PHP Directory Listing Script 3.1 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47727/info
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WordPress Plugin WP Ajax Calendar 1.0 – ‘example.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47726/info
Sothink DHTML Menu – SQL Injection
=====================================================================
Time and Expense Management System – Multiple Vulnerabilities
# ------------------------------------------------------------------------
Front Accounting 2.3.4 – Cross-Site Request Forgery
# Software................Front Accounting 2.3.4
Horizon Web Builder – ‘fshow.php’ SQL Injection
# Exploit Title: Horizon SQLi
GoT.MY (Multiple Products) – ‘theme_dir’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47702/info
SelectaPix 1.4.1 – ‘uploadername’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47701/info
YaPiG 0.95 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47698/info
E2 Photo Gallery 0.9 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47697/info
Proofpoint Protection Server 5.5.5 – ‘process.cgi’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47687/info
Web Auction 0.3.6 – ‘lang’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47682/info
LDAP Account Manager 3.4.0 – ‘selfserviceSaveOk’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47674/info
LANSA aXes Web Terminal TN5250 – ‘axes_default.css’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47672/info
Travel411 – SQL Injection
=====================================================================
Exponent CMS 2.0 Beta 1.1 – Cross-Site Request Forgery (Add Administrator Account)
Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC by outlaw.dll
Parnian Opendata CMS – SQL Injection
###########################################################################
TCExam 11.1.29 – ‘tce_xml_user_results.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/47762/info
Tine 2.0 – ‘vbook.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47669/info
SOOP Portal Raven 1.0b – SQL Injection
# Exploit Title: SOOP Portal Raven 1.0b sql injection
phpGraphy 0.9.13b – Multiple Vulnerabilities
=====================================
kusaba x 0.9.1 – Multiple Vulnerabilities
#######################################################
ClanSphere 2011.0 – Local File Inclusion / Arbitrary File Upload
source: https://www.securityfocus.com/bid/47636/info
phpGraphy 0.9.13b – ‘theme_dir’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47634/info
BackupPC 3.x – ‘index.cgi’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47628/info
WordPress Plugin WP Photo Album 1.5.1 – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47622/info
WordPress Plugin Daily Maui Photo Widget 0.2 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47620/info
Kusaba X 0.9 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47626/info
Cisco Unified Communications Manager 8.5 – ‘xmldirectorylist.jsp’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/47607/info
up.time Software 5 – Administration Interface Remote Authentication Bypass
source: https://www.securityfocus.com/bid/47599/info
Joostina (Multiple Components) – SQL Injection
source: https://www.securityfocus.com/bid/47595/info
Symphony CMS 2.1.2 – Blind SQL Injection
--------------------------------------------------------------------------------------------
Quick.CMS 3.0 – Cross-Site Request Forgery
#(+) Exploit Title: Quick CMS v3.0 Cross Site Request Forgery (Add Admin User)
Snom IP Phone Web Interface < 8 - Multiple Vulnerabilities
# _ ____ __ __ ___
Football Website Manager 1.1 – SQL Injection / Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/47593/info
PHP F1 Max’s Photo Album – ‘showimage.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47582/info
phpList 2.10.x – ’email’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47580/info
WordPress Plugin WP Ajax Recent Posts 1.0.1 – ‘do’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47579/info
Noah’s Classifieds 5.0.4 – ‘index.php’ Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/47578/info
html-edit CMS 3.1.x – ‘html_output’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47576/info
WordPress Plugin Sermon Browser 0.43 – Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/47574/info
eyeOS 1.9.0.2 – Image File Handling HTML Injection
source: https://www.securityfocus.com/bid/47629/info
TemaTres 1.3 – ‘_search_expresion’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47569/info
phpmychat plus 1.93 – Multiple Vulnerabilities
------------------------------------------------------------------------
OrangeHRM 2.6.3 – ‘PluginController.php’ Local File Inclusion
------------------------------------------------------------------------
mySeatXT 0.1781 – SQL Injection
------------------------------------------------------------------------
SoftMP3 – SQL Injection
# Exploit Title: SOFTMP3 source code SQL injection
WordPress Plugin Ajax Category Dropdown 0.1.5 – Multiple Vulnerabilities
=============================