NIBE heat pump – Remote Code Execution
#!/usr/bin/python
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Joomla! Component com_jesectionfinder – Arbitrary File Upload
--------------------------------------------------------------------------------------
SmartBlog 1.3 – SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/39756/info
ProArcadeScript – ‘search.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39749/info
Joomla! Component Graphics 1.0.6 – Local File Inclusion
================================================================================================
Joomla! Component ABC 1.1.7 – SQL Injection
#!/usr/bin/perl
Joomla! Component SmartSite 1.0.0 – Local File Inclusion
===============================================================================================================
Joomla! Component NoticeBoard 1.3 – Local File Inclusion
=================================================================================================================
Joomla! Component Ultimate Portfolio 1.0 – Local File Inclusion
=======================================================================================================================
Acart 2.0 Shopping Cart – Software Backup Dump
========================================================================================
CLScript.com Classifieds Software – SQL Injection
# Exploit Title: CLScript.com Classifieds Software SQL Injection
Help Center Live 2.0.6 – ‘module=helpcenter&file=’ Local File Inclusion
# Exploit Title: Help Center Live 2.0.6(module=helpcenter&file=) Local File
Boutique SudBox 1.2 – Cross-Site Request Forgery (Changer Login et Mot de Passe)
========================================================================================
PHP Quick Arcade 3.0.21 – Multiple Vulnerabilities
PHP Quick Arcade 3.0.21 Multiple Vulnerabilites
Infocus Real Estate Enterprise Edition Script – Authentication Bypass
Authentication bypass in Infocus Real Estate Enterprise Edition script
2DayBiz Auction Script – Authentication Bypass
Authentication bypass in 2daybiz Auction Script
i-Net Online Community – Cross-Site Scripting / Authentication Bypass
______________________________________________________________________________ XSS and Authentica...
Ramaas Software CMS – SQL Injection
# Exploit Title: Ramaas Software CMS SQL Injection Vulnerability
FreeRealty(Free Real Estate Listing Software) – Authentication Bypass
# Exploit Title: Authentication bypass in FreeRealty(Free Real Estate Listing Software)
Kasseler CMS 2.0.5 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39703/info
Ektron CMS400.NET 7.5.2 – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/39679/info
PostNuke 0.764 Module modload – SQL Injection
PostNuke 0.764 Module modload SQL Injection Vulnerability
CMScout 2.08 – SQL Injection
# Title: CMScout 2.08 SQL Injection Vulnerability
Kasseler CMS 2.0.5 – Bypass / Download Backup
========================================================================================
Joomla! Component JoomRadio 1.0 – SQL Injection
Joomla Component com_joomradio SQL injection vulnerability
Uiga Personal Portal – ‘index.php’ ‘view’ SQL Injection
# Exploit Title: Uiga Personal Portal index.php (view) SQL Injection
Opencourrier 2.03beta – Local File Inclusion / Remote File Inclusion
===================================================================
OpenCominterne 1.01 – Local File Inclusion
====================================================
2DayBiz Advanced Poll Script – Cross-Site Scripting / Authentication Bypass
______________________________________________________________________________
PHP Classifieds 6.09 – E-mail Dump
========================================================================================
TR Forum 1.5 – Cross-Site Request Forgery (Add Admin)
========================================================================================
Powered by iNetScripts – Arbitrary File Upload
====================================================
clipak – Arbitrary File Upload
========================================================================================
CMS Firebrand Tec – Local File Inclusion
======================================================================
PowerEasy 2006 – ‘ComeUrl’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39696/info
G5 Scripts Guestbook PHP 1.2.8 – Cross-Site Scripting
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
Sethi Family Guestbook 3.1.8 – Cross-Site Scripting
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
Alstrasoft AskMe Pro 2.1 – ‘que_id’ SQL Injection
) ) ) ( ( ( ( ( ) )
WHMCompleteSolution (WHMCS) control (WHMCompleteSolution) – SQL Injection
#=Info=======================================================================#
NCT Jobs Portal Script – Cross-Site Scripting / Authentication Bypass
# Exploit Title: XSS and Authentication bypass in NCT Jobs Portal Script
Madirish Webmail 2.01 – ‘baseDir’ Local/Remote File Inclusion
=====================================================
Openfoncier 2.00 – Local File Inclusion / Remote File Inclusion
==============================================================
Openplanning 1.00 – Local File Inclusion / Remote File Inclusion
===============================================================
Openpresse 1.01 – Local File Inclusion
================================================
lanewsfactory – Multiple Vulnerabilities
LaNewsFactory Multiple Remote Vulnerabilities
Template Seller Pro 3.25 – ‘tempid’ SQL Injection
#!/usr/bin/perl -w