Joomla! Component com_camp – SQL Injection
[+] Title : Joomla Component com_camp SQL Injection Vulnerability
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
CompactCMS 1.4.0 – ‘tiny_mce’ Arbitrary File Upload
##########################################################
Alibaba Clone Platinum – ‘about_us.php’ SQL Injection
-------------------------------------------------------------------------------------------
Joomla! Component MS Comment 0.8.0b – Local File Inclusion
[!]===========================================================================[!]
Planet Script 1.x – ‘idomains.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40203/info
VMware View Portal 3.1 – Cross-Site Scripting
[DSECRG-09-058] Vmware View - XSS vulnerability
Alibaba Clone Platinum – ‘/buyer/index.php’ SQL Injection
# Title: Alibaba Clone Platinum (buyer/index.php) SQL Injection Vulnerability
Heaven Soft CMS 4.7 – ‘photogallery_open.php’ SQL Injection
-------------------------------------------------------------------------------------------
Joomla! Component JE Quotation Form 1.0b1 – Local File Inclusion
####################################################################
SelfComposer CMS – SQL Injection
All the input passed via "idprod", "idpadrerif", "idreferenza",
Joomla! Component JE Job 1.0 – Local File Inclusion
# Exploit Title: Joomla Component JE Job Local File Inclusion Vulnerability
Heaven Soft CMS 4.7 – SQL Injection
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
JE Ajax Event Calendar – Local File Inclusion
# Exploit Title: JE Ajax Event Calendar Local File Inclusion Vulnerability
Press Release Script – ‘page.php?id’ SQL Injection
######################{In The Name Of Allah The Mercifull} ######################
Link Bid Script – ‘links.php’ SQL Injection
######################{In The Name Of Allah The Mercifull} ######################
JForum 2.08 – BBCode Color Tag HTML Injection
source: https://www.securityfocus.com/bid/42414/info
NPDS REvolution 10.02 – ‘topic’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40157/info
NPDS REvolution 10.02 – ‘download.php’ SQL Injection
source: https://www.securityfocus.com/bid/40156/info
Joomla! Component FDione Form Wizard 1.0.2 – Local File Inclusion
-----------------------------------------------------------------------------------------
Joomla! Component com_sebercart – ‘getPic.php’ Local File Disclosure
=========================================================================================================
damianov.net Shoutbox – Cross-Site Scripting
# Exploit Title: damianov.net Shoutbox XSS Vulnerability
Joomla! Component aardvertiser 2.0 – Local File Inclusion
========================================================================
Joomla! Component Komento 1.0.0 – ‘sid’ SQL Injection
-------------------------------------------------------------------------
TomatoCMS 2.0.x – SQL Injection
source: https://www.securityfocus.com/bid/40108/info
e-webtech – ‘fixed_page.asp’ SQL Injection
####################################################
Joomla! Component com_PHP 0.1 – Local File Inclusion
Joomla Custom PHP Pages Component LFI Vulnerability
Saurus CMS 4.7 – ‘edit.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40059/info
Affiliate Store Builder – ‘edit_cms.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/40058/info
Marinet CMS – SQL Injection / Cross-Site Scripting / HTML Injection
-------------------------------------------------------------------------------------------
Woodall Creative – SQL Injection
=========================================================
Marinet CMS – SQL Injection
=========================================================
Joomla! Component mod_VisitorData 1.1 – Remote code Execution
Joomla Module Camp26 Visitor Data 1.1 Remote code Execution
Free Advertisment CMS – ‘user_info.php’ SQL Injection
=========================================================
e-webtech – ‘page.asp’ SQL Injection
-------------------------------------------------------------------------------------------
Uploader 0.1.5 – Multiple Vulnerabilities
========================================================================================
Fast Free Media 1.3 Adult Site – Arbitrary File Upload
========================================================================================
Digital College 1.0 – Arbitrary File Upload
========================================================================================
Aqar Script 1.0 – Remote Bypass
========================================================================================
724CMS Enterprise 4.59 – ‘section.php’ SQL Injection
-------------------------------------------------------------------------------------------
724CMS Enterprise 4.59 – ‘section.php’ Local File Inclusion
-------------------------------------------------------------------------------------------
Advanced Poll 2.0 – ‘mysql_host’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40045/info
EasyPublish CMS 23.04.2010 – URI Cross-Site Scripting
source: https://www.securityfocus.com/bid/40037/info
Waibrasil – Local/Remote File Inclusion
# Title: Waibrasil Remote / Local File Inclusion
PHPKB Knowledge Base Software 2.0 – Multilanguage Support Multiple SQL Injections
[+] {In The Name Of Allah The Mercifull}
724CMS Enterprise 4.59 – SQL Injection
# 724CMS Enterprise Version 4.59 SQL Injection Vulnerability