Uiga Fan Club – SQL Injection
# Exploit Title: Uiga Fan Club SQL Injection Vulnerability
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
CMS Openpage – ‘index.php’ SQL Injection
====================================================
Mini-CMS RibaFS 1.0 – Authentication Bypass
=============================================================
4x CMS – ‘login.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/39840/info
4x CMS r26 – Authentication Bypass
=======================================================
NotSopureEdit 1.4.1 – Remote File Inclusion
========================================================
WebMaid CMS 0.2-6 Beta – Multiple Remote File Inclusions
====================================================================
Fw-BofF (oolime-resurrection) 1.5.3beta – Multiple Remote File Inclusions
=============================================================================
Woltlab Burning Board Lite Addon – ‘lexikon.php’ SQL Injection
.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-.
Jewelry Cart Software – ‘product.php’ SQL Injection
# Name : Jewelry Cart Software SQL Injection (product.php) ::-
Adult Video Site Script – Multiple Vulnerabilities
========================================================================================
Woltlab Burning Board Teamsite Hack 3.0 – ‘ts_other.php’ SQL Injection
----------------------------Information-----------------------------------------------------
Trouble Ticket Software – ‘ttx.cgi’ Arbitrary File Download
# Exploit Title: Trouble Ticket Software 0Day
Pay Per Watch & Bid Auktions System – ‘auktion.php?id_auk’ Blind SQL Injection
----------------------------Information------------------------------------------------
Joomla! Component Gift Exchange com_giftexchange 1.0 Beta – ‘pkg’ SQL Injection
---------------------------------------------------------------------------------
vBulletin 4.0.2 – Search Cross-Site Scripting
source: https://www.securityfocus.com/bid/38895/info
PHPWind 6.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/38867/info
Joomla! Component & Plugin JE Tooltip 1.0 – Local File Inclusion
---------------------------------------------------------------------------------
DirectAdmin 1.34.4 – Multiple Cross-Site Request Forgerys
=============================================================================
PHPscripte24 Preisschlacht Liveshop System – ‘index.php?aid’ SQL Injection
----------------------------Information------------------------------------------------
quality point 1.0 newsfeed – SQL Injection / Cross-Site Scripting
sEc-r1z crEw The Leaders for Penetration Testing In Middle East.
Kempt SiteDone 2.0 – ‘/detail.php’ Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/38856/info
tenfourzero.net Shutter 0.1.4 – ‘admin.html’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/38849/info
SOFTSAURUS 2.01 – Multiple Remote File Inclusions
============================================================
nensor CMS 2.01 – Multiple Vulnerabilities
===============================================
phpscripte24 Niedrig Gebote Pro Auktions System II – Blind SQL Injection
----------------------------Information------------------------------------------------
philboard 1.02 – SQL Injection
[+]##############################################
phpAuthent 0.2.1 – SQL Injection
phpAuthent 0.2.1 SQL Injection Vulnerability
SiteDone Custom Edition 2.0 – SQL Injection / Cross-Site Scripting
[~] SiteDone Custom Edition 2.0 SQL Injection & XSS Vulnerability
DewNewPHPLinks 2.1.0.1 – Local File Inclusion
#########################local file include#################
ManageEngine ServiceDesk Plus 7.6 – woID SQL Injection
Advisory Name: SQL injection in Manage Engine Service Desk Plus 7.6
PHPBB2 Plus 1.53 – ‘kb.php’ SQL Injection
source: https://www.securityfocus.com/bid/38828/info
Joomla! Component com_alert – ‘q_item’ SQL Injection
source: https://www.securityfocus.com/bid/38827/info
eFront 3.5.5 – ‘langname’ Local File Inclusion
source: https://www.securityfocus.com/bid/38787/info
Joomla! Component com_vxdate – Multiple Vulnerabilities
-------------------------------------------------------------------------------------------------------------
PHP-Nuke – ratedownload SQL Injection
===========================================================================
Joomla! Component com_ckforms – Multiple Vulnerabilities
####################################################################
PostNuke FormExpress Module – Blind SQL Injection
# Date: 17/03/2010
Preisschlacht Multi Liveshop System – ‘index.php?aid’ SQL Injection
----------------------------Information------------------------------------------------
Joomla! Component com_include – SQL Injection
[~]######################################### InformatioN #############################################[~]
ChillyCMS – Cross-Site Request Forgery
=======================================================================
Clain_TIger_CMS – Cross-Site Request Forgery
=======================================================================
Joomla! Component com_as – ‘catid’ SQL Injection
source: https://www.securityfocus.com/bid/38757/info
OSSIM 2.2 – Multiple Vulnerabilities
Advisory Name: Arbitrary File Download in OSSIM
eGroupWare 1.6.002 and eGroupWare premium line 9.1 – Multiple Vulnerabilities
Advisory Name: Remote Command Execution in EGroupware
phpscripte24 Auktionshaus Community Standart System – Blind SQL Injection
----------------------------Information------------------------------------------------
Short URL 1.01 – Local File Inclusion
#################################################################
Online Community CMS by I-net – SQL Injection
# Exploit Title: Online Community CMS by I-net SQL Injection Vulnerability
Free Real Estate Contact Form 1.09 – Local File Inclusion
#################################################################
Joomla! Component com_rwcards – Local File Inclusion
####################################################################