webapps

Easy Travel Portal 2 – ‘travelbycountry.asp’ SQL Injection

TITLE: Easy Travel Portal "travelbycountry.asp" SQL Injection Vulnerability

Ananda Real Estate 3.4 – ‘list.asp’ Multiple SQL Injections

TITLE: Ananda Real Estate "list.asp" Multiple SQL Injection Vulnerabilities

etomite 1.1 – Multiple Vulnerabilities

Vulnerability ID: HTB22710

Contenido CMS 4.8.12 – Cross-Site Scripting

Vulnerability ID: HTB22635

Contenido CMS 4.8.12 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45160/info

Joomla! Component Annuaire – ‘index.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/45147/info

LittlePhpGallery 1.0.2 – Local File Inclusion

# Exploit Title: local file include / File Disclosure

Digitalus 1.10.0 Alpha2 – Arbitrary File Upload

########################################################

BugTracker.NET 3.4.4 – Multiple Vulnerabilities

Core Security Technologies - CoreLabs Advisory

OsCSS 1.2 – Arbitrary File Upload

# Exploit Title: OsCSS Remote File Upload Exploit

Alibaba Clone B2B 3.4 – SQL Injection

Exploit Title:Alibaba v3.4 clone b2b(countrydetails.php) SQL Injection Vulnerability

Elxis CMS 2009.2 – SQL Injection

Vulnerability ID: HTB22700

DynPG 4.2.0 – Multiple Vulnerabilities

Vulnerability ID: HTB22703

enano CMS 1.1.7pl1 – Multiple Vulnerabilities

Vulnerability ID: HTB22709

Eclime 1.1.2b – Multiple Vulnerabilities

Vulnerability ID: HTB22705

Pandora Fms 3.1 – Directory Traversal / Local File Inclusion

[+] Introduction

Pandora Fms 3.1 – Blind SQL Injection

[+] Introduction

Pandora Fms 3.1 – SQL Injection

[+] Introduction

Pandora Fms 3.1 – OS Command Injection

[+] Introduction

Pandora FMS 3.1 – Authentication Bypass

[+] Introduction

Duhok Forum 1.1 – Arbitrary File Upload

==============================================

Link Protect 1.2 – Persistent Cross-Site Scripting

# Exploit Title: Link Protect 1.2 XSS Vulnerabilities

Orbis CMS 1.0.2 – Arbitrary File Upload

'Orbis CMS' Arbitrary Script Execution Vulnerability (CVE-2010-4313)

AWStats 6.x – Apache Tomcat Configuration File Arbitrary Command Execution

source: https://www.securityfocus.com/bid/45123/info

BugTracker.NET 3.4.4 – SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/45121/info

Joomla! Component com_storedirectory – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/45094/info

Joomla! Component Catalogue – SQL Injection / Local File Inclusion

source: https://www.securityfocus.com/bid/45090/info

Car Portal 2.0 – ‘car_make’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45092/info

Wernhart Guestbook 2001.03.28 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/45084/info

4homepages 4Images 1.7.x – ‘categories.php’ SQL Injection

source: https://www.securityfocus.com/bid/45079/info

Diferior 8.03 – Multiple Cross-Site Scripting Vulnerabilities

Vulnerability ID: HTB22721

MicroNetSoft RV Dealer Website – ‘search.asp’ / showAlllistings.asp’ SQL Injection

TITLE: MicroNetSoft RV Dealer Website Two SQL Injection Vulnerabilities

Site2Nite Big Truck Broker – ‘txtSiteId’ SQL Injection

Skeletonz CMS – Persistent Cross-Site Scripting

# Exploit Title: Xss on skeletonz-simple dynamic cms in the section comments

MemHT Portal 4.0.1 – ‘User Agent’ Persistent Cross-Site Scripting

#!/usr/bin/perl

Jurpopage 0.2.0 – SQL Injection

=========================================================

SmartBox – ‘page_id’ SQL Injection

source: https://www.securityfocus.com/bid/45101/info

E-lokaler CMS 2 – Admin Login Multiple SQL Injections

source: https://www.securityfocus.com/bid/45098/info

Easy Banner 2009.05.18 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45066/info

Easy Banner 2009.05.18 – ‘/member.php’ Multiple SQL Injection / Authentication Bypass

source: https://www.securityfocus.com/bid/45066/info

Frog CMS 0.9.5 – Multiple Vulnerabilities

Vulnerability ID: HTB22685

Wolf CMS 0.6.0b – Multiple Vulnerabilities

Vulnerability ID: HTB22681

SiteEngine 7.1 – SQL Injection

#################################################################################

JDownloader Webinterface – Source Code Disclosure

# Exploit Title: JDownloader Webinterface Source Code Disclosure

Joomla! Component JE Ajax Event Calendar – SQL Injection

# Vendor:

Mambo – Cache_Lite Class MosConfig_absolute_path Remote File Inclusion (Metasploit)

##

BASE – ‘base_qry_common’ Remote File Inclusion (Metasploit)

##

ColdFusion 8.0.1 – Arbitrary File Upload / Execution (Metasploit)

##

FreeNAS – ‘exec_raw.php’ Arbitrary Command Execution (Metasploit)

##

Free Simple Software – SQL Injection

'Free Simple Software' SQL Injection Vulnerability (CVE-2010-4298)