WikiWebHelp 0.3.3 – Insecure Cookie Handling
===============================================
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
eXV2 CMS – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/44169/info
KCFinder 2.2 – Arbitrary File Upload
: # Exploit Title: kcfinder 2.2 upload shell :
TWiki 5.0 – bin/login Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/44103/info
TWiki 5.0 – ‘/bin/view?rev’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44103/info
Xlrstats 2.0.1 – SQL Injection
----------------------------------------------------------------------------
Data/File – upload and Management Arbitrary File Upload
: # Exploit Title: Data/File upload and management local shell upload :
PluXml 5.0.1 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/44069/info
Ronny CMS 1.1 r935 – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/44066/info
Joomla! Component Jstore – ‘Controller’ Local File Inclusion
source: https://www.securityfocus.com/bid/44053/info
Exponent CMS 0.97 – Multiple Vulnerabilities
Exponent CMS v0.97 Multiple Vulnerabilities
Oracle Fusion Middleware 10.1.2/10.1.3 – BPEL Console Cross-Site Scripting
source: https://www.securityfocus.com/bid/43954/info
Collabtive 0.65 – Multiple Vulnerabilities
ANATOLIA SECURITY ADVISORY
WikiWebHelp 0.3.3 – Cross-Site Request Forgery
#Blog: yoyahack.blogspot.com
Joomla! / Mambo Component com_trade – ‘PID’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43915/info
BaconMap 1.0 – Local File Disclosure
------------------------------------------------------------------------
BaconMap 1.0 – SQL Injection
------------------------------------------------------------------------
OrangeHRM 2.6.0.1 – Local File Inclusion
# Exploit Title: OrangeHRM 2.6.0.1 Local File Inclusion Vulnerability
Site2Nite Auto e-Manager – SQL Injection
==================================================
PHP-Fusion Mod Mg User Fotoalbum 1.0.1 – SQL Injection
----------------------------Information------------------------------------------------
VideoDB 3.0.3 – Multiple Vulnerabilities
# Exploit Title: VideoDB Multiple Vulnerabilities
Joomla! Component JS Calendar 1.5.1 – Multiple Vulnerabilities
JS Calendar 1.5.1 Joomla Component Multiple Remote Vulnerabilities
Chipmunk Pwngame – Multiple SQL Injections
===================================================
OPEN IT OverLook 5 – ‘title.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43872/info
Lantern CMS – ’11-login.asp’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43865/info
Flex Timesheet – Authentication Bypass
===================================================
xWeblog 2.2 – ‘arsiv.asp?tarih’ SQL Injection
#!/usr/bin/env python
xWeblog 2.2 – ‘oku.asp?makale_id’ SQL Injection
===================================================
Feindura File Manager 1.0(rc) – Arbitrary File Upload
===================================================
Backbone Technology Expression 18.9.2010 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/43910/info
Joomla! Component Club Manager – ‘cm_id’ SQL Injection
source: https://www.securityfocus.com/bid/43821/info
SquirrelMail Virtual Keyboard Plugin – ‘vkeyboard.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43749/info
Elxis 2009.2 rev2631 – SQL Injection
source: https://www.securityfocus.com/bid/43743/info
Cag CMS 0.2 – Cross-Site Scripting / Blind SQL Injection
-----------------------------------------------------------------------------------------
SPAW Editor 2.0.8.1 – Local File Inclusion
# Exploit Title: local file include
CuteNews – ‘page’ Local File Inclusion
==========================================================
Docebo 3.6 – ‘description’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43721/info
ITS SCADA – ‘Username’ SQL Injection
source: https://www.securityfocus.com/bid/43680/info
Surgemail SurgeWeb 4.3e – Cross-Site Scripting
source: https://www.securityfocus.com/bid/43679/info
Portili Personal and Team Wiki 1.14 – Multiple Vulnerabilities (2)
source: https://www.securityfocus.com/bid/41973/info
Uebimiau Webmail 3.2.0-2.0 – Local File Inclusion
# Exploit Title: Uebimiau Webmail Local File Inclusion
Aspect Ratio CMS – Blind SQL Injection
# Author: Stephan Sattler // http://www.solidmedia.de
DNET Live-Stats 0.8 – Local File Inclusion
# Exploit Title: DNET Live-Stats 0.8 Local File Inclusion
FAQMasterFlex 1.2 – SQL Injection
Hi guys, I just found a sqli bug on FAQMasterFlex. Since the software used
Cilem Haber 1.4.4 (Tr) – Database Disclosure
#!/usr/bin/env python
Aprox CMS Engine 6.0 – Multiple Vulnerabilities
# Exploit Title: Aprox CMS Engine V6 Multiple Vulnerabilities