webapps

recordpress 0.3.1 – Multiple Vulnerabilities

----------------------------------------------------------------

Maian Weblog 4.0 – Blind SQL Injection

Esselbach Storyteller CMS System 1.8 – SQL Injection

# Exploit Title: Esselbach Storyteller CMS System Version 1.8 [page.php] Remote SQL Injection Vulnerability

WordPress Plugin GRAND Flash Album Gallery 0.55 – Multiple Vulnerabilities

Vulnerability ID: HTB22870

Ruubikcms 1.0.3 – Multiple Vulnerabilities

----------------------------------------------------------------

EzPub Simple Classic ASP CMS – SQL Injection

Title: EzPub - Simple Classic ASP CMS Vulnerable to SQL Injection

Ruubikcms 1.0.3 – ‘head.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46794/info

WordPress Plugin 1 Flash Gallery 0.2.5 – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/46783/info

WordPress Plugin PhotoSmash Galleries 1.0.x – ‘action’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46782/info

WordPress Plugin Inline Gallery 0.3.9 – ‘do’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46781/info

WS Interactive Automne 4.1 – ‘/admin/upload-controler.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/46774/info

Kodak InSite 5.5.2 – ‘/Pages/login.aspx?Language’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46762/info

Kodak InSite 5.5.2 – ‘/Troubleshooting/DiagnosticReport.asp?HeaderWarning’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46762/info

BMForum Myna 6.0 – SQL Injection

# Author: Stephan Sattler

EggAvatar 2.3.2 for vBulletin 3.8.x – Local File Read

#!/usr/bin/env perl

Bacula-Web 1.3.x < 5.0.3 - Multiple Vulnerabilities

GotGeek Labs

EggAvatar for vBulletin 3.8.x – SQL Injection

#!/usr/bin/env perl

Quick Polls – Local File Inclusion / Deletion

'Quick Polls' Local File Inclusion & Deletion Vulnerabilities (CVE-2011-1099)

N-13 News 4.0 – Cross-Site Request Forgery (Add Admin)

N-13 News 4.0 CSRF Vulnerability (Add Admin)

BoutikOne – ‘description.php’ SQL Injection

_____ _________ ________ ____________ _____ ________ ________ _____ ...

vTiger CRM 5.0.4 – Local File Inclusion

#!/usr/bin/python

MySms 1.0 – Multiple Vulnerabilities

MySms v1.0 Multiple Vulnerabilities

ADAN Neuronlabs – ‘view.php’ SQL Injection

#--------------------------------------------------------

JBoss Application Server 4.2 < 4.2.0.CP09 / 4.3 < 4.3.0.CP08 - Remote Command Execution

#JBoss AS Remote Exploit

WordPress Plugin PHP Speedy 0.5.2 – ‘admin_container.php’ Remote Code Execution

Limelight Software – ‘article.php’ SQL Injection

© Limelight Software Ltd (article.php) Sql Injection Vulnerability

Lms Web Ensino – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/46829/info

InterPhoto Image Gallery 2.4.2 – ‘IPLANG’ Local File Inclusion

source: https://www.securityfocus.com/bid/46759/info

Interleave 5.5.0.2 – ‘basicstats.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46771/info

Pragyan CMS 3.0 Beta – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46683/info

xtcModified 1.05 – Multiple HTML Injection / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46681/info

phpWebSite 1.7.1 – ‘local’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46673/info

Support Incident Tracker (SiT!) 3.62 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46671/info

VidiScript – ‘vp’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46639/info

Forritun – Multiple SQL Injections

source: https://www.securityfocus.com/bid/46629/info

cChatBox for vBulletin 3.6.8/3.7.x – SQL Injection

#!/usr/bin/perl

Bitweaver 2.8.0 – Multiple Vulnerabilities

# exploit title: Path Disclosure bitweaver 2.8

Quicktech – SQL Injection

#########################################################################

Readmore Systems Script – SQL Injection

# Exploit Title: [Sql injextion]

SnapProof – ‘page.php’ SQL Injection

SnapProof (page.php) Sql Injection Vulnerability

DO-CMS – Multiple SQL Injections

DO-CMS Multiple Sql Injection Vulnerability

SnapProof – ‘retPageID’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46622/info

WordPress Plugin BackWPup 1.4 – Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/46610/info

Cisco Linksys WAG120N – Cross-Site Request Forgery

----------------------------------------------------------------

WordPress Plugin OPS Old Post Spinner 2.2.1 – Local File Inclusion

Source: http://packetstormsecurity.org/files/view/98751/WordPressOPSOldPostSpinner2.2-lfi.txt

WordPress Plugin jQuery Mega Menu 1.0 – Local File Inclusion

Source: http://packetstormsecurity.org/files/view/98753/WordPressjQueryMegaMenu1.0-lfi.txt

phreebooks r30rc4 – Multiple Vulnerabilities

------------------------------------------------------------------------

Pragyan CMS 3.0 – Multiple Vulnerabilities

#Pragyan CMS v 3.0 mutiple Vulnerabilities

Joomla! Component com_xcloner-backupandrestore – Remote Command Execution

#!/usr/bin/python

RaksoCT – Multiple SQL Injections

Title : RaksoCT Web Design Vulnerable to Multiples SQL Injection