osCMax 2.0 – ‘FCKeditor’ Arbitrary File Upload
##############################################################################
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
CH-CMS.ch 2 – Multiple Arbitrary File Upload Vulnerabilities
source: https://www.securityfocus.com/bid/39888/info
Dojo Toolkit 1.4.1 – ‘/doh/runner.html’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/38739/info
Dojo Toolkit 1.4.1 – ‘/dijit/tests/_testCommon.js?theme’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38739/info
Domain Verkaus & Auktions Portal – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/38737/info
Andromeda 1.9.2 – ‘s’ Cross-Site Scripting / Session Fixation
source: https://www.securityfocus.com/bid/38735/info
Pars CMS – ‘RP’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/38734/info
(Multiple Products) – ‘banner.swf’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38732/info
Zigurrat Farsi CMS – ‘/manager/textbox.asp’ SQL Injection
source: https://www.securityfocus.com/bid/38719/info
Newbie CMS – File Disclosure
|=-----------------------------------------------------=|
Joomla! Component com_route – SQL Injection
#########################################################################
Joomla! Component com_bidding – SQL Injection
#########################################################################
Preisschlacht 4.0 Flash System – ‘index.php?aid’ SQL Injection
----------------------------Information------------------------------------------------
Joomla! Component com_rokdownloads – Local File Inclusion
####################################################################
Joomla! Component com_sectionex – Local File Inclusion
####################################################################
Joomla! Component com_ganalytics – Local File Inclusion
####################################################################
Joomla! Component com_janews – Local File Inclusion
####################################################################
Joomla! Component com_linkr – Local File Inclusion
####################################################################
osDate 2.1.9 – Remote File Inclusion
========================================================================================
Address Book Script 1.09 – Local File Inclusion
#################################################################
Joomla! Component com_org – ‘letter’ SQL Injection
# Joomla com_org SQL Injection Vulnerability (letter parameter)
Subdreamer 3.0.1 – CMS upload
========================================================================================
Interspire SHOPPING CART 5.5.4 – Ultimate Edition backup dump
========================================================================================
CH-CMS.ch 2 – Arbitrary File Upload
========================================================================================
Torrent Hoster – Remount Upload
========================================================================================
FreeHost 1.00 – Arbitrary File Upload
========================================================================================
Duhok Forum 1.0 script – Cross-Site Scripting
========================================================================================
Joomla! Component com_rpx Ulti RPX 2.1.0 – Local File Inclusion
Joomla component Ulti RPX 2.1.0 Local File Include
Phenix 3.5b – SQL Injection
Dear Sir / Madam
Ninja RSS Syndicator 1.0.8 – Local File Inclusion
Joomla component Ninja RSS Syndicator 1.0.8 Local File Include
PHP Classifieds 7.5 – Blind SQL Injection
Dear Sir / Madam
Joomla! Component com_gcalendar Suite 2.1.5 – Local File Inclusion
Joomla component GCalendar Suite 2.1.5 Local File Include
DirectAdmin 1.33.6 – ‘CMD_DB_VIEW’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38721/info
PhpMyLogon 2.0 – SQL Injection
# Exploit Title: PhpMyLogon SQL Injection
DZCP (deV!L`z Clanportal) 1.5.2 – Remote File Inclusion
[+] deV!L`z Clanportal 1.5.2 Remote File Include Vulnerability
PHPpool media Domain Verkaufs und Auktions Portal – ‘index.php’ SQL Injection
----------------------------Information------------------------------------------------
PHP-Nuke – Local File Inclusion
=======================================================================================
RogioBiz PHP Fle Manager 1.2 – Admin Bypass
#########################bypass admin exploit#################
Joomla! Component com_nfnaddressbook – SQL Injection
==============================================================================
DesktopOnNet 3 Beta9 – Local File Inclusion
[+] DesktopOnNet 3 Beta9 Local File Include Vulnerability
Front Door 0.4b – SQL Injection
# Software Link: http://sourceforge.net/projects/frontdoor/files/Front%20Door%20-%20BETA/Front%20Door%20-%20v0.4b/fro...
PHP-Fusion 6.01.15.4 – ‘downloads.php’ SQL Injection
===================================================================
Joomla! Component com_org – SQL Injection
###############################################################################
Trouble Ticket Express 3.01 – Remote Code Execution / Directory Traversal
# Exploit Title: Trouble Ticket Express Remote Code Execution/Directory Traversal
Joomla! Component com_d-greinar – ‘maintree’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38714/info
Joomla! Component com_seek – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/38711/info
GeekHelps ADMP 1.01 – Multiple Vulnerabilities
#########################local file include / sql injection#################
Mambo Component MambAds – SQL Injection
==============================================================================
Xbtit 2.0.0 – SQL Injection
####################################################