Bilder Upload Script Datei Upload 1.09 – Arbitrary File Upload
[~]######################################### InformatioN
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
2DayBiz Photo Sharing Script – SQL Injection (2)
----------------------------Information------------------------------------------------
2DayBiz ybiz Freelance Script – SQL Injection
----------------------------Information------------------------------------------------
2DayBiz ybiz Polls Script – SQL Injection
----------------------------Information------------------------------------------------
2DayBiz Matrimonial Script – ‘smartresult.php’ SQL Injection
----------------------------Information------------------------------------------------
Speedy 1.0 – Arbitrary File Upload
# Author: ViRuS Qalaa
Joomla! Component jesectionfinder – Local File Inclusion
Name : Joomla jesectionfinder LFI Vulnerability
Joomla! Component com_jejob – Local File Inclusion
Name : Joomla com_jejob LFI Vulnerability
Joomla! Component jeeventcalendar – Local File Inclusion
Critical Level : HIGH
Joomla! Component JE Media Player – Local File Inclusion
Name : Joomla je-media-player LFI Vulnerability
Joomla! Component JE Awd Song – Persistent Cross-Site Scripting
Critical Level : HIGH
PHP-Nuke 8.2 – Arbitrary File Upload
# Title : PHPnuke 8.2 Remote Upload File Exploit
WordPress Plugin Cimy Counter – Full Path Disclosure / Redirector / Cross-Site Scripting / HTTP Response Spitting
----------------------------
Clicker CMS – Blind SQL Injection
# Exploit Title: Clicker CMS Blind SQL Injection Vulnerability
Joomla! Component com_sef – Remote File Inclusion
==========================================================
AbleSpace 1.0 – ‘news.php’ SQL Injection
source: https://www.securityfocus.com/bid/41139/info
Joomla! Component jesubmit 1.4 – SQL Injection
Exploit Title: Joomla JE Story submit SQL Injection
snipe Gallery Script – SQL Injection
# Exploit Title: snipe gallery Script Sql Injection
2DayBiz B2B Portal Script – ‘selling_buy_leads1.php’ SQL Injection
# Exploit Title: 2daybiz B2B Portal Script Sql Injection
ARSC Really Simple Chat 3.3 – Remote File Inclusion / Cross-Site Scripting
=> ARSC Really Simple Chat V3.3 Remote File Inclsion & Cross Site Scripting Vulnerability
Allomani Songs & Clips 2.7.0 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Allomani & Clips v2.7.0 - [CSRF] Add Admin Account
2DayBiz – Multiple SQL Injections
$-------------------------------------------------------------------------------------------------------------------
2DayBiz Matrimonial Script – SQL Injection / Cross-Site Scripting
$-------------------------------------------------------------------------------------------------------------------
OneCMS 2.6.1 – ‘short1’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41194/info
OneCMS 2.6.1 – ‘search’ SQL Injection
source: https://www.securityfocus.com/bid/41194/info
OneCMS 2.6.1 – ‘cat’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41194/info
Limny 2.1 – ‘q’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41152/info
Lois Software WebDB 2.0A Script – Multiple SQL Injections
source: https://www.securityfocus.com/bid/41124/info
Big Forum – ‘forum.php?id’ SQL Injection
:::::::::::::::::::::::::
Big Forum 5.2 – Arbitrary File Upload / Local File Inclusion
=> Big Forum 5.2v Arbitrary File Upload & Local File Inclusion Vulnerability
PHPortal 1.2 – ‘gunaysoft.php’ Remote File Inclusion
# Tilte: phportal_1.2 (gunaysoft.php) Remote File Include Vulnerability
2DayBiz B2B Portal Script – SQL Injection
# Exploit Title: 2daybiz B2B Portal Script SQL injection Vulnerability
ActiveCollab 2.3.0 – Local File Inclusion / Directory Traversal
============================================================
AbleDating script – SQL Injection
# Exploit Title: AbleDating script SQL injection Vulnerability
2DayBiz Job Site Script – SQL Injection
$-------------------------------------------------------------------------------------------------------------------
2DayBiz The Web Template Software – SQL Injection / Cross-Site Scripting
$-------------------------------------------------------------------------------------------------------------------
2DayBiz Real Estate Portal – ‘viewpropertydetails.php’ SQL Injection
$-------------------------------------------------------------------------------------------------------------------
2DayBiz Video Community Portal – ‘user-profile.php’ SQL Injection
$-------------------------------------------------------------------------------------------------------------------
Joomla! Component Realtyna Translator 1.0.15 – Local File Inclusion (2)
=================================================
AdaptCMS 2.0.0 Beta – ‘init.php’ Remote File Inclusion
) ) ) ( ( ( ( ( ) )
2DayBiz Photo Sharing Script – SQL Injection (1)
# Exploit Title: photo sharing script SQL injection Vulnerability
OpenEMR Electronic Medical Record Software 3.2 – Multiple Vulnerabilities
Redspin Security Notice -- RSN-2010-01
PreProject Multi-Vendor Shopping Malls – ‘products.php’ SQL Injection
source: https://www.securityfocus.com/bid/41074/info
2DayBiz Freelance Script – SQL Injection
# Exploit Title: 2daybiz Freelance script SQL injection Vulnerability
2DayBiz Matrimonial Script – SQL Injection
# Exploit Title: 2daybiz matrimonial script SQL injection Vulnerability
Custom Business Card script – SQL Injection
# Exploit Title: Custom Business Card script SQL injection Vulnerability
2DayBiz MLM Script – SQL Injection
# Script url: http://www.2daybiz.com/MLM.html
Interscan Web Security 5.0 – Arbitrary File Upload / Privilege Escalation
Advisory Name: Local Privilege Escalation in InterScan Web Security Virtual
Interscan Web Security Virtual Appliance 5.0 – Arbitrary File Download
# Exploit Title: Arbitrary File Download in InterScan Web Security
PishBini Footbal – Cross-Site Scripting / SQL Injection
########################################################################