WSN Links – SQL Injection
'WSN Links' SQL Injection Vulnerability (CVE-2010-4006)
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
phpvidz 0.9.5 – Administrative Credentials Disclosure
Researcher: Michael Brooks
Getsimple CMS 2.01 < 2.02 - Administrative Credentials Disclosure
Researcher: Michael Brooks
SimpLISTic SQL 2.0 – ’email.cgi’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/45040/info
ZYXEL P-660R-T1 V2 – ‘HomeCurrent_Date’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/45027/info
PHPmotion 1.62 – ‘FCKeditor’ Arbitrary File Upload
-----------------------------------------------------------------------
Acidcat CMS 3.3 – ‘FCKeditor’ Arbitrary File Upload
==============================================================================
JCMS 2010 – File Download
#####################################################################################################
jSchool Advanced – Blind SQL Injection
-----------------------------------------------------------------------
AuraCMS 1.62 – ‘pfd.php’ SQL Injection
-----------------------------------------------------------------------
Hot Links SQL 3.2 – ‘report.cgi’ SQL Injection
source: https://www.securityfocus.com/bid/45000/info
cPanel 11.x – Cross-Site Request Forgery (Edit E-mail)
# Exploit Title: Cpanel 11.X Edit E-mail Cross Site Request Forgery exploit
sahitya graphics CMS – Multiple Vulnerabilities
Exploit Title:Sahitya Graphics CMS Multiple Remote Vulnerabilities
vBulletin 4.0.8 PL1 – Cross-Site Scripting Filter Bypass within Profile Customization
# Exploit Title: vBulletin 4.0.8 PL1 - XSS Filter Bypass within Profile
S_CMS 2.5 – Multiple Vulnerabilities
# ============================================================
Joomla! Component Jimtawl 1.0.2 – Local File Inclusion
-----------------------------------------------------------------------
DVD Rental Software – SQL Injection
# Exploit Title: DVD Rental Software SQL injection Vulnerability
Plogger Gallery 1.0 – Cross-Site Request Forgery (Change Admin Password)
-------------------------------------------------------------------------
Arabian YouTube Script – Blind SQL Injection
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-{In The Name Of Allah The Mercifull}-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
PHPGallery 1.1.0 – Cross-Site Request Forgery
-------------------------------------------------------------------------
ViArt Shop 4.0.5 – Multiple Vulnerabilities
# Title: [ViArt SHOP multiple vulnerabilities]
Fozzcom Shopping < 7.94 / < 8.04 - Multiple Vulnerabilities
Exploit Title:FozzCom shopping____ / *
chCounter 3.1.3 – SQL Injection
#!/usr/bin/python
WebRCSdiff 0.9 – ‘viewver.php’ Remote File Inclusion
========================================================
CompactCMS 1.4.1 – Multiple Cross-Site Scripting Vulnerabilities (1)
source: https://www.securityfocus.com/bid/44949/info
Front Accounting 2.3RC2 – Multiple SQL Injections
Advisory Name: Multiple SQL Injections in Front Accounting
Front Accounting 2.3RC2 – Multiple Persistent Cross-Site Scripting Vulnerabilities
Advisory Name: Multiple Persistent Cross-Site Scripting (XSS) in Front Accounting
Sitefinity CMS – ‘ASP.NET’ Arbitrary File Upload
=============================================================
CompactCMS 1.4.1 – SQL Injection
Vulnerability ID: HTB22697
ClanSphere 2010.0 Final – Multiple Vulnerabilities
Vulnerability ID: HTB22694
IceBB 1.0-rc10 – Multiple Vulnerabilities
Vulnerability ID: HTB22688
openEngine 2.0 100226 – Local File Inclusion / Cross-Site Scripting
##############################################################################
Joomla! Component com_maianmedia – SQL Injection
) ) ) ( ( ( ( ( ) )
BPRealestate Real Estate – Authentication Bypass
) ) ) ( ( ( ( ( ) )
BPConferenceReporting Web Reporting – Authentication Bypass
) ) ) ( ( ( ( ( ) )
BPDirectory Business Directory – Authentication Bypass
) ) ) ( ( ( ( ( ) )
BPAffiliate Affiliate Tracking – Authentication Bypass
) ) ) ( ( ( ( ( ) )
vBulletin 4.0.8 – Persistent Cross-Site Scripting via Profile Customization
Title: vBulletin 4.0.8 - Persistent XSS via Profile Customization
Raised Eyebrow CMS – ‘venue.php’ SQL Injection
source: https://www.securityfocus.com/bid/44880/info
Simea CMS – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/44878/info
Joomla! Component com_alfurqan15x – SQL Injection
#############################################################################################################
Nuked-klaN Module Boutique – Blind SQL Injection
# Exploit Title: module boutique nuked klan
Web Wiz NewsPad Express Edition 1.03 – Database File Disclosure
=============================================================
Chameleon Social Networking Software – Persistent Cross-Site Scripting
# Exploit Title: AbleDating script 2010 Critical XSS Vulnerability
BSI Advance Hotel Booking System 1.0 – SQL Injection
-----------------------------------------------------------------------
Pre Online Tests Generator Pro – SQL Injection
In The Name Of GOD
Pre ADS Portal – Authentication Bypass
In The Name Of GOD
OneOrZero AIms 2.6.0 Members Edition – Multiple Vulnerabilities
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
Joomla! Component CCBoard 1.2-RC – Multiple Vulnerabilities
# Exploit Title: Joomla Component com_ccboard Multiple Vulnerabilities