WebsiteBaker 2.8.1 – Cross-Site Request Forgery
# Author: Luis Santana
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
SnowCade 3.0 – SQL Injection
[-] SnowCade v3 SQL Injection Vulnerability [-]
Elite Gaming Ladders 3.5 – ‘ladder[id]’ SQL Injection
[-] Elite Gaming Ladders v3.5 SQL Injection Vulnerability [-]
Joomla! Component RSComments 1.0.0 – Persistent Cross-Site Scripting
# Exploit Title: Joomla Component RSComments 1.0.0 Multiple XSS
KubeSupport – ‘lang’ SQL Injection
source: https://www.securityfocus.com/bid/40970/info
Joomla! Component Gallery XML 1.1 – SQL Injection / Local File Inclusion
source: https://www.securityfocus.com/bid/40964/info
KubeLance 1.7.6 – ‘profile.php’ SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Shopping Cart Script with Affiliate Program – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Banner Management Script – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
MarketSaz – Arbitrary File Upload
==========================================
Joomla! Component com_listbingo 1.3 – Multiple Vulnerabilities
# Exploit Title: Joomla Component Listbingo 1.3 Multiple Vulnerabilities
Joomla! Component Ozio Gallery 2 – Multiple Vulnerabilities
Ozio Gallery 2
Joomla! Component Answers 2.3beta – Multiple Vulnerabilities
# Exploit Title: Joomla Component Answers v2.3beta Multiple Vulnerabilities
Joomla! Component com_joomdocs – Cross-Site Scripting
Date : june, 18 2010
Spring Framework – Arbitrary code Execution
CVE-2010-1622: Spring Framework execution of arbitrary code
Firebook – Multiple Cross-Site Scripting / Directory Traversal Vulnerabilities
source: https://www.securityfocus.com/bid/40941/info
PHP-Nuke Module print 6.0 – ‘print&sid’ SQL Injection
PHP-Nuke Module print 6.0 (print&sid) SQL Injection Vulnerability
Havij 1.10 – Persistent Cross-Site Scripting
# Exploit Title: Havij Persistent XSS (
Live CMS – SQL Injection
[-] Live CMS SQL Injection Vulnerability [-]
Planet 1.1 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Planet 1.1 - [CSRF] Add Admin Account
Ananda Image Gallery – SQL Injection
Exploit Title:Ananda Image Gallery SQL Vulnerable
PenPals – Authentication Bypass
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Easy Travel Portal – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Pithcms 0.9.5 – Local File Inclusion
[~] Pithcms 0.9.5 Local Include ExploitPithcms 0.9.5 Local Include Exploit
DMSEasy 0.9.7 – ‘FCKeditor’ Arbitrary File Upload
#!/usr/bin/perl
2DayBiz ybiz Network Community Script – SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/40913/info
Real Estate – SQL Injection
Description
2DayBiz Online Classified System – SQL Injection / Cross-Site Scripting
Name : 2daybiz online classified system SQLi AND XSS Vulnerability
PHPAuctionSystem – Arbitrary File Upload
Name : PHPAuctionSystem Upload Vulnerability
AspTR EXtended – Cross-Site Request Forgery
##################################################################################
EZPX Photoblog 1.2 Beta – Remote File Inclusion
[~] EZPX photoblog 1.2 beta Remote Include Exploit
Nakid CMS 0.5.2 – Remote File Inclusion
[~] Nakid CMS 0.5.2 Remote Include Exploit
Sell@Site PHP Online Jobs Login – Multiple SQL Injections
source: https://www.securityfocus.com/bid/40869/info
IISWorks FileMan – fileman.mdb Remote User Database Disclosure
# Exploit Title: IISWorks FileMan fileman.mdb Remote User Database
Acuity CMS 2.7.1 – SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0
Restaurant Listing with Online Ordering – SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0
Business Classified Listing – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
SAS Hotel Management System – ‘notfound’ SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0
Pre Job Board Pro – Authentication Bypass
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0
Smart ASP Survey – Cross-Site Scripting / SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0
MODx 1.0.3 – ‘index.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/40841/info
VideoWhisper PHP 2 Way Video Chat – ‘r’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40832/info
E-Book Store – SQL Injection
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
Joke Website Script – SQL Injection / Cross-Site Scripting
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
Daily Inspirational Quotes Script – SQL Injection
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
Membership Site Script – SQL Injection
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
Lyrics Script – SQL Injection / Cross-Site Scripting
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]