webapps

Joomla! Component com_itarmory – SQL Injection

# Author: Craw

Joomla! Component Ozio Gallery – SQL Injection

# Exploit Title: Joomla Component (com_oziogallery) SQL Injection

AKY Blog – SQL Injection

===================================================

Open Realty 2.x/3.x – Persistent Cross-Site Scripting

# Title: persistence XSS flaw in Open Realty 2.x and 3.x

sNews – ‘index.php’ SQL Injection

# Exploit Title:sNews (index.php) SQL Injection Vulnerability

DM FileManager 3.9.11 – Arbitrary File Upload

vBulletin 3.8.6 – ‘faq.php’ Information Disclosure

010101010101010101010101010101010101010101010101010101010

SAP NetWeaver 6.4/7.0 – ‘wsnavigator’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41925/info

ValidForm Builder script – Remote Command Execution

# Exploit Title: ValidForm Builder script Remote Command Execution

PhotoPost PHP 4.6.5 – ‘ecard.php’ SQL Injection

########################################################################################

Joomla! Component com_iproperty – SQL Injection

====================================================

Joomla! Component Huru Helpdesk – SQL Injection (2)

====================================================

Joomla! Component Golf Course Guide 0.9.6.0 – SQL Injection

# Exploit Title: Joomla Component com_golfcourseguide SQL Injection Vulnerability

PhotoPost – PHP SQL Injection

# Exploit Title: PhotoPost PHP SQL Injection Vulnerability

ZeeMatri 3.x – Arbitrary File Upload

1 ################################### 1

ZeeNetworking 1x – Arbitrary File Upload

1 ################################### 1

LILDBI – Arbitrary File Upload

# Exploit Title: LILDBI Shell Upload Vulnerability

ZeeAdbox 2.x – SQL Injection

=======================================================

Claus Muus Spitfire 1.0.336 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41885/info

AJ HYIP PRIME – ‘welcome.php?id’ Blind SQL Injection

AJ HYIP PRIME (welcome.php id) Blind SQL Injection Vulnerability

WordPress Plugin myLDlinker – SQL Injection

010101010101010101010101010101010101010101010101010101010

phpBB MOD 2.0.19 – Invitation Only (PassCode Bypass)

PHPBB MOD [2.0.19] Invitation Only (PassCode Bypass vulnerability)

phpBazar Admin – Information Disclosure

=====================================

Free PHP Photo Gallery Script – Remote File Inclusion

# Exploit Title: Free PHP photo gallery script Remote File inclusion

Free PHP photo Gallery script – Remote Command Execution

# Exploit Title: Free PHP photo gallery script Remote Command Execution

AJ HYIP MERIDIAN – ‘news.php?id’ Blind SQL Injection

AJ HYIP MERIDIAN (news.php id) Blind SQL Injection Vulnerability

Joomla! Component com_jomtube – ‘user_id’ Blind SQL Injection

===============================================================================

RapidLeech Scripts – Arbitrary File Upload

# Exploit Title: RapidLeech Scrits Remote File Upload ( upload shell php )

OpenX – ‘phpAdsNew’ Remote File Inclusion

# Exploit Title: OpenX (phpAdsNew) Remote File inclusion Vulnerability

Outlook Web Access 2003 – Cross-Site Request Forgery

# Exploit Title: Microsoft Office Outlook Web Access for Exchange Server 2003 XSRF Vulnerability

Imagine-cms 2.50 – SQL Injection

#!/usr/bin/perl

PHP Chat for 123 Flash Chat – Remote File Inclusion

# Date: 2010/07/20

Joomla! Component com_spa – SQL Injection (1)

====================================================

Mayasan Portal 2.0 – ‘haberdetay.asp’ SQL Injection

########################################################################################

Mayasan Portal 2.0 – ‘makaledetay.asp’ SQL Injection

===================================================

Caner Hikaye Script – SQL Injection

===================================================

EZ-osCommerce 3.1 – Arbitrary File Upload

====================================================

SnowFlake CMS 0.9.5 Beta – ‘uid’ SQL Injection

source: https://www.securityfocus.com/bid/41791/info

YACS CMS 10.5.27 – ‘context[path_to_root]’ Remote File Inclusion

source: https://www.securityfocus.com/bid/41773/info

iOffice 0.1 – ‘parametre’ Remote Command Execution

source: https://www.securityfocus.com/bid/41768/info

rapidCMS 2.0 – Authentication Bypass

# Exploit Title: rapidCMS V2 Authentication Bypass

PHP-Fusion – Remote Command Execution

# Exploit Title: PHP-Fusion Remote Command Execution Vulnerability

Kayako eSupport 3.70.02 – ‘functions.php’ SQL Injection

Peace !!

ClickAndRank Script – Authentication Bypass

# Exploit Title: ClickAndRank Script Authentication Bypass

Joomla! Component StaticXT – SQL Injection

===================================================

Joomla! Component com_spa – SQL Injection (2)

===================================================

Calendarix – ‘cal_cat.php’ SQL Injection

===============================================================================

Kayako eSupport 3.70.02 – SQL Injection

Name :Kayako eSupport v3.70.02 SQL Injection Vulnerability

Subrion Auto Classifieds – Persistent Cross-Site Scripting

Name :Subrion Auto Classifieds Persistent Xss Vulnerability

Freelancer Marketplace Script – Arbitrary File Upload

Name : Freelancers Marketplace Script Upload Vulnerability