Openscrutin 1.03 – Local File Inclusion / Remote File Inclusion
==============================================================
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Redaxo 4.2.1 – Remote File Inclusion
========================================================================
PHP RapidKill Pro 5.x – Arbitrary File Upload
# Exploit Title: PHP RapidKill Pro 5.x Shell Upload Vulnerability
Joomla! Component com_pandafminigames – SQL Injection
# Exploit Title: Joomla Component com_pandafminigames SQL Injection Vulnerabilities
Joomla! Component JoltCard 1.2.1 – SQL Injection
# Exploit Title: Joomla Component com_joltcard SQL Injection Vulnerability
Uploader 0.7 – Arbitrary File Upload
# Exploit Title: Uploader 0.7 Shell Upload Vulnerability
WebAdmin – Arbitrary File Upload
# Exploit Title: WebAdmin Shell Upload Vulnerability
60 cycleCMS 2.5.2 – Cross-Site Request Forgery (Change Username and Password)
========================================================================================
Zyke CMS 1.1 – Authentication Bypass
======================================================
SIESTTA 2.0 – Local File Inclusion / Cross-Site Scripting
####################################################################
Joomla! Component com_manager 1.5.3 – ‘id’ SQL Injection
-----------------------------------------------------------------------
ilchClan 1.0.5B – SQL Injection
----------------------------Information------------------------------------------------
FCKEditor Core – ‘FileManager test.html’ Arbitrary File Upload (1)
# Title: CMS (fckeditor) Remote Arbitrary File Upload Exploit
Ziggurat Farsi CMS – ‘bck’ Directory Traversal
source: https://www.securityfocus.com/bid/39534/info
Ziggurat Farsi CMS – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39311/info
60cycleCMS 2.5.2 – ‘DOCUMENT_ROOT’ Multiple Local File Inclusions
########################################################
Joomla! Component Intellectual Property 1.5.3 – ‘id’ SQL Injection
) ) ) ( ( ( ( ( ) )
Softbiz B2B trading Marketplace Script – buyers_subcategories SQL Injection
# Exploit Title: Softbiz B2B trading Marketplace Script buyers_subcategories SQL Injection Vulnerability
RJ-iTop Network Vulnerability Scanner System – Multiple SQL Injections
RJ-iTop Network Vulnerability Scanner System Multiple SQL Injection Vulnerabilities
Nucleus CMS 3.51 (DIR_LIBS) – Multiple Vulnerabilities
########################################################
Joomla! Component BeeHeard 1.0 – Local File Inclusion
==================================================================================================================
Joomla! Component Deluxe Blog Factory 1.1.2 – Local File Inclusion
=================================================================================================================
Joomla! Component Delicious Bookmarks 0.0.1 – Local File Inclusion
===============================================================================================================
Joomla! Component JA Comment – Local File Inclusion
=========================================================================================================
Joomla! Component Love Factory 1.3.4 – Local File Inclusion
=================================================================================================================
Joomla! Component Media Mall Factory 1.0.4 – Blind SQL Injection
===========================================================================================================
Joomla! Component MT Fire Eagle 1.2 – Local File Inclusion
=================================================================================================================
Joomla! Component Photo Battle 1.0.1 – Local File Inclusion
===========================================================================================================
Joomla! Component com_s5clanroster – Local File Inclusion
==================================================================================================================
Joomla! Component com_wgpicasa – Local File Inclusion
==============================================================================================================
YUI Images Script – Arbitrary File Upload
# Title: YUI Images Script Shell Upload Vulnerability
Magic Uploader Mini – Arbitrary File Upload
========================================================================================
Mihalism Multi Host 4.0.0 – Arbitrary File Upload
========================================================================================
Multi-Mirror – Arbitrary File Upload
========================================================================================
PhpMesFilms 1.8 – SQL Injection
========================================================================================
Bild Flirt System 1.0 – SQL Injection
----------------------------Information------------------------------------------------
Almnzm 2.1 – SQL Injection
# Title: almnzm 2.1 > #1 Vulnerability
Mp3 Online Id Tag Editor – Remote File Inclusion
========================================================================================
School Management System Pro 6.0.0 – Backup Dump
========================================================================================
Opentel Openmairie tel 1.02 – Local File Inclusion
============================================================
Zikula Application Framework 1.2.2 – ‘index.php?func’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39717/info
Zikula Application Framework 1.2.2 – ‘ZLanguage.php?lang’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39717/info
Vana CMS – ‘Filename’ Arbitrary File Download
source: https://www.securityfocus.com/bid/39415/info
Joomla! Component QPersonel 1.0.2 – SQL Injection
# Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability
My School Script – Database Disclosure
========================================================================================
Games Script – ‘Galore’ Backup Dump
========================================================================================
Mp3 MuZik – Database Disclosure
========================================================================================
joelz bulletin board 0.9.9rc3 – Multiple SQL Injections
----------------------------Information------------------------------------------------
Police Municipale Open Main Courante 1.01beta – Local File Inclusion / Remote File Inclusion
===========================================================================================