29o3 CMS – ‘LibDir’ Multiple Remote File Inclusions
================================================
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
family connections 2.2.3 – Multiple Vulnerabilities
Family Connections 2.2.3 Multiple Remote Vulnerabilities
Tadbir CMS – ‘FCKeditor’ Arbitrary File Upload
#################################################################
Dark Hart Portal – ‘login.php’ Remote File Inclusion
-------------------------------------------------------------------------------------
tekno.Portal 0.1b – ‘makale.php?id’ SQL Injection
-------------------------------------------------------------------------------------------
Spaceacre – Multiple SQL Injections
#Spaceacre Multiple SQL Injection Vulnerability
Netvidade engine 1.0 – Multiple Vulnerabilities
#!/usr/bin/perl -w
e-webtech – ‘new.asp?id=’ SQL Injection
************************************************************ ** (new.asp?id=) SQL Injection Vulnerability *****************...
eFront 3.x – ‘ask_chat.php’ SQL Injection
source: https://www.securityfocus.com/bid/40032/info
phpscripte24 Live Shopping Multi Portal System – SQL Injection
----------------------------Information---------------------------------------------------
Alibaba Clone Diamond Version – SQL Injection
----------------------------Information------------------------------------------------
Alibaba Clone 3.0 (Special) – SQL Injection
----------------------------Information------------------------------------------------
phpscripte24 Shop System – SQL Injection
----------------------------Information------------------------------------------------
Web 2.0 Social Network Freunde Community System – ‘user.php’ SQL Injection
source: https://www.securityfocus.com/bid/40264/info
Joomla! Component Article Factory Manager – Arbitrary File Upload
# vendor :http://www.thefactory.ro/shop/joomla-components/article-manager.html
phpscripte24 Countdown Standart Rückwärts Auktions System – SQL Injection
----------------------------Information------------------------------------------------
PHP Link Manager 1.7 – URL Redirection
PHP Link Manager Version 1.7 Url Redirection Bug
big.asp – SQL Injection
# Author : Ra3cH
B2B Classic Trading Script – ‘offers.php’ SQL Injection
) ) ) ( ( ( ( ( ) )
ECShop 2.7.2 – ‘category.php’ SQL Injection
source: https://www.securityfocus.com/bid/40001/info
Consona – ‘n6plugindestructor.asp’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39999/info
ArticleLive (Interspire Website Publisher) – SQL Injection
# Author : ra3ch
PHP-Nuke – ‘friend.php’ Module SQL Injection
# Exploit Title: [PHP-Nuke 'friend.php' Module Remote SQL Injection]
Digital Factory Publique! 2.3 – ‘sid’ SQL Injection
source: https://www.securityfocus.com/bid/39988/info
DeluxeBB 1.x – ‘newpost.php’ SQL Injection
source: https://www.securityfocus.com/bid/39962/info
REZERVI 3.0.2 – Remote Command Execution
#!/usr/bin/perl
WeBProdZ CMS – SQL Injection
______ _ _ _
Factux – Local File Inclusion
[~]######################################### InformatioN
OCS Inventory NG Server 1.3.1 – ‘LOGIN’ Remote Authentication Bypass
OCS Inventory NG
AV Arcade – ‘Search’ Cross-Site Scripting / HTML Injection
# Exploit Title: AV Arcade Search Field XSS/HTML Injection
Getsimple CMS 2.01 – Local File Inclusion
# Exploit Title: GetSimple 2.01 LFI
WordPress Plugin Cimy Counter 0.9.4 – HTTP Response Splitting / Cross-Site Scripting
source: https://www.securityfocus.com/bid/41132/info
WordPress Plugin TYPO3 ‘t3m_cumulus_tagcloud’ Extension 1.0 – HTML Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/39926/info
Slooze PHP Web Photo Album 0.2.7 – Command Execution
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
PHP-Nuke 5.0 – Viewslink SQL Injection
# Author: CMD
PHP-Nuke 7.0/8.1/8.1.35 – Wormable Remote Code Execution
#!/usr/bin/php
SmartCMS 2 – SQL Injection
============ { Ariko-Security - Advisory #1/5/2010 } =============
thEngine 0.1 – Local File Inclusion
=============================================================================================
Clicksor – SQL Injection
( ALLH AKBAR )
DBHcms 1.1.4 – Persistent Cross-Site Scripting
############################################################################
IslamSound – Multiple SQL Injections
source: https://www.securityfocus.com/bid/39880/info
Mango Blog 1.4.1 – ‘/archives.cfm/search’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39864/info
KubeBlog – Cross-Site Request Forgery
========================================================================================
Joomla! 1.6.0 Alpha2 – Cross-Site Scripting
# Title:Joomla_1.6.0-Alpha2 XSS Vulnerabilities
Gallo 0.1.0 – Remote File Inclusion
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
Billwerx RC5.2.2 PL2 – ‘primary_number’ SQL Injection
source: https://www.securityfocus.com/bid/39867/info
GuppY 4.5.18 – Blind SQL Injection / XPath Injection
========================================================================================
Openannuaire Openmairie Annuaire 2.00 – Local File Inclusion / Remote File Inclusion
===================================================================================
Burning Board Lite 1.0.2 – Arbitrary File Upload
========================================================================================