System CMS Contentia – ‘news.php’ SQL Injection
source: https://www.securityfocus.com/bid/41248/info
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Ubiquity Nanostation5 (Air OS) – Remote Command Execution
# Exploit Title: Ubiquity Nanostation5 (Air OS) 0day Remote Command Execution
Golf Club Site – SQL Injection
# Exploit Title: Golf Club SQL injection Vulnerability
Specialist Bed and Breakfast Website – SQL Injection
# Exploit Title: Specialist Bed and Breakfast website SQL injection
Oxygen2PHP 1.1.3 – ‘member.php’ SQL Injection
#!/usr/bin/perl
webERP 3.11.4 – Multiple Vulnerabilities
# Title: webERP Multiple Vulnerabilities
Joomla! Component com_wmtpic 1.0 – SQL Injection
1 ########################################### 1
Joomla! Component Joomanager – SQL Injection
Note from the vendor received 10Mar11:
Joomla! Component Gamesbox 1.0.2 – ‘id’ SQL Injection
) ) ) ( ( ( ( ( ) )
ShopCartDx 4.30 – ‘products.php’ Blind SQL Injection
#!/usr/bin/perl
PHP-Nuke 8.0 – SQL Injection
#!/usr/bin/perl
ArcademSX 2.904 – ‘cat’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41252/info
TornadoStore 1.4.3 – SQL Injection / HTML Injection
source: https://www.securityfocus.com/bid/41233/info
Kryn.cms 6.0 – Cross-Site Request Forgery / HTML Injection
source: https://www.securityfocus.com/bid/41229/info
Miyabi CGI Tools 1.02 – ‘index.pl’ Remote Command Execution
source: https://www.securityfocus.com/bid/41228/info
Grafik CMS – ‘/admin.php’ SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/41227/info
Iatek PortalApp 3.3/4.0 – ‘login.asp’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/41224/info
CANDID – ‘/image/view.php?image_id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41216/info
CANDID – ‘/image/view.php?image_id’ SQL Injection
source: https://www.securityfocus.com/bid/41216/info
PHP Bible Search – ‘bible.php?chapter’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41197/info
PHP Bible Search – ‘bible.php?chapter’ SQL Injection
source: https://www.securityfocus.com/bid/41197/info
WebDM CMS – SQL Injection
WebDM CMS SQL Injection Vulnerability
LIOOSYS CMS – ‘news.php’ SQL Injection
##############################################################################
CubeCart PHP 4.3.x – ‘shipkey’ SQL Injection
SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application
Gekko CMS – SQL Injection
##################################################################
PageDirector CMS – ‘result.php’ SQL Injection
) ) ) ( ( ( ( ( ) )
Allomani Super MultiMedia 2.5 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Allomani - Super Multimedia v2.5 - [CSRF] Add Admin Account
Allomani E-Store 1.0 – Cross-Site Request Forgery (Add Admin) (1)
# Exploit Title: Allomani - E-Store v1.0 - [CSRF] Add Admin Account
YPNinc PHP Realty Script – ‘docID’ SQL Injection
) ) ) ( ( ( ( ( ) )
YPNinc JokeScript – ‘ypncat_id’ SQL Injection
) ) ) ( ( ( ( ( ) )
PHPDirector 0.30 – ‘videos.php’ SQL Injection
======================================================================
Ecomat CMS – SQL Injection
Vulnerability ID: HTB22390
V-EVA Classified Script 5.1 – ‘classified_img.php’ SQL Injection
source: https://www.securityfocus.com/bid/41204/info
Clix’N’Cash Clone 2010 – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/41202/info
eBay Clone Script 2010 – ‘showcategory.php’ SQL Injection
source: https://www.securityfocus.com/bid/41200/info
MySpace Clone 2010 – SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/41199/info
BlaherTech Placeto CMS – ‘Username’ SQL Injection
source: https://www.securityfocus.com/bid/41190/info
Customer Paradigm PageDirector – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/41184/info
Applicure dotDefender 4.01-3 – Persistent Cross-Site Scripting
An advisory by EnableSecurity.
Subdreamer Pro 3.0.4 – CMS Upload
__________ __ __ .__
CMSQLite / CMySQLite 1.3 – Cross-Site Request Forgery
# Title: CMSQlite & CMySQLite CSRF Vulnerability
I-net Multi User Email Script – SQL Injection
Name : I-net Multi User Email Script SQLi Vulnerability
Netartmedia iBoutique.MALL – SQL Injection
Name : Netartmedia iBoutique.MALL SQLi Vulnerability
PageDirector CMS – Multiple Vulnerabilities
###################################################################################
PTCPay GEN4 – ‘buyupg.php’ SQL Injection
=====================================================
iNet Online Community – Blind SQL Injection
# Exploit Title: iNet Online Community Blind SQLi Vulnerability
Ceica-GW – ‘login.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40917/info
Swoopo Clone 2010 – SQL Injection
1 ########################################## 1
I-Net MLM Script Engine – SQL Injection
1 ########################################## 1
i-netsolution Job Search Engine – SQL Injection
1 ########################################## 1