WHMCompleteSolution (WHMCS) Control 2 – ‘announcements.php’ SQL Injection
Software: WHMCS control 2 Sql Injection
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Joomla! Component com_djClassifieds 0.9.1 – Arbitrary File Upload
# Dork:inurl:com_djclassifieds
Mesut Manþet Haber 1.0 – Authentication Bypass
==============================================================================
NolaPro Enterprise 4.0.5538 – Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/39875/info
CF Image Hosting Script 1.1 – ‘upload.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/39870/info
Opencimetiere 2.01 – Multiple Remote File Inclusions
=============================================================
Opencatalogue 1.024 – Local File Inclusion
====================================================
Joomla! Component Card View JX – Cross-Site Scripting
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
Joomla! Component Table JX – Cross-Site Scripting
# Exploit Title: Joomla Component Table JX XSS Vulnerabilities
CF Image Host 1.1 – Remote File Inclusion
###########################################################
Comersus 8 Shopping Cart – SQL Injection / Cross-Site Request Forgery
# Exploit Title:SQL Injection and CSRF Vulnerability in Comersus 8 Shopping Cart
Campsite 3.x – ‘article_id’ SQL Injection
source: https://www.securityfocus.com/bid/39862/info
osCommerce 3.0a5 – Local File Inclusion / HTML Injection
source: https://www.securityfocus.com/bid/39820/info
Alibaba Clone Platinum – ‘offers_buy.php’ SQL Injection
) ) ) ( ( ( ( ( ) )
Webthaiapp – ‘detail.php?cat’ Blind SQL Injection
--==+==================================================+==--
Puntal 2.1.0 – Remote File Inclusion
====================================================
Joomla! Component Newsfeeds – SQL Injection
# Exploit Title: Joomla Component com_newsfeeds SQL injection vulnerability
AutoDealer 1.0/2.0 – MSSQL Injection
# vendor :http://www.aspsiteware.com/Auto.asp
JobPost – SQL Injection
# vendor :http://www.aspsiteware.com/job.asp
B2B Gold Script – ‘id’ SQL Injection
) ) ) ( ( ( ( ( ) )
ec21 clone 3.0 – ‘id’ SQL Injection
) ) ) ( ( ( ( ( ) )
Your Articles Directory – Login Option SQL Injection
source: https://www.securityfocus.com/bid/39796/info
Scratcher – SQL Injection / Cross-Site Scripting
[+] Scratcher (SQL/XSS) Multiple Remote Vulnerability
chCounter – indirect SQL Injection / Cross-Site Scripting
# Exploit Title: chCounter indirect SQL Injection and XSS Vulnerabilities
Ucenter Projekt 2.0 – Insecure crossdomain (Cross-Site Scripting)
========================================================================================
Zyke CMS 1.0 – Arbitrary File Upload
========================================================================================
Zyke CMS 1.1 – Bypass
========================================================================================
TaskFreak 0.6.2 – SQL Injection
CVE-2010-1583
iScripts VisualCaster – SQL Injection
# Exploit Title:SQli Vulnerability in iScripts VisualCaster
Microsoft SharePoint Server 2007 – Cross-Site Scripting
Vulnerability ID: HTB22350
DZCP (deV!L`z Clanportal) 1.5.3 – Multiple Vulnerabilities
========================================================================================
Socialware 2.2 – Upload / Cross-Site Scripting
# Exploit Title:Upload Vulnerability and XSS in socialware V2.2 (www.iscripts.com)
XT-Commerce 1.0 Beta 1 – Pass / Create and Download Backup
========================================================================================
TR Forum 1.5 – Multiple Vulnerabilities
========================================================================================
Articles Directory – Authentication Bypass
# Exploit Title:Authenication Bypass Vulnerability in Articles Directory
Tele Data’s Contact Management Server 0.9 – ‘Username’ SQL Injection
source: https://www.securityfocus.com/bid/39799/info
velBox 1.2 – Insecure Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/39778/info
PHP Video Battle – SQL Injection
) ) ) ( ( ( ( ( ) )
Modelbook – ‘casting_view.php’ SQL Injection
) ) ) ( ( ( ( ( ) )
GeneShop 5.1.1 – SQL Injection
# Vendor Link : http://softbizscripts.com/
gpEasy 1.6.1 – Cross-Site Request Forgery (Add Admin)
=============================================
Joomla! Component Wap4Joomla! – ‘wapmain.php’ SQL Injection
Joomla Component Wap4Joomla (wapmain.php) SQL Injection Vulnerability
SoftBizScripts Hosting Script – SQL Injection
# Exploit Title: SoftBizScripts Hosting Script SQL Injection Vunerability
SoftBizScripts Dating Script – SQL Injection
# Exploit Title: SoftBizScripts Dating Script SQL Injection Vunerability
Pligg CMS 1.0.4 – ‘story.php’ SQL Injection
[!] Pligg CMS (story.php?id) SQL Injection Vulnerability
NIBE heat pump – Local File Inclusion
#!/usr/bin/python