export’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/51882/info
Vespa 0.8.6 – ‘getid3.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/51878/info
XRayCMS 1.1.1 – SQL Injection
# Exploit Title: XRayCMS 1.1.1 SQL Injection Vulnerability
Tube Ace (Adult PHP Tube Script) – SQL Injection
# Exploit Title: Tube Ace(Adult PHP Tube Script) SQL Injection
BASE 1.4.5 – ‘base_qry_main.php?t_view’ SQL Injection
# Exploit Title: BASE 1.4.5 SQL Injection Vulnerability
GAzie 5.20 – Cross-Site Request Forgery
========================================
PHP-Fusion 7.2.4 – ‘weblink_id’ SQL Injection
source: https://www.securityfocus.com/bid/51865/info
project-open 3.4.x – ‘account-closed.tcl’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/51842/info
Joomla! Component Currency Converter 1.0.0 – ‘from’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/51804/info
iknSupport ‘search’ Module – Cross-Site Scripting
source: https://www.securityfocus.com/bid/51803/info
Joomla! Component com_bnf – ‘seccion_id’ SQL Injection
source: https://www.securityfocus.com/bid/51802/info
GForge 5.7.1 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/51799/info
Apache Struts – Multiple Persistent Cross-Site Scripting Vulnerabilities
##############################################################################
Sphinix Mobile Web Server 3.1.2.47 – Multiple Persistent Cross-Site Scripting Vulnerabilities
##############################################################################
sit! support incident tracker 3.64 – Multiple Vulnerabilities
Advisory Details:
phpLDAPadmin 1.2.0.5-2 – ‘server_id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/51794/info
phpLDAPadmin 1.2.2 – ‘base’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/51793/info
OpenEMR 4.1 – ‘/Interface/fax/fax_dispatch.php?File’ ‘exec()’ Call Arbitrary Shell Command Execution
source: https://www.securityfocus.com/bid/51788/info