Joomla! Component ccInvoices – SQL Injection
#############################################################
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Joomla! Component AutoArticles 3000 – SQL Injection
source: https://www.securityfocus.com/bid/44694/info
Angel Learning Management System 7.3 – ‘pdaview.asp’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44689/info
Joomla! 1.5.x – SQL Error Information Disclosure
source: https://www.securityfocus.com/bid/44674/info
JBI CMS – SQL Injection
In The Name Of GOD
MiniBB 2.5 – SQL Injection
Vulnerability ID: HTB22671
JAF CMS 4.0 rc2 – Multiple Vulnerabilities
Vulnerability ID: HTB22665
SweetRice 0.6.7 – Multiple Vulnerabilities
Vulnerability ID: HTB22669
eoCMS 0.9.04 – Multiple Vulnerabilities
Vulnerability ID: HTB22677
Zen Cart 1.3.9h – Local File Inclusion
Zen Cart 1.3.9h Local File Inclusion Vulnerability
digiSHOP 2.0.2 – SQL Injection
-----------------------------------
eLouai’s Force Download Script – Arbitrary Local File Download
+---------------------------------------------------------------------------------------------+
Dolphin 7.0.3 – Multiple Vulnerabilities
# Exploit Title: Dolphin Mullti Vulnerability
Site2Nite Business eListings – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Digger Solutions NewsLetter Open Source – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Online Work Order System (OWOS) Professional Edition – Authentication Bypass
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Comrie Software Pay Roll Time Sheet & Punch Card – Authentication Bypass
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Site2Ntite Vacation Rental (VRBO) Listings – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Azaronline Design – SQL Injection
########################################################################
MetInfo 3.0 – ‘FCKeditor’ Arbitrary File Upload
# Exploit Title: [MetInfo 3.0 (fckeditor) File Upload Exploit]
Webmedia Explorer 6.13.1 – Persistent Cross-Site Scripting
Vulnerability ID: HTB22661
MemHT Portal 4.0.1 – Persistent Cross-Site Scripting
Vulnerability ID: HTB22662
Kandidat CMS 1.4.2 – Persistent Cross-Site Scripting
Vulnerability ID: HTB22648
Online Work Order Suite – Login SQL Injection
source: https://www.securityfocus.com/bid/44608/info
Douran Portal 3.9.7.55 – Arbitrary File Upload / Cross-Site Scripting
source: https://www.securityfocus.com/bid/44594/info
WordPress Plugin cformsII 11.5/13.1 – ‘lib_ajax.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/44587/info
SmartOptimizer – Null Character Remote Information Disclosure
source: https://www.securityfocus.com/bid/44578/info
Elastix 2.0.2 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/44565/info
douran portal 3.9.7.55 – Multiple Vulnerabilities
===========================================================
Collabtive 0.65 – SQL Injection
ANATOLIA SECURITY ADVISORY
XAMPP 1.7.3 – Multiple Vulnerabilities
# _ ____ __ __ ___
Joomla! Component Sponsor Wall 1.1 – SQL Injection
============================================================
Joomla! Component Pulse Infotech Flip Wall – SQL Injection
=========================================================
MetInfo 3.0 – PHP Code Injection
#####################################################################################################
MetInfo 2.0 – PHP Code Injection
#####################################################################################################
Simpli Easy (AFC Simple) NewsLetter 4.2 – Cross-Site Scripting / Information Leakage
Simpli Easy (AFC Simple) Newsletter
Zoopeer 0.1/0.2 – ‘FCKeditor’ Arbitrary File Upload
=============================================================
Joomla! Component com_jfuploader < 2.12 - Arbitrary File Upload
=========================================================================================================
CMS WebManager-Pro 7.4.3 – Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/44591/info
mygamingladder MGL Combo System 7.5 – ‘game.php’ SQL Injection
----------------------------Information------------------------------------------------
PHPKit 1.6.1 R2 – ‘overview.php’ SQL Injection
----------------------------Information------------------------------------------------
Pub-Me CMS – Blind SQL Injection
_______ _____ ___
TFTgallery 0.13.1 – Local File Inclusion
# TFTgallery
Feindura CMS Groupware – Multiple Local File Inclusion / Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/44501/info
W-Agora 4.1.5 – Local File Inclusion / Cross-Site Scripting
source: https://www.securityfocus.com/bid/44507/info
LES PACKS – ‘ID’ SQL Injection
source: https://www.securityfocus.com/bid/44457/info
Joomla! Component Projects ‘com_projects’ – SQL Injection / Local File Inclusion
source: https://www.securityfocus.com/bid/44456/info
mycart 2.0 – Multiple Vulnerabilities
MyCart 2.0 Multiple Remote Vulnerabilities