Joomla! Component com_jtickets – SQL Injection
============================================
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Joomla! Component com_jstore – SQL Injection
============================================
Joomla! Component Jreservation 1.5 – SQL Injection / Cross-Site Scripting
============================================================
Online Notebook Manager – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Joomla! Component cinema – SQL Injection
=========================================================
iClone – SQL Injection
1 ########################################## 1
Virtual Real Estate Manager 3.5 – SQL Injection
======================================================
Web Wiz Forums 9.68 – SQL Injection
=========================================
PGAUTOPro – SQL Injection / Cross-Site Scripting (1)
=======================================
eLms Pro – SQL Injection / Cross-Site Scripting
=======================================
HauntmAx CMS Haunted House – Directory Listing / SQL Injection
==================================
GREEZLE – Global Real Estate Agent Site Auth SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Image Store – Arbitrary File Upload
============================================= ===================================
phpList 2.8.11 – SQL Injection
[~]------------------------------------------------------------------------------------------------------------------...
Pre Web Host – SQL Injection
# EDB-ID: 1310
Phreebooks 2.0 – Directory Traversal
Advisory Name: Directory Traversal in Phreebooks v2.0
Phreebooks 2.0 – Local File Inclusion
Advisory Name: Local File Inclusion in Phreebooks v2.0
Phreebooks 2.0 – Multiple Persistent Cross-Site Scripting Vulnerabilities
Advisory Name: Multiple Permanent Cross-site Scripting in Phreebooks v2.0
Holiday Travel Portal – Arbitrary File Upload
==========================================================
Rayzz Photoz – Arbitrary File Upload
==========================================================
EMO Realty Manager – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Hotel / Resort Site Script with OnLine Reservation System – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
CafeEngine 2.3 – SQL Injection
==========================================================
Home of MCLogin System – Authentication Bypass
Author: L0rd CrusAd3r
BoastMachine 3.1 – ‘key’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40623/info
cPanel 11.25 Image Manager – ‘target’ Local File Inclusion
source: https://www.securityfocus.com/bid/40622/info
CommonSense CMS – SQL Injection
# Exploit Title: CommonSense CMS Sql Injection Vulnerability
JForum 2.1.8 BookMarks – Cross-Site Request Forgery / Cross-Site Scripting
JForum 2.1.8 bookmarks CSRF & XSS
JForum 2.1.8 – ‘Username’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40880/info
CuteSITE CMS 1.x – ‘/manage/main.php?fld_path’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40612/info
CuteSITE CMS 1.x – ‘/manage/add_user.php?user_id’ SQL Injection
source: https://www.securityfocus.com/bid/40612/info
JForum 2.1.8 – ‘bookmarks’ Module Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/40600/info
ReVou Twitter Clone 2.0 Beta – SQL Injection / Cross-Site Scripting
# Title:reVou twitter clne Beta 2.0 sqli and Xss vulnerability
greeting card – Arbitrary File Upload
# Exploit Title: [greeting card Remote Upload Vulnerability]
WebBiblio Subject Gateway System – Local File Inclusion
# Exploit Title:
idevspot Text ads 2.08 – SQL Injection
# Title:idevspot Text ads 2.08 sqli vulnerability
Joomla! Component com_annonces – Arbitrary File Upload
#Title:Joomla Component com_annonces Upload Vulnerability
PHP Car Rental Complete System 1.2 – SQL Injection
# Title:PHP car rental complete System V1.2 SQli vulnerability
Joomla! Component Search Log 3.1.0 – SQL Injection
#Exploit Title: Joomla Component com_searchlog SQL Injection
Sphider Script – Remote Code Execution
=======================================================================
RTRandomImage – Remote File Inclusion
|| || | ||
iScripts easybiller 1.1 – SQL Injection
# Title:iScripts easybiller v1.1 sqli vulnerability
iScripts eSwap 2.0 – SQL Injection / Cross-Site Scripting
# Title:iScripts eSwap v2.0 sqli and xss vulnerability
WmsCMS – Cross-Site Scripting / SQL Injection
# Title: XSS, SQL injection vulnerability in WmsCMS
PHP Director 0.2 – SQL Injection
# Exploit Title:
Joomla! Component DJ-ArtGallery 0.9.1 – Multiple Vulnerabilities
#Exploit Title: Joomla Component com_djartgallery Multiple Vulnerabilities
DDLCMS 2.1 – ‘skin’ Remote File Inclusion
==============================================================
WordPress Plugin Gigya Socialize 1.0/1.1.x – Cross-Site Scripting
source: https://www.securityfocus.com/bid/40582/info
log1 CMS 2.0 – Session Handling Remote Security Bypass / Remote File Inclusion
source: https://www.securityfocus.com/bid/40636/info
MoinMoin 1.x – ‘PageEditor.py’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40549/info