Joomla! Component com_mailto – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/45356/info
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
slickMsg 0.7-alpha – ‘top.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/45343/info
BizDir 05.10 – ‘f_srch’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/45342/info
ManageEngine EventLog Analyzer 6.1 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/45334/info
Joomla! Component JExtensions Property Finder – ‘sf_id’ SQL Injection
source: https://www.securityfocus.com/bid/45333/info
Joomla! Component com_billyportfolio 1.1.2 – Blind SQL Injection
# Exploit Title: Joomla Component Billy Portfolio 1.1.2 Blind SQL Injection
Sulata iSoft – ‘stream.php’ Local File Disclosure
=========================================================
Joomla! Component JE Messenger 1.0 – Arbitrary File Upload
JE Messenger 1.0 Arbitrary File Upload Vulnerability
AJ Matrix DNA – SQL Injection
#!/usr/bin/perl
CMScout 2.09 – Cross-Site Request Forgery
Vulnerability ID: HTB22719
Joomla! Component JE Auto 1.0 – SQL Injection
JE Auto 1.0 SQL Injection Vulnerability
Abtp Portal Project 0.1.0 – Local File Inclusion
#!/usr/bin/perl
Apache Archiva 1.0 < 1.3.1 - Cross-Site Request Forgery
ANATOLIA SECURITY ADVISORY
Joomla! Component Jeformcr – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/45329/info
PHP State – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/45328/info
net2ftp 0.98 (stable) – ‘/admin1.template.php’ Local/Remote File Inclusion
source: https://www.securityfocus.com/bid/45312/info
WWWThread 5.0.8 Pro – ‘showflat.pl’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/45303/info
Drupal Module Embedded Media Field/Media 6.x : Video Flotsam/Media: Audio Flotsam – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/45276/info
WordPress Plugin Safe Search – ‘v1’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/45267/info
WordPress Plugin Processing Embed 0.5 – ‘pluginurl’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/45266/info
WordPress Plugin Twitter Feed – ‘url’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/45294/info
SolarWinds Orion Network Performance Monitor (NPM) 10.1 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/45257/info
Zimplit CMS – ‘English_manual_version_2.php?client’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/45252/info
Zimplit CMS – ‘zimplit.php?File’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/45252/info
Aigaion 1.3.4 – ‘ID’ SQL Injection
source: https://www.securityfocus.com/bid/45232/info
SOOP Portal Raven 1.0b – Arbitrary File Upload
# Exploit Title: SOOP Portal Raven 1.0b Remote Upload Shell Vulnerability
MODx REvolution CMS 2.0.4-pl2 – POST injection Cross-Site Scripting
MODx Revolution CMS Cross-Site Scripting (XSS) Proof Of Concept Script
phpMyAdmin – Client-Side Code Injection / Redirect Link Falsification
PhpMyAdmin Client Side 0Day Code Injection and Redirect Link Falsification
Alguest 1.1 – ‘start’ SQL Injection
source: https://www.securityfocus.com/bid/45214/info
Pulse CMS Basic – Local File Inclusion
'Pulse CMS Basic' Local File Inclusion Vulnerability (CVE-2010-4330)
SOOP Portal 2.0 – Arbitrary File Upload
#################################################################
HotWebScripts HotWeb Rentals – ‘resorts.asp’ SQL Injection
# Author: R4dc0re
Ecommercemax Solutions Digital Goods Seller – SQL Injection
# Author: R4dc0re
Gatesoft Docusafe 4.1.0 – SQL Injection
# Author: R4dc0re
PHPKF Forum 1.80 – ‘profil_degistir.php’ Cross-Site Request Forgery
# Exploit Title : phpKF Forum profil_degistir.php CSRF Exploit.
WordPress Core 3.0.1 – ‘do_trackbacks()’ SQL Injection
Description: SQL injection vulnerability in do_trackbacks() function of WordPress allows remote attackers to execute ...
ASPSiteWare Contact Directory 1.0 – SQL Injection
# Author: R4dc0re
ASPSiteWare ASP Gallery 1.0 – SQL Injection
# Author: R4dc0re
ASPSiteWare JobPost 1.0 – SQL Injection
# Author: R4dc0re
ASPSiteWare Project Reporter – SQL Injection
# Author: R4dc0re
ASPSiteWare Recipe ORGanizer – SQL Injection
# Author: R4dc0re
T-Dreams Job Seekers Package 3.0 – SQL Injection
# Author: R4dc0re
T-Dreams Cars Ads Package 2.0 – SQL Injection
# Author: R4dc0re
Linksys Routers – Cross-Site Request Forgery
It seems to be fairly well known that there are multiple unpatched
Dejcom Market CMS – ‘showbrand.aspx’ SQL Injection
# Exploit Title: [Dejcom Market Cms SQL injection]
Techno Dreams FAQ Manager Package 1.0 – ‘faqlist.asp’ SQL Injection
source: https://www.securityfocus.com/bid/45202/info
Techno Dreams Articles & Papers Package 2.0 – ‘ArticlesTablelist.asp’ SQL Injection
source: https://www.securityfocus.com/bid/45201/info
DotNetNuke 5.5.1 – ‘InstallWizard.aspx’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/45180/info
Alguest 1.1 – Multiple Cookie Authentication Bypass Vulnerabilities
source: https://www.securityfocus.com/bid/45175/info
D-Link Routers – Authentication Bypass (1)
# Exploit Title: Multiple D-Link Router Authentication Bypass Vulnerabilities