webapps

Openemr-4.1.0 – SQL Injection

# Exploit Title: [Openemr-4.1.0 SQL injection Vulnerability]

Yet Another CMS 1.0 – SQL Injection / Cross-Site Scripting

Advisory: Yet Another CMS 1.0 SQL Injection & XSS vulnerabilities

Joomla! Plugin NoNumber Framework – Multiple Vulnerabilities

# Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities

Dolphin 7.0.7 – ‘member_menu_queries.php’ Remote PHP Code Injection

Site@School 2.4.10 – ‘/index.php’ Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/50195/info

asgbookPHP 1.9 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50167/info

GNUBoard 4.33.02 – ‘tp.php?PATH_INFO’ SQL Injection

# Exploit Title: Gnuboard

Dominant Creature BBG/RPG Browser Game – Persistent Cross-Site Scripting

===================================================================================

WordPress Plugin BackWPUp 2.1.4 – Code Execution

Sense of Security - Security Advisory - SOS-11-012

Ruubikcms 1.1.0 – ‘/extra/image.php’ Local File Inclusion

# Exploit Title: [Ruubikcms v 1.1.0 (/extra/image.php) Local File Inclusion Vulnerability]

WordPress Plugin Photo Album Plus 4.1.1 – SQL Injection

# Exploit Title: WP Photo Album Plus 1,BENCHMARK(500000000,MD5(CHAR(115,113,108,109,97,112))),0)&wppa-cover=0&wppa-oc...

vTiger CRM 5.2 – ‘onlyforuser’ SQL Injection

source: https://www.securityfocus.com/bid/49948/info

Xenon – ‘id’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/50141/info

WordPress Plugin Contact Form 2.7.5 – SQL Injection

# Exploit Title: WordPress Contact Form plugin 1,BENCHMARK(500000000,MD5(CHAR(115,113,108,109,97,112))),0)

WordPress Plugin Pretty Link 1.4.56 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50096/info

BugFree 2.1.3 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50083/info

Joomla! Component com_sgicatalog 1.0 – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/50072/info

WordPress Plugin GD Star Rating 1.9.10 – SQL Injection

# Exploit Title: WordPress GD Star Rating plugin

MyBB MyStatus 3.1 – SQL Injection

---------------------------------------------------------------------

WordPress Plugin WP-SpamFree Spam Plugin – SQL Injection

#Exploit Title:[ WordPress wpsf-js plugin, SQL Injection]

SilverStripe CMS 2.4.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50063/info

2Moons 1.4 – Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/50046/info

Joomla! Component com_shop – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/50043/info

Joomla! Component com_br – ‘state_id’ SQL Injection

source: https://www.securityfocus.com/bid/50042/info

Joomla! Component com_tree – ‘key’ SQL Injection

source: https://www.securityfocus.com/bid/50041/info

6KBBS 8.0 build 20101201 – Cross-Site Scripting / Information Disclosure

source: https://www.securityfocus.com/bid/50050/info

Jaws 0.8.14 – Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/50022/info

MyBB Forum Userbar Plugin (Userbar 2.2) – SQL Injection

---------------------------------------------------------------------

MyBB Advanced Forum Signatures – ‘afsignatures-2.0.4’ SQL Injection

---------------------------------------------------------------------

POSH – Multiple Vulnerabilities

# Exploit Title: POSH

cotonti CMS 0.9.4 – Multiple Vulnerabilities

Cotonti CMS v0.9.4 Multiple Remote Vulnerabilities

Roundcube Webmail 0.3.1 – Cross-Site Request Forgery / SQL Injection

# Exploit Title: RoundCube 0.3.1 SQL injection

6kbbs – Multiple Vulnerabilities

# Exploit Title: 6kbbs Multiple Vulnerabilities

Filmis 0.2 Beta – Multiple Vulnerabilities

===================================================================================

KaiBB 2.0.1 – SQL Injection

Advisory: KaiBB 2.0.1 XSS and SQL Injection vulnerabilities

openEngine 2.0 – Multiple Blind SQL Injection Vulnerabilities

Advisory: openEngine 2.0 'key' Blind SQL Injection vulnerability

GotoCode Online Classifieds – Multiple Vulnerabilities

###############################################################################

MyBB 1.6.4 – Backdoor Access (Metasploit)

##

Snortreport – ‘/nmap.php’ / ‘nbtscan.php’ Remote Command Execution (Metasploit)

##

Joomla! Component com_expedition – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/50019/info

NexusPHP 1.5 – SQL Injection

# Exploit Title: Nexusphp.v1.5 SQL injection Vulnerability

Joomla! Component Time Returns 2.0 – SQL Injection

#############################################################################################################

BOOKSolved 1.2.2 – Remote File Disclosure

...BOOKSolved 1.2.2 (l) Remote File Disclosure Vulnerability

Spreecommerce 0.60.1 – Arbitrary Command Execution (Metasploit)

##

EFront 3.6.9 Community Edition – Multiple Vulnerabilities

# Exploit Title: EFront

URL Shortener Script 1.0 – SQL Injection

===================================================================================

BuzzyWall 1.3.2 – ‘resolute.php’ Information Disclosure

source: https://www.securityfocus.com/bid/50018/info

Active CMS 1.2 – ‘mod’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50001/info

Tsmim Lessons Library – ‘show.php’ SQL Injection

===================================================================================

CF Image Hosting Script 1.3.82 – File Disclosure

#!/usr/bin/perl