Sports Accelerator Suite 2.0 – ‘news_id’ SQL Injection
Sports Accelerator Suite v2.0 (news_id) Remote SQL Injection Vulnerability
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Saurus CMS Admin Panel – Multiple Cross-Site Request Forgery Vulnerabilities
# Author: Fady Mohammed Osman (cute hacker)
sFileManager 24a – Local File Inclusion
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
ACollab – Multiple Vulnerabilities
##########################www.BugReport.ir########################################
Edit-X PHP CMS – ‘search_text’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42442/info
CMS Source – Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/42437/info
MailForm 1.2 – Remote File Inclusion
# Exploit Title: [MailForm Remote File Include ]
Get Tube – SQL Injection
-----------------------------------------------------------------------------------------
Plogger – Remote File Disclosure
# Plogger Remote File Disclosure Vulnerability
Rock Band CMS 0.10 – ‘news.php’ Multiple SQL Injections (2)
source: https://www.securityfocus.com/bid/42424/info
Computer Associates Oneview Monitor 6.0 – ‘doSave.jsp’ Remote Code Execution
source: https://www.securityfocus.com/bid/42413/info
Kleeja Upload – Cross-Site Request Forgery (Change Admin Password)
# Exploit Title: Kleeja Upload - CSRF Change Admin Password
PHP-Nuke 8.1 SEO Arabic – Remote File Inclusion
# Exploit Title: [PHP-Nuke-8.1-seo-Arabic Remote File Include ]
MybbCentral TagCloud 2.0 – ‘Topic’ HTML Injection
source: https://www.securityfocus.com/bid/42406/info
KnowledgeTree 3.5.2 Community Edition – Persistent Cross-Site Scripting
# Exploit Title: KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability
Saurus CMS 4.7.0 – Remote File Inclusion
# Exploit Title: [SaurusCMSupdate4.7.0 Remote File Include ]
Apache JackRabbit 2.0.0 – webapp XPath Injection
# Title: Apache JackRabbit webapp XPath Injection
phpMUR – Remote File Disclosure
# Exploit Title: phpMUR Remote File Disclosure
clearBudget 0.9.8 – Remote File Inclusion
# Exploit Title: clearBudget v0.9.8 Remote File Include
Nasim Guest Book – ‘page’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42503/info
Onyx – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/42446/info
Mystic 0.1.4 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/42445/info
SyntaxCMS – ‘rows_per_page’ SQL Injection
source: https://www.securityfocus.com/bid/42436/info
Zendesk – Multiple Vulnerabilities
/¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯\
Joomla! Component Teams – Multiple Blind SQL Injections
Teams 1_1028_100809_1711 Joomla Component Multiple Blind SQL Injection Vulnerabilities
Joomla! Component Amblog 1.0 – Multiple SQL Injections
Amblog 1.0 Joomla Component Multiple SQL Injection Vulnerabilities
Preation Eden Platform 27.7.2010 – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/42321/info
Allinta CMS 22.07.2010 – Multiple SQL Injections / Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/42320/info
wizmall 6.4 – Cross-Site Request Forgery
# Exploit Title: wizmall 6.4 CSRF Vulnerabilities
Joomla! Component com_yellowpages – SQL Injection
===============================================================
PHP-Nuke 8.x – Blind SQL Injection
#Title: Php Nuke Blind Sql Injection 8.x.x
kleeja 1.0.0RC6 – Database Disclosure
====================================================
PHPKick 0.8 – ‘Statistics.php’ SQL Injection
# Exploit Title: PHPKick v0.8 statistics.php SQL Injection
Tycoon CMS Record Script 1.0.9 – SQL Injection
% Tycoon(CMS) Record Script Sql vulnerability
Joomla! Component NeoRecruit 1.4 – SQL Injection
) ) ) ( ( ( ( ( ) )
Dataface 1.0 – ‘admin.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42282/info
Prado Portal 1.2 – ‘page’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42276/info
Joomla! Component com_cgtestimonial 2.2 – Multiple Vulnerabilities
cgTestimonial 2.2 Joomla Component Multiple Remote Vulnerabilities
Muraus Open Blog – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/42255/info
Hulihan Applications Amethyst 0.1.5 – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/42253/info
DiamondList – ‘/user/main/update_category?category[description]’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42252/info
DiamondList – ‘/user/main/update_settings?setting[site_title]’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42252/info
Hulihan Applications BXR 0.6.8 – SQL Injection / HTML Injection
source: https://www.securityfocus.com/bid/42247/info
DT Centrepiece 4.5 – Cross-Site Scripting / Security Bypass
source: https://www.securityfocus.com/bid/42243/info
PHPFinance 0.6 – ‘/group.php’ SQL Injection / HTML Injection
source: https://www.securityfocus.com/bid/42230/info
DiamondList 0.1.6 – Cross-Site Request Forgery
Vulnerability ID: HTB22517
Amethyst 0.1.5 – Cross-Site Scripting
Vulnerability ID: HTB22502
BXR 0.6.8 – Cross-Site Request Forgery
Vulnerability ID: HTB22503
Open Blog 1.2.1 – Cross-Site Request Forgery
Vulnerability ID: HTB22496
ccTiddly 1.7.6 – Multiple Remote File Inclusions
1 ######################################## 1