ACC IMoveis 4.0 – SQL Injection
# Exploit Title : iMoveis SQL Injection Vulnerability
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Alstrasoft e-Friends 4.96 – Multiple Vulnerabilities
AlstraSoft E-Friends 4.96 Multiple Remote Vulnerabilities
BlogBird Platform – Multiple Cross-Site Scripting Vulnerabilities
Vulnerability ID: HTB22647
Zomplog 3.9 – Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities
Vulnerability ID: HTB22643
NinkoBB 1.3RC5 – Cross-Site Scripting
Vulnerability ID: HTB22652
Zomplog 3.9 – Cross-Site Request Forgery
Vulnerability ID: HTB22645
BloofoxCMS Registration Plugin – SQL Injection
Vulnerability ID: HTB22658
Energine CMS – SQL Injection
Vulnerability ID: HTB22655
BloofoxCMS 0.3.5 – Information Disclosure
Vulnerability ID: HTB22660
MyBB 1.6 – Full Path Disclosure
Vulnerability ID: HTB22654
Novaboard 1.1.4 – Local File Inclusion
Vulnerability ID: HTB22657
DZCP (deV!L`z Clanportal) 1.5.4 – Local File Inclusion
Vulnerability ID: HTB22656
phpLiterAdmin 1.0 RC1 – Authentication Bypass
Vulnerability ID: HTB22653
DBHcms 1.1.4 – ‘dbhcms_user/SearchString’ SQL Injection
Vulnerability ID: HTB22651
BigACE 2.7.3 – Cross-Site Request Forgery (Change Admin Password)
#!/usr/bin/python
Plesk Small Business Manager 10.2.0 and Site Editor – Multiple Vulnerabilities
XSS + SQL Injection in Plesk Small Business Manager 10.2 + Site Editor
Jamb – Cross-Site Request Forgery (Add a Post)
#!/usr/bin/python
DBHcms 1.1.4 – ‘dbhcms_pid’ SQL Injection
DBHcms 1.1.4 SQL Injection Vulnerability
Pulse Pro 1.4.3 – Persistent Cross-Site Scripting
# Exploit Title: Pulse Pro 1.4.3 Persistent XSS Vulnerability
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/os?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/gsogroup?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/gso?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/group?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/domain?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/acl?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ivt/ivtserver?parm1’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
W-Agora 4.2.1 – ‘search.php?bn’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44370/info
W-Agora 4.2.1 – ‘search.php3?bn’ Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/44370/info
Simple Directory Listing 2.1 – ‘SDL2.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42359/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/webseal?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/user?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/rule?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/pop?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
pecio CMS 2.0.5 – ‘target’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44304/info
Micro CMS 1.0 – ‘name’ HTML Injection (2)
source: https://www.securityfocus.com/bid/44300/info
Wiccle Web Builder 2.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/44295/info
Squirrelcart PRO 3.0.0 – Blind SQL Injection
Squirrelcart PRO 3.0.0 Blind SQL Injection Vulnerability
sNews CMS – Multiple Cross-Site Scripting Vulnerabilities
Vulnerability ID: HTB22638
4Site CMS 2.6 – ‘cat’ SQL Injection
source: https://www.securityfocus.com/bid/44258/info
sNews 1.7 – ‘snews.php’ Cross-Site Scripting / HTML Injection
source: https://www.securityfocus.com/bid/44255/info
phpCheckZ 1.1.0 – Blind SQL Injection
phpCheckZ 1.1.0 Blind SQL Injection Vulnerability
Event Ticket Portal Script Admin Password Change – Cross-Site Request Forgery
===========================================================
Travel Portal Script – Cross-Site Request Forgery (Admin Password Change)
=====================================================
Brooky CubeCart 2.0.1 – SQL Injection
===================================================================
GeekLog 1.7.0 – ‘FCKeditor’ Arbitrary File Upload
###################################################
411cc – Multiple SQL Injections
===================================================================
Kisisel Radyo Script – Multiple Vulnerabilities
Kisisel Radyo Script - Multiple Vulnerabilities
Tastydir 1.2 (1216) – Multiple Vulnerabilities
# Exploit Title: Tastydir