webapps

Joomla! Plugin Captcha 4.5.1 – Local File Disclosure

:::::::-. ... ::::::. :::.

Fonality trixbox CE 2.6.1 – ‘langChoice’ Local File Inclusion (Metasploit)

##

Redmine SCM Repository 0.9.x/1.0.x – Arbitrary Command Execution (Metasploit)

##

Zwii 2.1.1 – Remote File Inclusion

# Exploit Title: Zwii v 2.1.1 Remote file include vulnerbility

WordPress Plugin mingle forum 1.0.26 – Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

sahana agasti 0.6.5 – Multiple Vulnerabilities

:::::::-. ... ::::::. :::.

Elxis CMS 2009.2 – Remote File Inclusion

###############################################

axdcms-0.1.1 – Local File Inclusion

###############################################

Joostina 1.3 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45732/info

openSite 0.2.2 Beta – Local File Inclusion

#######################################################

PHP MicroCMS 1.0.1 – Cross-Site Request Forgery / Cross-Site Scripting

Vulnerability ID: HTB22765

Phenotype CMS 3.0 – SQL Injection

Vulnerability ID: HTB22769

phpMySport 1.4 – SQL Injection / Authentication Bypass / Full Path Disclosure

Vulnerability ID: HTB22770

F3Site 2011 alfa 1 – Cross-Site Scripting / Cross-Site Request Forgery

Vulnerability ID: HTB22757

Openfire 3.6.4 – Multiple Cross-Site Request Forgery Vulnerabilities

Title: Multiple CSRF Vulnerabilities in Openfire 3.6.4 Administrative

Ignition 1.3 – ‘comment.php’ Local File Inclusion

#######################################################

PHP MicroCMS 1.0.1 – ‘page_text’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45702/info

Joomla! 1.0.x – ‘ordering’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45679/info

Openfire 3.6.4 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45682/info

BlogEngine.NET 1.6 – Directory Traversal / Information Disclosure

source: https://www.securityfocus.com/bid/45681/info

WikLink 0.1.3 – ‘getURL.php’ SQL Injection

source: https://www.securityfocus.com/bid/45673/info

Concrete CMS 5.4.1.1 – Cross-Site Scripting / Remote Code Execution

#!/usr/bin/python

PhpGedView 4.2.3 – Local File Inclusion

#!/usr/bin/perl -w

Nucleus 3.61 – Multiple Remote File Inclusions

#######################################################

S40 CMS 0.4.1 – Cross-Site Request Forgery (Change Admin Password)

In The Name Of GOD

WonderCMS 0.3.3 – ‘editText.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45712/info

Sahana Agasti 0.6.4 – Multiple Remote File Inclusions

#Sahana Agasti

amoeba CMS 1.01 – Multiple Vulnerabilities

#!/usr/bin/python

YourTube 1.0 – Cross-Site Request Forgery (Add User)

YourTube v1.0 CSRF Vulnerability (Add User)

GALLARIFIC PHP Photo Gallery Script – ‘gallery.php’ SQL Injection

GALLARIFIC PHP Photo Gallery Script (gallery.php) Sql Injection Vulnerability

Tech Shop Technote 7 – SQL Injection

# Exploit Title: Technote7(Commercial Version, Free Version)

Sahana Agasti 0.6.4 – SQL Injection

:::::::-. ... ::::::. :::.

ChurchInfo 1.2.12 – SQL Injection

:::::::-. ... ::::::. :::.

KLINK – SQL Injection

##########################[Andr�s G�mez]################################

PHPB2B 4.1 – ‘q’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51221/info

Ignition 1.3 – Remote Code Execution

Ignition 1.3 – ‘page.php’ Local File Inclusion

Ignition 1.3 (page) Local File Inclusion Vulnerability

LightNEasy 3.2.2 – Multiple Vulnerabilities

Vulnerability ID: HTB22750

WordPress Core 3.0.3 – Persistent Cross-Site Scripting (Internet Explorer 6/7 / NS8.1)

# Exploit Title: Wordpress 3.0.3 stored XSS IE7,6 NS8.1

Discovery TorrentTrader 2.6 – Multiple Vulnerabilities

# Exploit Title: TorrentTrader 2.6 Multiple vulnerabilities

TYPO3 – Arbitrary File Retrieval

DGNews 2.1 – SQL Injection

#Remote SQL Injection Vulnerability

Siteframe CMS 3.2.3 – ‘user.php’ SQL Injection

# Exploit Title: Siteframe 'user.php' SQL Injection Vulnerability

PiXie CMS 1.04 – Multiple Cross-Site Request Forgery Vulnerabilities

Add Super User:

LoveCMS 1.6.2 – Cross-Site Request Forgery / Code Injection

#Exploit Title : LoveCMS 1.6.2 - CSRF Code Injection Vulnerability

PHP-AddressBook 6.2.4 – ‘group.php’ SQL Injection

#Exploit Title : PHP-AddressBook v6.2.4 SQL INJECTION VULNERABILITIES

DzTube – SQL Injection

Title: DzTube SQL Injection Vulnerability

kaibb 1.0.1 – Multiple Vulnerabilities

Vulnerability ID: HTB22749

News Script PHP Pro – ‘FCKeditor’ Arbitrary File Upload

==============================================================================

ardeaCore 2.25 – PHP Framework Remote File Inclusion

[!] Discovered: n0n0x