webapps

Pre E-Learning Portal – ‘search_result.asp’ SQL Injection

source: https://www.securityfocus.com/bid/38582/info

Chaton 1.5.2 – Local File Inclusion

[+] Chaton

TRIBISUR 2.0 – Local File Inclusion

# TRIBISUR Exploit database separated by exploit 0

DZ Auktionshaus ‘V4.rgo’ – ‘id’ news.php?SQL Injection

----------------------------Information------------------------------------------------

OpenCart 1.3.2 – ‘page’ SQL Injection

source: https://www.securityfocus.com/bid/38605/info

Bild Flirt System 2.0 – ‘index.php?id’ SQL Injection

----------------------------Information------------------------------------------------

BigForum 4.5 – SQL Injection

#!/usr/bin/perl

phpCOIN 1.2.1 – ‘mod’ Local File Inclusion

source: https://www.securityfocus.com/bid/38576/info

dev4u CMS (Personenseiten) – ‘go_target.php’ SQL Injection

----------------------------Information------------------------------------------------

PHPCOIN 1.2.1 – ‘mod.php’ Local File Inclusion

# Exploit Title: phpCOIN 1.2.1 (mod.php) LFI vulnerability

Six Apart Vox – ‘search’ Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/38575/info

Saskia’s ShopSystem – ‘id’ Local File Inclusion

source: https://www.securityfocus.com/bid/38574/info

Spectrum Software WebManager CMS – ‘pojam’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38573/info

Natychmiast CMS – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/38561/info

E-topbiz Link ADS 1 PHP script – ‘linkid’ Blind SQL Injection

# E-topbiz Link ADS 1 PHP script (linkid) Blind SQL Injection Vulnerability

Auktionshaus 3.0.0.1 – ‘news.php?id’ SQL Injection

----------------------------Information------------------------------------------------

Kolang 4.3.10 < 5.3.0 - 'proc_open()' PHP 'safe_mode' Bypass

OneCMS 2.5 – SQL Injection

# Exploit Title: ONECMS v2.5 SQL INJECTION

Drupal < 5.22/6.16 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/38545/info

BBSXP 2008 – ‘ShowPost.asp’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38542/info

Comptel Provisioning and Activation – ‘index.jsp?error_msg_parameter’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38534/info

Sagem Routers – Remote Authentication Bypass

#!/usr/bin/perl

PHP-Nuke – ‘user.php’ SQL Injection

----------------------------Information------------------------------------------------

PHP-Nuke CMS (Survey and Poll) – SQL Injection

#############################################################################################################

Joomla! Component com_blog – Directory Traversal

[~]######################################### InformatioN #############################################[~]

MiNBank 1.5.0 – Remote Command Execution

#!/usr/bin/perl

smartplugs 1.3 – ‘showplugs.php’ SQL Injection

----------------------------Information------------------------------------------------

Gnat-TGP 1.2.20 – Remote File Inclusion

###############################################################

Dosya Yukle Scrtipi (DosyaYukle Scripti) 1.0 – Arbitrary File Upload

========================================================================================

Discuz! 6.0 – ‘uid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38484/info

Sparta Systems TrackWise EQms – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/38483/info

Uiga Church Portal – ‘index.php’ SQL Injection

----------------------------Information------------------------------------------------

My Little Forum – ‘contact.php’ SQL Injection

----------------------------Information------------------------------------------------

Uploadify Sample Collection – Arbitrary File Upload

========================================================================================

PHP Advanced Transfer Manager 1.10 – Arbitrary File Upload

========================================================================================

osCSS 1.2.1 – Database Backups Disclosure

========================================================================================

Al Sat Scripti – Database Disclosure

========================================================================================

DeDeCMS 5.5 – ‘_SESSION[dede_admin_id]’ Authentication Bypass

source: https://www.securityfocus.com/bid/38469/info

Blax Blog 0.1 – ‘girisyap.php’ SQL Injection

source: https://www.securityfocus.com/bid/38465/info

Article Friendly – ‘Filename’ Local File Inclusion

source: https://www.securityfocus.com/bid/38461/info

CMS by MyWorks – Multiple Vulnerabilities

CMS by MyWorks SQL/ XSS Vulnerability

phptroubleticket 2.0 – ‘id’ SQL Injection

#############################################################################################################

Open Educational System 0.1 Beta – ‘CONF_INCLUDE_PATH’ Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/38449/info

TRUC 0.11 – ‘login_reset_password_page.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38445/info

Majoda CMS – Authentication Bypass

------------------------------------------------------

Baykus Yemek Tarifleri 2.1 – SQL Injection

# Baykus Yemek Tarifleri

Joomla! Component com_liveticker – Blind SQL Injection

#!/usr/bin/php

Joomla! Component com_yanc – SQL Injection

==============================================================================

HazelPress Lite 0.0.4 – Authentication Bypass

# HazelPress Lite

Uiga Fan Club – ‘index.php’ SQL Injection

----------------------------Information------------------------------------------------