Uiga Personal Portal – ‘index.php’ SQL Injection
----------------------------Information------------------------------------------------
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
SLAED CMS 4 – Installation Script Unauthorized Access
source: https://www.securityfocus.com/bid/38453/info
Slaed CMS 4.0 – Multiple Vulnerabilities
========================================================================================
Uiga Fan Club 1.0 – Authentication Bypass
# Uiga Fan Club
Scripts Feed Business Directory – SQL Injection
==============================================================================
Pre Classified Listings – SQL Injection
=================================================================
phpMySite – Cross-Site Scripting / SQL Injection
=================================================================
ProMan 0.1.1 – Multiple File Inclusions
##############################################################
phpRAINCHECK 1.0.1 – SQL Injection
##############################################################
phpCDB 1.0 – Local File Inclusion
##############################################################
Project Man 1.0 – Authentication Bypass
##############################################################
Gravity Board X 2.0 Beta (Public Release 3) – SQL Injection
#!/usr/bin/perl
DZ Erotik Auktionshaus 4.rgo – ‘news.php’ SQL Injection
----------------------------Information------------------------------------------------
ARISg 5.0 – ‘wflogin.jsp’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38441/info
FileExecutive 1 – Multiple Vulnerabilities
==============================================================================
Newbie CMS 0.0.2 – Insecure Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/38421/info
IBM (Multiple Products) – Login Page Cross-Site Scripting
source: https://www.securityfocus.com/bid/38412/info
WebAdministrator Lite CMS – SQL Injection
============ { Ariko-Security - Advisory #5/2/2010 } =============
Joomla! Component com_Joomlaconnect_be – Blind Injection
#!/usr/bin/php
GameScript 3.0 – SQL Injection
Author : FormatXformat
Softbiz Recipes Portal Script – ‘showcats.php’ SQL Injection
----------------------------Information------------------------------------------------
n-cms-equipe 1.1c.Debug – Multiple Local File Inclusions
source: https://www.securityfocus.com/bid/39298/info
OpenInferno OI.Blogs 1.0 – Multiple Local File Inclusions
source: https://www.securityfocus.com/bid/38402/info
Joomla! Component HD FLV Player – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/38401/info
MySmartBB 1.7 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/38385/info
Softbiz Classifieds PLUS – Multiple SQL Injections
----------------------------Information------------------------------------------------
Maian Uploader 4.0 – Arbitrary File Upload
========================================================================================
PBBoard 2.0.5 – Multiple Vulnerabilities
========================================================================================
Web Server Creator Web Portal 0.1 – Multiple Vulnerabilities
========================================================================================
Softbiz Auktios Script – Multiple SQL Injections
----------------------------Information------------------------------------------------
PHPCOIN 1.2.1 – ‘mod.php’ SQL Injection
phpCOIN 1.2.1 (mod.php) SQL Injection Vulnerability
ShortCMS 1.11F(B) (con) – SQL Injection
ShortCMS v. 1.11F(B) (con) SQL Injection Vulnerability
WikyBlog 1.7.3rc2 – Multiple Vulnerabilities
========================================================================================
Article Friendly – Cross-Site Request Forgery
=======================================================================
MySmartBB 1.0.0 – Cross-Site Scripting
========================================================================================
Max’s Photo Album – Arbitrary File Upload
========================================================================================
Softbiz Jobs – ‘sbad_type’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38383/info
bispage – Bypass
# Exploit Title: [ bispage Bypass Vulnerability]
QuickDev 4 PHP – Database Disclosure
==============================================================================
Tinypug 0.9.5 – Cross-Site Request Forgery (Password Change)
##########################www.BugReport.ir########################################
Softbiz Jobs – Multiple SQL Injections
----------------------------Information------------------------------------------------
WorkSimple 1.3.2 – Multiple Vulnerabilities
[ Multiple Remote Vulnerabilities ]
Joomla! Component user_id com_sqlreport – Blind SQL Injection
==============================================================================
Top Auktion – ‘news.php’ SQL Injection
----------------------------Information------------------------------------------------
PHP Auktion Pro SQL – ‘news.php’ SQL Injection
----------------------------Information------------------------------------------------
Joomla! Component com_ice – Blind SQL Injection
#!/usr/bin/php
Softbiz Jobs – Cross-Site Request Forgery
=======================================================================
Galerie Dezign-Box – Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/38347/info