webapps

IceWarp Mail Server 10.3.2 server/webmail.php Soap Message Parsing – Arbitrary File Disclosure

source: https://www.securityfocus.com/bid/49753/info

AWStats 6.95/7.0 – ‘awredir.pl’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49749/info

TWiki 5.0.2 SlideShowPlugin – Slide Show Pages URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/49746/info

TWiki 5.0.2 – ‘/bin/view/Main/Jump?newtopic’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49746/info

Zyncro 3.0.1.20 – Social Network Message Menu SQL Injection

source: https://www.securityfocus.com/bid/49741/info

Zyncro 3.0.1.20 – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/49740/info

JAKCMS PRO 2.2.5 – Arbitrary File Upload

# Exploit Title: JAKCMS PRO

OneCMS 2.6.4 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/49733/info

i-Gallery 3.4 – ‘d’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49712/info

Netgear Wireless Cable Modem Gateway – Authentication Bypass / Cross-Site Request Forgery

Sense of Security - Security Advisory - SOS-11-011

SharePoint 2007/2010 and DotNetNuke < 6 - File Disclosure (via XEE)

Exploit Title: File disclosure via XEE in SharePoint and DotNetNuke

Multiple WordPress Plugins – ‘timthumb.php’ File Upload

# Exploit Title: Multiple Wordpress timthumb.php reuse vulnerabilities

Cisco TelePresence SOS-11-010 – Multiple Vulnerabilities

Sense of Security - Security Advisory - SOS-11-010

WordPress Plugin Relocate Upload 0.14 – Remote File Inclusion

# Exploit Title: Relocate Upload Wordpress plugin RFI

WordPress Plugin Mini Mail Dashboard Widget 1.36 – Remote File Inclusion

# Exploit Title: Mini Mail Dashboard Widget Wordpress plugin RFI

WordPress Plugin Zingiri Web Shop 2.2.0 – Remote File Inclusion

# Exploit Title: Zingiri Web Shop Wordpress plugin RFI

WordPress Plugin Mailing List 1.3.2 – Remote File Inclusion

# Exploit Title: Mailing List Wordpress plugin RFI

WordPress Plugin Disclosure Policy 1.0 – Remote File Inclusion

# Exploit Title: Disclosure Policy Plugin Wordpress plugin RFI

WordPress Plugin Livesig 0.4 – Remote File Inclusion

# Exploit Title: Livesig Wordpress plugin RFI

WordPress Plugin Annonces 1.2.0.0 – Remote File Inclusion

# Exploit Title: Annonces Wordpress plugin RFI

WordPress Plugin WPEasyStats 1.8 – Remote File Inclusion

# Exploit Title: Wpeasystats Wordpress plugin RFI

WordPress Plugin AllWebMenus 1.1.3 – Remote File Inclusion

# Exploit Title: Allwebmenus Wordpress Menu Plugin Wordpress plugin RFI

WordPress Plugin TheCartPress 1.1.1 – Remote File Inclusion

# Exploit Title: Thecartpress Wordpress plugin RFI

Toko Lite CMS 1.5.2 – ‘edit.php’ HTTP Response Splitting

Toko Lite CMS 1.5.2 (edit.php) HTTP Response Splitting Vulnerability

WordPress Plugin Filedownload 0.1 – ‘download.php’ Remote File Disclosure

# Exploit Title: WordPress Filedownload Plugin 0.1 (download.php) Remote File Disclosure Vulnerability

Card sharj 1.0 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/49677/info

net4visions (Multiple Products) – ‘dir’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49675/info

Aspgwy Access 1.0 – ‘matchword’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49674/info

Toko Lite CMS 1.5.2 – HTTP Response Splitting / Cross-Site Scripting

source: https://www.securityfocus.com/bid/49673/info

phpRS 2.8.1 – Multiple SQL Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/49729/info

ASP Basit Haber Script 1.0 – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/49667/info

WordPress Plugin Count per Day 2.17 – SQL Injection

# Exploit Title: WordPress Count per Day plugin

iManager Plugin 1.2.8 – ‘d’ Arbitrary File Deletion

iManager Plugin v1.2.8 (d) Remote Arbitrary File Deletion Vulnerability

iManager Plugin 1.2.8 – ‘lang’ Local File Inclusion

iManager Plugin v1.2.8 (lang) Local File Inclusion Vulnerability

iBrowser Plugin 1.4.1 – ‘lang’ Local File Inclusion

iBrowser Plugin v1.4.1 (lang) Local File Inclusion Vulnerability

Ay Computer (Multiple Products) – Multiple SQL Injections

source: https://www.securityfocus.com/bid/49668/info

PunBB 1.3.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49660/info

StarDevelop LiveHelp 2.0 – ‘index.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/49650/info

Nortel Contact Recording Centralized Archive 6.5.1 – SQL Injection

Cogent DataHub 7.1.1.63 – Source Disclosure

#######################################################################

WordPress Plugin E-Commerce 3.8.6 – SQL Injection

# Exploit Title: WordPress WP e-Commerce plugin

WordPress Plugin Auctions 1.8.8 – ‘wpa_id’ SQL Injection

source: https://www.securityfocus.com/bid/49625/info

Microsoft SharePoint 2007/2010 – ‘Source’ Multiple Open Redirections

source: https://www.securityfocus.com/bid/49620/info

Carel PlantVisor 2.4.4 – Directory Traversal

#######################################################################

dotProject 2.1.5 – SQL Injection

# Exploit Title: dotProject 2.1.5 SQL Injection Vulnerability

WordPress Plugin Forum Server 1.7 – SQL Injection

# Exploit Title: WordPress WP Forum Server plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)--%20&edit...

AstroCMS – Multiple Vulnerabilities

# Exploit Title: AstroCMS Multiple Remote Vulnerabilities

Slaed CMS – Code Execution

# Exploit Title: Slaed CMS Code exec

NetCat CMS – Multiple Vulnerabilities

# Exploit Title: NetCat CMS Code exec, SQL-injection

PHP Support Tickets 2.2 – Code Execution

# Exploit Title: PHP Support Tickets v2.2 Code Exec