webapps

Webmatic – ‘index.php’ SQL Injection

) ) ) ( ( ( ( ( ) )

EasyJobPortal – Arbitrary File Upload

#################################################################

Invision Power Board 3 – ‘search_app’ SQL Injection

# ============================================================

WordPress Plugin Event Registration 5.32 – SQL Injection

[ Wordpress Event Registration SQL injection ]

DBSite – SQL Injection

#!/usr/bin/env python

AWCM 2.1 Final – Remote File Inclusion

[+]Exploit Title: [awcm v2.1 final Remote File Inclusion]

Build a Niche Store 3.0 – ‘BANS’ Authentication Bypass

#########################################################################

Camtron CMNC-200 IP Camera – Undocumented Default Accounts

Finding 4: Undocumented Default Accounts

Camtron CMNC-200 IP Camera – Authentication Bypass

Finding 3: Web Based Administration Interface Bypass

OpenWrt 10.03 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/44843/info

Joomla! Component JSupport 1.5.6 – SQL Injection

# Exploit Title: Joomla Component com_jsupport SQL Injection Vulnerability

Joomla! Component JSupport 1.5.6 – Cross-Site Scripting

# Exploit Title: Joomla Component com_jsupport Critical XSS Vulnerability

Woltlab Burning Board 2.3.4 – File Disclosure

# Exploit Title: Woltlab Burning Board 2.3.4 File Disclosure Vulnerability

ASPilot Pilot Cart 7.3 – ‘newsroom.asp’ SQL Injection

# Title: [ASPilot Pilot Cart 7.3 SQL Injection]

Metinfo 3.0 – Multiple Vulnerabilities

# Exploit Title: metinfo3.0 Mullti Vulnerability

E-Xoopport 3.1 – ‘display.php?katid’ SQL Injection

XT:Commerce < 3.04 SP2.1 - Cross-Site Scripting

#----------------------------------------------------------------------------------

Landesk – OS command Injection

1. Advisory Information

eBlog 1.7 – Multiple SQL Injections

eBlog 1.7 Multiple SQL Injection Vulnerabilities

FCKEditor Core 2.x 2.4.3 – ‘FileManager upload.php’ Arbitrary File Upload

# Exploit Title: FCKeditor 2.0-2.4.3 arbitrary file upload

WeBid 0.85P1 – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/44765/info

PHPShop 2.1 EE – ‘name_new’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/44763/info

Ricoh Web Image Monitor 2.03 – Cross-Site Scripting

source: https://www.securityfocus.com/bid/44772/info

IBM OmniFind – Cross-Site Request Forgery

The forms in the administrator interface are not protected against XSRF. The

osCommerce 2.2 – Cross-Site Request Forgery

# Exploit Title: osCommerce v2.2 Change Admin Pass

Joomla! Component com_img – Local File Inclusion

################################################################################################################

Joomla! Component com_markt – SQL Injection

################################################################################################################

Joomla! Component btg_oglas – HTML / Cross-Site Scripting Injection

################################################################################################################

Joomla! Component JQuarks4s 1.0.0 – Blind SQL Injection

JQuarks4s Joomla Component 1.0.0 Blind SQL Injection Vulnerability

Woltlab Burning Board Userlocator 2.5 – SQL Injection

----------------------------Information------------------------------------------------

Joomla! Component ProDesk 1.5 – Local File Inclusion

[~]-------------------------------------------------------------------------------------------------------

Seo Panel 2.1.0 – Critical File Disclosure

Title: Seo Panel 2.1.0 - Critical File Disclosure

Joomla! Component com_clanlist – SQL Injection

########################################################################################

xt:Commerce Shopsoftware 3/4 – ‘FCKeditor’ Arbitrary File Upload

=============================================================

Joomla! Component com_clan – SQL Injection

Joomla Component com_clan Sql Injection Vulnerability

Joomla! Component Cookex Agency CKForms – Local File Inclusion

####################################################################

WordPress Plugin jRSS Widget 1.1.1 – ‘url’ Information Disclosure

source: https://www.securityfocus.com/bid/44716/info

WordPress Plugin Vodpod Video Gallery 3.1.5 – ‘vodpod_gallery_thumbs.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/44715/info

WordPress Plugin SEO Tools 3.0 – ‘file’ Directory Traversal

source: https://www.securityfocus.com/bid/44710/info

WordPress Plugin WP Survey And Quiz Tool 1.2.1 – Cross-Site Scripting

source: https://www.securityfocus.com/bid/44707/info

WordPress Plugin FeedList 2.61.01 – ‘handler_image.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/44704/info

Punbb 1.3.4 – Multiple Full Path Disclosures

# Exploit Title: Punbb 1.3.4 Full Path Disclosure

DeluxeBB 1.3 – Private Information Disclosure

======================================================================

ASPilot Pilot Cart 7.3 – Multiple Vulnerabilities

# Title: [ASPilot Pilot Cart 7.3 multiple vulnerabilities]

phpCow 2.1 – File Inclusion

[*]##############################################

Joomla! Component com_forme 1.0.5 – Multiple Vulnerabilities

# Exploit Title: RSform! 1.0.5 (Joomla) Multiple Vulnerabilities

Zeeways Adserver – Multiple Vulnerabilities

# Exploit Title: Zeeways Adserver Multiple Vulnerabilities

MassMirror Uploader – Remote File Inclusion

=====================================================================================

Joomla! Component com_dcnews – Local File Inclusion

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Joomla! Component com_connect – Local File Inclusion

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=