Sitemagic CMS – ‘SMTpl’ Directory Traversal
source: https://www.securityfocus.com/bid/48399/info
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
FanUpdate 3.0 – ‘pageTitle’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/48392/info
Eshop Manager – Multiple SQL Injections
source: https://www.securityfocus.com/bid/48391/info
H3C ER5100 – Authentication Bypass
source: https://www.securityfocus.com/bid/48384/info
Same Team E-shop manager – SQL Injection
# Exploit Title: [Same Team E-shop manager SQL Injection exploit]
Cachelogic Expired Domains Script 1.0 – Multiple Vulnerabilities
Cachelogic Expired Domains Script 1.0 multiple security vulnerabilities
iGiveTest 2.1.0 – SQL Injection
iGiveTest 2.1.0 SQL Injection Vulnerability
WordPress Plugin WPtouch 1.9.27 – URL redirection
Hello , that's a 0day on the must downloaded WordPress plugin.
Sitemagic CMS 2010.04.17 – ‘SMExt’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/48355/info
Joomla! Component com_calcbuilder – ‘id’ Blind SQL Injection
---------------------------------------------------------------------------------
Burning Board 3.1.5 – Full Path Disclosure
---------------------------------------------------------------------
Joomla! Component com_team – SQL Injection
Joomla Component (com_team) SQL Injection Vulnerability
Nibbleblog 3 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/48339/info
Taha Portal 3.2 – ‘sitemap.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/48342/info
Immophp 1.1.1 – Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/48341/info
Joomla! Component A Cool Debate 1.0.3 – Local File Inclusion
A Cool Debate 1.0.3 Component Joomla Local File Inclusion
AiCart 2.0 – Multiple Vulnerabilities
=================================[ AiCart 2.0 Multiple Vulnerabilities ]===================================
WeBid 1.0.2 – Persistent Cross-Site Scripting (via SQL Injection)
# Exploit Title: presistent XSS through SQLi WeBid 1.0.2
Catalog Builder eCommerce Software – Blind SQL Injection
+------------------------------------------------------------------------------------------+
IBM Websphere Application Server 7.0.0.13 – Cross-Site Request Forgery
-----BEGIN PGP SIGNED MESSAGE-----
Free Simple CMS 1.0 – Multiple Vulnerabilities
Vulnerability ID: HTB23010
AMHSHOP 3.7.0 – SQL Injection
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
MyBloggie 2.1.6 – HTML Injection / SQL Injection
source: https://www.securityfocus.com/bid/48317/info
miniblog 1.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/48281/info
vBTube 1.2.9 – ‘vBTube.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/48280/info
cubecart 2.0.7 – Multiple Vulnerabilities
# Exploit Title: CubeCart 2.0.7 XSS && Remote SQL Injection => Multiple Vulnerabilities
Joomla! Component Scriptegrator 1.5 – Local File Inclusion
# Exploit Title: Scriptegrator plugin for Joomla! 1.5 0day File Inclusion
Oracle HTTP Server – Cross-Site Scripting Header Injection
---------------------------------------------------------------------------------------------------------
PHP-Nuke 8.3 – ‘upload.php’ Arbitrary File Upload (2)
source: https://www.securityfocus.com/bid/48257/info
PHP-Nuke 8.3 – ‘upload.php’ Arbitrary File Upload (1)
source: https://www.securityfocus.com/bid/48257/info
Microsoft Lync Server 2010 – ‘ReachJoin.aspx’ Remote Command Injection
source: https://www.securityfocus.com/bid/48235/info
WebFileExplorer 3.6 – ‘user’ / ‘pass’ SQL Injection
source: https://www.securityfocus.com/bid/48233/info
Joomla! Component Minitek FAQ Book 1.3 – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/48223/info
SUBRION CMS – Multiple Vulnerabilities
1.SUBRION CMS multiple vulnerabilties
Technote 7.2 – Blind SQL Injection
# Exploit Title: technote blind sql injection
Trend Micro Data Loss Prevention Virtual Appliance 5.5 – Directory Traversal
Software: Trend Micro Data Loss Prevention Virtual Appliance 5.5
Tele Data Contact Management Server – Directory Traversal
------------------------------------------------------------------------
Angora Guestbook 1.5 – Local File Inclusion
------------------------------------------------------------------------
Pacer Edition CMS 2.1 – ‘l’ Local File Inclusion
Pacer Edition CMS 2.1 (l param) Local File Inclusion Vulnerability
Pacer Edition CMS 2.1 – ‘rm’ Arbitrary File Deletion
#!/usr/bin/python
Tolinet Agencia – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/48217/info
Polycom IP Phone – Web Interface Data Disclosure
# _ ____ __ __ ___
Aastra IP Phone 9480i – Web Interface Data Disclosure
# _ ____ __ __ ___
EquiPCS – SQL Injection
============================================================
WordPress Plugin GD Star Rating – ‘votes’ SQL Injection
source: https://www.securityfocus.com/bid/48166/info
The Pacer Edition CMS 2.1 – ’email’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/48215/info
Blog:CMS 4.2 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/48132/info
Xataface 1.x – ‘action’ Local File Inclusion
source: https://www.securityfocus.com/bid/48126/info
Dataface – Local File Inclusion
//==========================================================================