Etki Video PRO 2.0 – ‘izle.asp?id’ SQL Injection
source: https://www.securityfocus.com/bid/47298/info
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Dimac CMS 1.3 XS – ‘default.asp’ SQL Injection
source: https://www.securityfocus.com/bid/47291/info
K-Links – Link Directory Script SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-{In The Name Of Allah The Mercifull}-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Point Market System 3.1x vBulletin plugin – SQL Injection
#(+)Exploit Title: Point Market System 3.1x vbulletin plugin SQL
Nooms CMS 1.1.1 – Cross-Site Request Forgery
# NooMS CMS version 1.1.1 CSRF
Joomla! Component joomlacontenteditor – Blind SQL Injection
===================================================================
eForum 1.1 – ‘eforum.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/47309/info
1024 CMS 1.1.0 Beta – Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/47282/info
PrestaShop 1.3.6 – ‘cms.php’ Remote File Inclusion
source: https://www.securityfocus.com/bid/47264/info
vTiger CRM 5.2.1 – ‘sortfieldsjson.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/47263/info
viscacha 0.8.1 – Multiple Vulnerabilities
Vulnerability ID: HTB22921
phpcollab 2.5 – Multiple Vulnerabilities
Vulnerability ID: HTB22916
Joomla! Component com_virtuemart 1.1.7 – Blind SQL Injection
#!/usr/bin/python
S40 CMS 0.4.2b – Local File Inclusion
[Security Advisory Details: 07/04/2001]
eGroupWare 1.8.1 – ‘test.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47273/info
vTiger CRM 5.2.1 – ‘vtigerservice.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47267/info
Omer Portal 3.220060425 – ‘arama_islem.asp’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47266/info
Redmine 1.0.1/1.1.1 – ‘projects/hg-hellowword/news/’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47193/info
TextPattern 4.2 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47182/info
greenpants 0.1.7 – Multiple Vulnerabilities
# Exploit Title: GreenPants 0.1.7 Multiple Vulnerabilities
eyeos 2.3 – Multiple Vulnerabilities
------------------------------------------------------------------------
Dream Vision Technologies Web Portal – SQL Injection
#####################################################################################
Tutorialms 1.4 – ‘show’ SQL Injection
#################################################################################
WordPress Plugin Custom Pages 0.5.0.1 – Local File Inclusion
------------------------------------------------------------------------
OpenEMR 4.0.0 – Multiple Vulnerabilities
------------------------------------------------------------------------
UseBB 1.0.11 – ‘admin.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/47166/info
Eleanor CMS – Cross-Site Scripting / Multiple SQL Injections
source: https://www.securityfocus.com/bid/47164/info
XOOPS 2.5 – ‘banners.php’ Multiple Local File Inclusions
source: https://www.securityfocus.com/bid/47174/info
Yaws-Wiki 1.88-1 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/47158/info
Gazelle CMS 1.0 – Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/47157/info
WordPress Plugin WPwizz AdWizz Plugin 1.0 – ‘link’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47141/info
MyBB 1.4/1.6 – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/47131/info
PHP-Fusion – ‘article_id’ SQL Injection
source: https://www.securityfocus.com/bid/47128/info
Planet FPS-1101 – Cross-Site Scripting
GotGeek Labs
Planex Mini-300PU & Mini100s – Cross-Site Scripting
GotGeek Labs
TP-Link TL-PS110U / TL-PS110P – Cross-Site Scripting
GotGeek Labs
Encore ENPS-2012 – Cross-Site Scripting
GotGeek Labs
Yaws-Wiki 1.88-1 (Erlang) – Persistent / Reflective Cross-Site Scripting
Application: yaws-wiki
DoceboLms 4.0.4 – Multiple Persistent Cross-Site Scripting Vulnerabilities
DoceboLMS 4.0.4 Multiple Stored XSS Vulnerabilities
Banner Ad Management Script – SQL Injection
####################################################################
Rash CMS – SQL Injection
==========================================
Advanced Image Hosting 2.2 – ‘index.php’ SQL Injection
==========================================
DoceboLms 4.0.4 – ‘index.php’ Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/47150/info
WordPress Plugin Placester 0.1 – ‘ajax_action’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/47142/info
Anzeigenmarkt 2011 – ‘index.php’ SQL Injection
----------------------------Information------------------------------------------------
ilchClan 1.0.5 – ‘regist.php’ SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-