Virtual Vertex Muster 6.1.6 – Web Interface Directory Traversal
source: https://www.securityfocus.com/bid/50841/info
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Manx 1.0.1 – ‘/admin/admin_pages.php?Filename’ Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/50839/info
Manx 1.0.1 – ‘/admin/admin_blocks.php?Filename’ Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/50839/info
Manx 1.0.1 – ‘/admin/tiny_mce/plugins/ajaxfilemanager_OLD/ajax_get_file_listing.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50839/info
Manx 1.0.1 – ‘/admin/tiny_mce/plugins/ajaxfilemanager/ajax_get_file_listing.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50839/info
WordPress Plugin Skysa App Bar – ‘idnews’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50824/info
JQuery-Real-Person plugin – Bypass Captcha
# Exploit Title: Bypass the JQuery-Real-Person captcha plugin
eSyndiCat Pro 2.3.5 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50822/info
PHP video script – SQL Injection
######################################################
Zabbix 1.8.4 – ‘popup.php’ SQL Injection
# Exploit Title: Zabbix
LibLime Koha 4.2 – Local File Inclusion
# Exploit Title: [Koha Opac Local File Inclusion]
HP Network Node Manager (NMM) i 9.10 – ‘nnm/protected/traceroute.jsp?nodename’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50806/info
HP Network Node Manager (NMM) i 9.10 – ‘nnm/protected/statuspoll.jsp?nodename’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50806/info
HP Network Node Manager (NMM) i 9.10 – ‘nnm/protected/ping.jsp?nodename’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50806/info
HP Network Node Manager (NMM) i 9.10 – ‘nnm/protected/configurationpoll.jsp?nodename’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50806/info
HP Network Node Manager (NMM) i 9.10 – ‘/nnm/mibdiscover?node’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50806/info
Balitbang CMS 3.3 – ‘alumni.php?hal’ SQL Injection
source: https://www.securityfocus.com/bid/50797/info
Balitbang CMS 3.3 – ‘index.php?hal’ SQL Injection
source: https://www.securityfocus.com/bid/50797/info
AdaptCMS 2.0 – SQL Injection
source: https://www.securityfocus.com/bid/50795/info
Pro Clan Manager 0.4.2 – SQL Injection
source: https://www.securityfocus.com/bid/50794/info
Zen Cart CMS 1.3.9h – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50787/info
Prestashop 1.4.4.1 – ‘displayImage.php’ HTTP Response Splitting
source: https://www.securityfocus.com/bid/50785/info
PrestaShop 1.4.4.1 – ‘/admin/ajaxfilemanager/ajax_save_text.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50784/info
PrestaShop 1.4.4.1 – ‘/modules/mondialrelay/kit_mondialrelay/SuiviExpedition_ajax.php?Expedition’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50784/info
PrestaShop 1.4.4.1 – ‘/modules/mondialrelay/googlemap.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50784/info
PrestaShop 1.4.4.1 mondialrelay (kit_mondialrelay) – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50784/info
WordPress Plugin NewsLetter Meenews 5.1 – ‘idnews’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50783/info
WordPress Plugin Featurific For WordPress 1.6.2 – ‘snum’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50779/info
WordPress Plugin ClickDesk Live Support 2.0 – ‘cdwidget’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50778/info
Dolibarr ERP/CRM 3.1.0 – ‘/admin/boxes.php?rowid’ SQL Injection
source: https://www.securityfocus.com/bid/50777/info
Dolibarr ERP/CRM 3.1.0 – ‘/user/info.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/50777/info
Dolibarr ERP/CRM 3.1.0 – ‘/user/index.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/50777/info
Dolibarr ERP/CRM 3.1 – Multiple Script URI Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50777/info
PHP-Nuke 8.1.0.3.5b – ‘Downloads’ Blind SQL Injection
#!/usr/bin/perl
Hastymail2 – ‘rs’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50789/info
TA.CMS (TeachArabia) – ‘lang’ Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/50773/info
TA.CMS (TeachArabia) – ‘index.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/50773/info
WordPress Plugin Lanoba Social 1.0 – ‘action’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50746/info
WordPress Plugin Adminimize 1.7.21 – ‘page’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50745/info
WordPress Plugin Advanced Text Widget 2.0 – ‘page’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50744/info
WordPress Plugin Alert Before Your Post – ‘name’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50743/info
Digital Attic Foundation CMS – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/50735/info
ARASTAR – SQL Injection
+#######+
Blogs manager 1.101 – SQL Injection
------------------------------------------------------------------------
Valid tiny-erp 1.6 – SQL Injection
------------------------------------------------------------------------
Freelancer Calendar 1.01 – SQL Injection
------------------------------------------------------------------------