Renista CMS – SQL Injection
Author:Amir Afghanian
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Joomla! Component com_horses – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/40308/info
SoftDirec 1.05 – ‘delete_confirm.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40269/info
Caucho Resin Professional 3.1.5 – ‘/resin-admin/digest.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/40251/info
Shopzilla Affiliate Script PHP – ‘search.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40246/info
Joomla! Component Percha Multicategory Article 0.6 – ‘Controller’ Arbitrary File Access
source: https://www.securityfocus.com/bid/40244/info
Joomla! Component Percha Gallery 1.6 Beta – ‘Controller’ Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/40244/info
Joomla! Component Percha Downloads Attach 1.1 – ‘Controller’ Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/40244/info
Joomla! Component Percha Fields Attach 1.0 – ‘Controller’ Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/40244/info
Joomla! Component Percha Image Attach 1.1 – ‘Controller’ Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/40244/info
C99Shell 1.0 Pre-Release build 16 (Web Shell) – ‘ch99.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40134/info
DBCart – ‘article.php’ SQL Injection
) ) ) ( ( ( ( ( ) )
Palo Alto Network Vulnerability – Cross-Site Scripting
Palo Alto Network Vulnerability - Cross-Site Scripting (XSS)
DB[CMS] – ‘section.php’ SQL Injection
-------------------------------------------------------------------------------------------
McAfee Email Gateway – Web Administration Broken Access Control
Advisory Name:Web Administration Broken Access Control in McAfee Email Gateway (formerly IronMail)
Battle Scrypt – Arbitrary File Upload
# Exploit Title: Battle Scrypt Shell Upload Vulnerability
gpEasy CMS 1.6.2 – ‘editing_files.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40330/info
Joomla! Component JComments 2.1 – ‘ComntrNam’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40230/info
NPDS REvolution 10.02 – ‘download.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40227/info
ecoCMS 18.4.2010 – ‘admin.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39901/info
DB[CMS] 2.0.1 – SQL Injection
# Exploit Title: DB[CMS] Sql Injection Vulnerability
Lokomedia CMS – ‘sukaCMS’ Local File Disclosure
# Software Link: http://bukulokomedia.com
Joomla! Component com_packages – SQL Injection
[+] Title : Joomla Component com_packages SQL Injection Vulnerability
Webloader 7 < 8 - 'vid' SQL Injection
[*]~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(*)~(...
B-Hind CMS (tiny_mce) – Arbitrary File Upload
####################################################
TS Special Edition 7.0 – Multiple Vulnerabilities
##############################################################################################
WebJaxe – SQL Injection
###############################################################################
ChillyCMS – Blind SQL Injection
#!/usr/bin/hybris
phpMyAdmin 2.6.3-pl1 – Cross-Site Scripting / Full Path
# Exploit Title: phpMyAdmin 2.6.3-pl1 Cross Site Scripting and Full Path
PonVFTP – Insecure Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/40207/info
Platnik 8.1.1 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/40201/info
JE CMS 1.1 – SQL Injection
=====================================================================================================================...
Abyss Web Server X1 – Cross-Site Request Forgery
http://osvdb.org/show/osvdb/64693
Joomla! Component com_event – SQL Injection
# Exploit Title: Joomla Component com_event another sql injection vuln
MyNews CMS 1.0 – SQL Injection / Local File Inclusion / Cross-Site Scripting
MyNews v1.0 CMS - Sql Injection, local file inclusion and XSS Vulnerabilities
MidiCart PHP/ASP – Arbitrary File Upload
# Exploit Title: MidiCart PHP,ASP Shell Upload Vulnerability
PHP-Fusion 4.01 – SQL Injection
# Exploit Title: PHP-Fusion v4.01 SQL INJECTION Vulnerabilities
Joomla! Component com_event – Multiple Vulnerabilities
####################################################################
Joomla! Component com_crowdsource – SQL Injection
[!] Title: Joomla Component com_crowdsource SQL Injection
Tainos Webdesign (All Scripts) – SQL Injection / Cross-Site Scripting / HTML Injection
-------------------------------------------------------------------------------------------
I-Vision CMS – Cross-Site Scripting / SQL Injection
# Title: [XSS, SQL injection vulnerability in I-Vision CMS]
Tainos – Multiple Vulnerabilities
=======================================================
EgO 0.7b – ‘FCKeditor’ Arbitrary File Upload
##########################################################
Joomla! Component simpledownload 0.9.5 – Local File Disclosure
[!]==========================================[!]
The iceberg – ‘Content Management System’ SQL Injection
==========================================================
Cybertek CMS – Local File Inclusion
=======================================================
Joomla! Component simpledownload 0.9.5 – Local File Inclusion
[!]===========================================================================[!]
File Thingie 2.5.5 – File Security Bypass
Title: File Thingie v2.5.5 File Security Bypass