TWiki 5.0.1 – ‘origurl’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47899/info
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Joomla! Component jDownloads 1.0 – Arbitrary File Upload
____________________________________________________________________
Pligg CMS 1.1.4 – SQL Injection
# Exploit Title: Pligg
WordPress Plugin Is-human 1.4.2 – Remote Command Execution
# Exploit Title: is-human (1.4.2 and prior) Worpdress plugin.
PHP Calendar Basic 2.3 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47887/info
eFront 3.6.9 – ‘submitScore.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47877/info
Mitel Audio and Web Conferencing 4.4.3.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47874/info
eFront 3.6.9 – ‘scripts.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/47870/info
openQRM 4.8 – ‘source_tab’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47865/info
allocPSA 1.7.4 – ‘/login/login.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47860/info
Mambo Component Docman 1.3.0 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/47857/info
Joomla! Component com_cbcontact – ‘contact_id’ SQL Injection
source: https://www.securityfocus.com/bid/47856/info
Jcow 4.2.1 – Local File Inclusion
------------------------------------------------------------------------
NoticeBoardPro 1.0 – Multiple Vulnerabilities
# ------------------------------------------------------------------------
Vanilla Forum 2.0.17.9 – Local File Inclusion
------------------------------------------------------------------------
MediaInSpot CMS – SQL Injection
# Exploit Title: Media In Spot SQL Injection
MediaInSpot CMS – Local File Inclusion (2)
#Name : Media In Spot LFI Vulnerability
frame-oshop – SQL Injection
product: frame-oshop
Joomla! Component com_question – SQL Injection
###################################################
osCommerce 2.3.1 – ‘banner_manager.php’ Arbitrary File Upload
# Exploit Title: [OSC 2.3.1: Remote File Upload Vulnerability : Banner Manager]
WordPress Plugin EditorMonkey 2.5 – ‘FCKeditor’ Arbitrary File Upload
#############################################################################################################
Flash Tag Cloud And MT-Cumulus Plugin – ‘tagcloud’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47845/info
DocMGR 1.1.2 – ‘history.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47861/info
Argyle Social – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47826/info
Oracle GlassFish Server – Administration Console Authentication Bypass
Oracle GlassFish Server Administration Console Authentication Bypass
showoff! digital media software 1.5.4 – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/13598/info
Traidnt UP 2.0 – ‘view.php’ SQL Injection
###################################################
Calendarix 0.8.20080808 – Multiple Cross-Site Scripting / SQL Injections
source: https://www.securityfocus.com/bid/47790/info
poMMo Aardvark PR16.1 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47786/info
ZAPms 1.22 – ‘nick’ SQL Injection
source: https://www.securityfocus.com/bid/47782/info
Keyfax Customer Response Management 3.2.2.6 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47772/info
HOMEPIMA Design – ‘filedown.php’ Local File Disclosure
source: https://www.securityfocus.com/bid/47770/info
EmbryoCore 1.03 – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/47763/info
phpWebSite 1.7.1 – ‘upload.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/47759/info
Gelsheet 1.02 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47758/info
Exponent CMS 2.0.0 Beta 1.1 – Local File Inclusion / Arbitrary File Upload
source: https://www.securityfocus.com/bid/47757/info
Ampache 3.5.4 – ‘login.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47756/info
encoder 0.4.10 – ‘edit.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47755/info
Joomla! Component com_hello – SQL Injection
Author : g3mbeLz_YCL
Joomla! Component com_versioning – SQL Injection
#[~] Author : the_cyber_nuxbie
FestOS 2.3c – ‘upload.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/47751/info
Getsimple CMS 3.0 – ‘set’ Local File Inclusion
source: https://www.securityfocus.com/bid/47767/info
e107 0.7.25 – ‘news.php’ SQL Injection
source: https://www.securityfocus.com/bid/47750/info
f-fileman 7.0 – Directory Traversal
Advisory:
VCalendar 1.1.5 – Cross-Site Request Forgery
Vulnerability ID: HTB22969
phpThumb – ‘phpThumbDebug’ Information Disclosure
# Exploit Title: phpThumb 'phpThumbDebug' Information Disclosure
PHPDug 2.0.0 – Multiple Vulnerabilities
Vulnerability ID: HTB22971
PHPDug 2.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47733/info
BMC Dashboards 7.6.01 – Cross-Site Scripting / Information Disclosure
source: https://www.securityfocus.com/bid/47731/info
BMC Remedy Knowledge Management 7.5.00 – Default Account / Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47728/info