Joomla! Component com_lead – SQL Injection
[TR] Title: Joomla Component com_lead SQL Injection
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
clickartweb Design – SQL Injection
####################################################
K9 Kreativity Design – ‘pages.php’ SQL Injection
==========================================================
PHP SETI@home Web monitor – ‘PHPsetimon’ Local/Remote File Inclusion
===========================================================================
Advneced Management For Services Sites – File Disclosure
=======================================================================
Article Management System 2.1.2 – Reinstall
========================================================================================
E-book Store – Multiple Vulnerabilities
========================================================================================
osCSS 1.2.1 – Arbitrary File Upload
=======================================================================
phpBazar 2.1.1 stable – Remote File Inclusion
# Title: phpBazar V2.1.1 stable rfi Vulnerability
slogan design Script – SQL Injection
Title: slogan design Script SQL Injection Vulnerability
PHP City Portal 1.3 – ‘cms_data.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40532/info
TPO Duyuru Scripti – Insecure Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/40519/info
TCExam 10.1.7 – ‘/admin/code/tce_functions_tcecode_editor.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/40511/info
Joomla! Component com_sar_news – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/40501/info
SIMM Management System (SMS) – Local File Inclusion
===================================================================================================
Vastal I-Tech – SQL Injection
#######################################################
Joomla! Component ChronoForms – Blind SQL Injection
# Exploit Title: Joomla Component ChronoForms (com_chronocontact)
Joomla! Component ChronoConnectivity – Blind SQL Injection
# Exploit Title: Joomla Component ChronoConnectivity
Hexjector 1.0.7.2 – ‘hexjector.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40509/info
Ticimax E-Ticaret – SQL Injection
# Exploit Title: [Ticimax E-Ticaret ( SQL Injection ) ]
Delivering Digital Media CMS – SQL Injection
# Title: Delivering Digital Media CMS SQL Injection Vulnerability
Hexjector 1.0.7.2 – Persistent Cross-Site Scripting
# Exploit Title: Hexjector Persistent XSS (
wsCMS – ‘news.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40447/info
Patient folder (THEME ASP) – SQL Injection
============================================================
MusicBox – SQL Injection
# Exploit Title: [musicbox sql injection]
Joomla! Component JS Jobs 1.0.5.8 – SQL Injection
# Exploit Title: Joomla Component com_jsjobs SQL Injection Vulnerability
Visitor Logger – ‘banned.php’ Remote File Inclusion
#-> Visitor Logger (banned.php) Remote File Include Vulnerability
Persian E107 – Cross-Site Scripting
========================================================================================
e107 0.7.21 full – Remote File Inclusion / Cross-Site Scripting
=======================================================================
QuickTalk 1.2 – Source Code Disclosure
=======================================================================
Joomla! Component com_g2bridge – Local File Inclusion
# Exploit Title: Joomla Component com_g2bridge LFI vulnerability
WsCMS – Multiple SQL Injections
===============================================
GR Board 1.8.6 – ‘page.php’ Remote File Inclusion
source: https://www.securityfocus.com/bid/40437/info
Joomla! Component com_quran – SQL Injection
[!] ===========================================================================[!]
Symphony CMS – Local File Inclusion
=============================================================================================================
PTC Site’s – Remote Code Execution / Cross-Site Scripting
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
Creato Script – SQL Injection
# Title: Creato Script SQL Injection Vulnerability
CMScout – Cross-Site Scripting / HTML Injection
=======================================================================
Zeeways Script – Multiple Vulnerabilities
=======================================================================
osCommerce Online Merchant 2.2 – File Disclosure / Authentication Bypass
--------------------------------------------
Webiz – SQL Injection
@@@@@@ @@ @@ @@@@@ @@@@@ @@ @@@@ @@ @@@@@@ @@@ @@@@
Webiz 2004 – Local File Upload
# Exploit Title: (Webiz) local SHELL Upload Vulnerability
Joomla! Component BF Quiz 1.0 – SQL Injection (2)
#!/usr/bin/python
Cosmos Solutions CMS – ‘id=’ / ‘page=’ SQL Injection
####################################################
Cosmos Solutions CMS – SQL Injection
===============================================
MileHigh Creative – SQL Injection / Cross-Site Scripting / HTML Injection
=======================================================================
Aim Web Design – Multiple Vulnerabilities
=======================================================================
Nucleus Plugin Twitter – Remote File Inclusion
=============================================================================================================