Open Web Analytics 1.2.3 – Multiple File Inclusions
===========================================================================
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
MyOWNspace 8.2 – Multiple Local File Inclusions
===========================================================================
AdaptCMS Lite 1.5 – Arbitrary Add Admin
===========================================================================
Date & Sex Vor und Rückwärts Auktions System 2 – Blind SQL Injection
----------------------------Information------------------------------------------------
BPTutors Tutoring site script – Cross-Site Request Forgery (Add Admin)
# Title: BPTutors Tutoring site script - [ CSRF ] Create Administrator Account
CyberCMS – SQL Injection
# Exploit Title: CyberCMS Remote SQL Injection Vuln.
CmsFaethon 2.2.0 (ultimate.7z) – Multiple Vulnerabilities
#####################################################################################
post Card – ‘catid’ SQL Injection
post Card ( catid ) Remote SQL Injection Vulnerability
leaftec CMS – Multiple Vulnerabilities
# Exploit Title: leaftec cms multiple vulnerabilities
Flirt Matching Sms System – SQL Injection
----------------------------Information------------------------------------------------
Joomla! Component dcsFlashGames 2.0RC1 – ‘catid’ SQL Injection
[!]===========================================================================[!]
WebsiteBaker 2.8.1 – DataBase Backup Disclosure
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
justVisual 2.0 – ‘index.php’ Local File Inclusion
#########################################################################
Easy-Clanpage 2.01 – SQL Injection
----------------------------Information------------------------------------------------
INVOhost – SQL Injection
##########################[Andrés Gómez]##########################
Interactivefx.ie CMS – SQL Injection
================================================
Joomla! Component com_jresearch – ‘Controller’ Local File Inclusion
source: https://www.securityfocus.com/bid/38917/info
vBulletin Blog 4.0.2 – Title Cross-Site Scripting
Vbulletin Blog 4.0.2 XSS Vulnerability
Joomla! Component com_software – SQL Injection
# Title : Joomla Component com_software SQL Injection Vulnerability
Joomla! Component com_wallpapers – SQL Injection
# Title : Joomla Component com_wallpapers SQL Injection Vulnerability
New-CMS – Local File Inclusion
# Exploit Title: New CMS Local File Inclusio
Joomla! Component com_universal – Remote File Inclusion
###########################################################
E-PHP CMS – SQL Injection
# Exploit Title: E-php CMS SQL Injection Vulnerability
CMS By SoftnSolv – ‘index.php’ SQL Injection
# Exploit Title: CMS By SoftnSolv (index.php) SQL Injection Vulnerable
Easy-Clanpage 2.0 – Blind SQL Injection
----------------------------Information------------------------------------------------
Joomla! Component com_cb – ‘cat’ SQL Injection
source: https://www.securityfocus.com/bid/38916/info
Joomla! Component com_aml_2 – ‘art’ SQL Injection
source: https://www.securityfocus.com/bid/38914/info
SpringSource (Multiple Products) – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/38913/info
Kasseler CMS News Module – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/38909/info
PHPAuthent 0.2.1 – ‘useradd.php’ Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/38908/info
RepairShop2 – ‘index.php?Prod’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38907/info
agXchange ESM – ‘ucquerydetails.jsp’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38896/info
Lussumo Vanilla 1.1.10 – ‘definitions.php’ Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/38889/info
Joomla! Component SMEStorage – Local File Inclusion
---------------------------------------------------------------------------------
Xataface – Admin Authentication Bypass
=======================================================
Joomla! Component Property – Local File Inclusion
---------------------------------------------------------------------------------
Zephyrus CMS – ‘index.php’ SQL Injection
====================================================
Joomla! Component com_gds – SQL Injection
# Title : Joomla Component com_gds SQL Injection Vulnerability
Uiga Business Portal – ‘index.php’ SQL Injection
----------------------------Information------------------------------------------------
Joomla! Component com_jwmmxtd – Remote File Inclusion
#################################################################
PHPKIT 1.6.x – ‘b-day.php’ Addon SQL Injection
source: https://www.securityfocus.com/bid/38891/info
agXchange ESM – ‘ucschcancelproc.jsp’ Open Redirection
source: https://www.securityfocus.com/bid/38879/info
Joomla! Component com_flash – SQL Injection
# Title : Joomla Component com_flash SQL Injection Vulnerability
New Advisore Stack 1.1 – Directory Traversal
===============================================================================================
PowieSys 0.7.7 alpha – ‘index.php’ shownews SQL Injection
----------------------------Information------------------------------------------------