webapps

Squiz Matrix 4 – ‘colour_picker.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48118/info

PopScript – ‘index.php’ Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/48113/info

Multiple WordPress WooThemes Themes – ‘test.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48110/info

Nakid CMS 1.0.2 – ‘CKEditorFuncNum’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48109/info

Joomla! Component CCBoard – SQL Injection / Arbitrary File Upload

source: https://www.securityfocus.com/bid/48108/info

vBulletin vBExperience 3 – ‘sortorder’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48106/info

WebSVN 2.3.2 – Unproper Metacharacters Escaping ‘exec()’ Remote Command Injection

WebSVN 2.3.2 Unproper Metacharacters Escaping exec() Remote

Ushahidi 2.0.1 – ‘range’ SQL Injection

source: https://www.securityfocus.com/bid/48100/info

ARSC Really Simple Chat 3.3-rc2 – Cross-Site Scripting / Multiple SQL Injections

source: https://www.securityfocus.com/bid/48083/info

PikaCMS – Multiple Local File Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/48068/info

TEDE Simplificado 1.01/S2.04 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/48067/info

S9Y Serendipity Freetag-plugin 3.21 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48054/info

Kentico CMS 5.5R2.23 – ‘userContextMenu_Parameter’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48051/info

Cotonti 0.9.2 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/48028/info

Guru JustAnswer Professional 1.25 – Multiple SQL Injections

) ) ) ( ( ( ( ( ) )

Belkin F5D7234-4 v5 G Wireless Router – Remote Hash Exposed

+-----------------------------------------+

Easy Media Script – SQL Injection

w-Agora Forum 4.2.1 – Arbitrary File Upload

-----------------------------76401208715012

Invisionix Roaming System Remote metasys 0.2 – Local File Inclusion

nvisionix Roaming System Remote metasys 0.2 LFI Vulnerability

Puzzle Apps CMS 3.2 – Local File Inclusion

# ------------------------------------------------------------------------

Joomla! Component com_joomnik – SQL Injection

#############################################################

Joomla! Component com_jmsfileseller – Local File Inclusion

# Exploit Title: Joomla Component com_jmsfileseller Local File Inclusion Vulnerability

Guru Penny Auction Pro 3.0 – Blind SQL Injection

) ) ) ( ( ( ( ( ) )

Duhok Forum 1.1 – SQL Injection

===================================================================

cPanel < 11.25 - Cross-Site Request Forgery (Add User PHP Script)

# Exploit Title: cPanel < 11.25 CSRF - Add php script

HB eCommerce – SQL Injection

-------------[ HB ECOMMERCE SQL Injection Vulnerability ]---------------

Clipbucket 2.4 RC2 645 – SQL Injection

# ------------------------------------------------------------------------

AWStats Totals 1.14 multisort – Remote Command Execution (Metasploit)

##

eGroupWare 1.8.001.20110421 – Multiple Vulnerabilities

------------------------------------------------------------------------

Extcalendar 2.0b2 – ‘cal_search.php’ SQL Injection

Vulnerability ID: HTB22986

i-doIT 0.9.9-4 – Local File Inclusion

# ------------------------------------------------------------------------

Tickets 2.13 – SQL Injection

BlackBoard Learn 8.0 – ‘keywordraw’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48009/info

Kryn.cms 0.9 – ‘_kurl’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47973/info

Joomla! Component com_shop – SQL Injection

source: https://www.securityfocus.com/bid/47971/info

MidiCMS Website Builder – Local File Inclusion / Arbitrary File Upload

source: https://www.securityfocus.com/bid/47970/info

Ajax Chat 1.0 – ‘ajax-chat.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47953/info

phpScheduleIt 1.2.12 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47951/info

Joomla! Component Map Locator – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/47941/info

PHPortfolio – SQL Injection

# Exploit Title: SQL Injection Vulnerbility in PHP Portfolio

vBulletin 4.0.x 4.1.2 – ‘search.php’ SQL Injection

====================================================================

Tugux CMS 1.2 – Multiple Vulnerabilities

Title:

E-Manage MySchool 7.02 – SQL Injection

Exploit Title: SQL Injection MySchool Version 7.02

PHP Captcha / Securimage 2.0.2 – Authentication Bypass

Sense of Security - Security Advisory - SOS-11-007

Zen Cart 1.3.9h – Multiple Vulnerabilities

[*]==================================================================>

Ultimate PHP Board 2.2.7 – Broken Authentication and Session Management

# Exploit Title : Ultimate PHP Board 2.2.7 "Broken Authentication and Session Management"

LimeSurvey 1.85+ – ‘admin.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47931/info

Andy’s PHP KnowledgeBase 0.95.4 – ‘step5.php’ PHP Remote Code Execution

source: https://www.securityfocus.com/bid/47918/info

Room Juice 0.3.3 – ‘display.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47914/info

CiscoWorks Common Services 3.1.1 – Auditing Directory Traversal

source: https://www.securityfocus.com/bid/47905/info