Support Incident Tracker (SiT!) 3.63 p1 – ‘search.php?search_string’ SQL Injection
source: https://www.securityfocus.com/bid/48896/info
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Support Incident Tracker (SiT!) 3.63 p1 – ‘billable_incidents.php?sites[]’ SQL Injection
source: https://www.securityfocus.com/bid/48896/info
Support Incident Tracker (SiT!) 3.63 p1 – ‘report_marketing.php?exc[]’ SQL Injection
source: https://www.securityfocus.com/bid/48896/info
CA ARCserve D2D r15 GWT RPC – Multiple Vulnerabilities
# Exploit Title:CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Disclosure and Commands Execution
PHP-Barcode 0.3pl1 – Remote Code Execution
PHP-Barcode 0.3pl1 Remote Code Execution
ManageEngine ServiceDesk Plus 8.0.0 Build 8013 – Improper User Privileges
================================================================================
OpenX Ad Server 2.8.7 – Cross-Site Request Forgery
Secur-I Research Group Security Advisory
MusicBox 3.7 – Multiple Vulnerabilities
============================================================
CobraScripts Trading Marketplace Script – ‘cid’ SQL Injection
source: https://www.securityfocus.com/bid/48914/info
Joomla! Component com_virtualmoney 1.5 – SQL Injection
source: https://www.securityfocus.com/bid/48883/info
Willscript Recipes Website Script Silver Edition – ‘viewRecipe.php’ SQL Injection
source: https://www.securityfocus.com/bid/48878/info
Online Grades 3.2.5 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/48875/info
Godly Forums – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/48872/info
Joomla! Component mod_spo – SQL Injection
# Exploit Title: Simple Page Option LFI
Joomla! Component JE Story Submit – Local File Inclusion
#!/usr/bin/perl -w
vBulletin 4.0.x 4.1.3 – ‘messagegroupid’ SQL Injection
# Exploit Title: Vbulletin 4.0.x => 4.1.3 (messagegroupid) SQL injection Vulnerability 0-day
Mevin Basic PHP Events Lister 2.03 – Cross-Site Request Forgery
#######################################################
Synergy Software – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/48835/info
Cyberoam UTM – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/48814/info
Tiki Wiki CMS Groupware 7.2 – ‘snarf_ajax.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/48806/info
Joomla! < 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/48805/info
Joomla! Component com_rsappt_pro2 – Local File Inclusion
Appointment Booking Pro is a native Joomla component
Oracle Sun GlassFish Enterprise Server – Persistent Cross-Site Scripting
Sense of Security - Security Advisory - SOS-11-009
BlueSoft (Multiple Products) – Multiple SQL Injections
source: https://www.securityfocus.com/bid/48703/info
BlueSoft Social Networking CMS – SQL Injection
source: https://www.securityfocus.com/bid/48707/info
AJ Classifieds – ‘listingid’ SQL Injection
source: https://www.securityfocus.com/bid/48702/info
Joomla! Component com_newssearch – SQL Injection
source: https://www.securityfocus.com/bid/48698/info
Joomla! Component Controller – ‘Itemid’ SQL Injection
source: https://www.securityfocus.com/bid/48690/info
Joomla! Component com_hospital – SQL Injection
source: https://www.securityfocus.com/bid/48689/info
Joomla! Component Juicy Gallery – ‘picId’ SQL Injection
source: https://www.securityfocus.com/bid/48688/info
Joomla! Component Foto – ‘id_categoria’ SQL Injection
source: https://www.securityfocus.com/bid/48685/info
Easy Estate Rental – ‘s_location’ SQL Injection
source: https://www.securityfocus.com/bid/48684/info
Auto Web Toolbox – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/48683/info
Inscribe Webmedia – SQL Injection
Inscribe Webmedia SQL Injection
PG eLms Pro vDEC_2007_01 – Multiple Blind SQL Injections
PG eLMS Pro vDEC_2007_01 Multiple Blind SQL Injection Vulnerabilities
PG eLms Pro vDEC_2007_01 – ‘contact_us.php’ Multiple POST Cross-Site Scripting Vulnerabilities
PG eLMS Pro vDEC_2007_01 (contact_us.php) Multiple POST XSS Vulnerabilities
Joomla! Component com_sobi2 2.9.3.2 – Blind SQL Injections
# Exploit Title: SOBI2 2.9.3.2 Joomla! Component Blind SQL Injections
LiteRadius 3.2 – Multiple Blind SQL Injections
# Exploit Title: LiteRadius
Chyrp 2.x – ‘/includes/JavaScript.php?action’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/48672/info
Chyrp 2.x – ‘/admin/help.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/48672/info
TCExam 11.2.x – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/48669/info
Flowplayer 3.2.7 – ‘linkUrl’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/48651/info
Sphider 1.3.x – Admin Panel Multiple SQL Injections
source: https://www.securityfocus.com/bid/48647/info
Joomla! Component com_xmap 1.2.11 – Blind SQL Injection
# Exploit Title: Xmap 1.2.11 Joomla Component Blind SQL Injection
Pandora Fms 3.2.1 – Cross-Site Request Forgery
# Exploit Title: Pandora FMS v3.2.1 Cross Site Request Forgery
Tradingeye E-Commerce Shopping Cart – Multiple Vulnerabilities
# Exploit Title: Tradingeye Multiple Vulnerabilities
Fire Soft Board 2.0.1 – Persistent Cross-Site Scripting (Admin Panel)
# Exploit Title: Fire Soft Board popup with your cookies :-)
Gilnet News – ‘read_more.php’ SQL Injection
source: https://www.securityfocus.com/bid/48966/info