phpBugTracker 1.0.1 – File Disclosure
==============================================================================
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
cPanel – Multiple Cross-Site Request Forgery Vulnerabilities
Create Database:
vBSEO 3.1.0 – Local File Inclusion
======================================================================
Arab Cart 1.0.2.0 – Multiple Vulnerabilities
========================================================================================
Galerie Dezign-Box France – Multiple Vulnerabilities
========================================================================================
Ero Auktion 2010 – ‘news.php’ SQL Injection
----------------------------Information----------------------------------------
Ero Auktion 2.0 – ‘news.php’ SQL Injection
----------------------------Information----------------------------------------
Ac4p.com Gallery 1.0 – Multiple Vulnerabilities
========================================================================================
Softbiz Jobs – ‘news_desc’ SQL Injection
Softbiz Jobs ( news_desc) SQL Injection Vulnerability
vBulletin 4.0.2 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/38339/info
Joomla! Component com_recipe – Multiple SQL Injections
source: https://www.securityfocus.com/bid/38336/info
Netzbrett – Database Disclosure
==============================================================================
TimeClock 0.99 – Cross-Site Request Forgery (Add Admin)
==============================================================================
FlatFile Login System – Remote Password Disclosure
==============================================================================
Social Web CMS 2 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38329/info
Joomla! Component com_communitypolls 1.5.2 – Local File Inclusion
[!]===========================================================================[!]
PHPKit 1.6.1 – ‘mailer.php’ SQL Injection
########################################################################
Fonality trixbox 2.2.4 – ‘PhonecDirectory.php’ SQL Injection
# Software Link: http://trixbox.org/downloads
WSC CMS – Authentication Bypass
------------------------------------------------------
Amelia CMS – SQL Injection
# Title: [SQL injection vulnerability in Amelia CMS]
Litespeed Web Server 4.0.12 – Cross-Site Request Forgery (Add Admin) / Cross-Site Scripting
# Author: d1dn0t (didnot[at]me[dot]com)
phpAutoVideo – Cross-Site Request Forgery
##################################################################
Subex Nikira Fraud Management System GUI – ‘message’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38311/info
XlentProjects SphereCMS 1.1 – ‘archive.php’ SQL Injection
source: https://www.securityfocus.com/bid/38309/info
New-CMS 1.08 – Multiple Local File Inclusion / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/38307/info
Joomla! Plugin Core Design Scriptegrator – Local File Inclusion
# Exploit Title: Core Design Scriptegrator plugin for Joomla! 1.5 file inclusion
CubeCart – ‘index.php’ SQL Injection
CubeCart (index.php) Sql Injection Vulnerability
Joomla! Component com_otzivi – Local File Inclusion
Joomla Component com_otzivi Local File Inclusion
PunBBAnnuaire 0.4 – Blind SQL Injection
PunBBAnnuaire
Erotik Auktionshaus – ‘news.php’ SQL Injection
########################################################################
Auktionshaus Gelb 3 – ‘news.php’ SQL Injection
########################################################################
Auktionshaus 4 – ‘news.php’ SQL Injection
########################################################################
PHPIDS 0.4 – Remote File Inclusion
###########################################################
Multiple File Attachments Mail Form Pro 2.0 – Arbitrary File Upload
# Exploit Title: Multiple File Attachments Mail Form Pro v2 - WebShell upload
uGround 1.0b – SQL Injection
########################################################################
Joomla! Component com_acteammember – SQL Injection
Joomla Component com_acteammember Sql Injection Vulnerability
Nabernet – ‘articles.php’ SQL Injection
Nabernet (articles.php) Sql Injection Vulnerability
intuitive – ‘form.php’ SQL Injection
intuitive (form.php) Sql Injection Vulnerability
Joomla! Component com_acprojects – SQL Injection
Joomla Component com_acprojects Sql Injection Vulnerability
Joomla! Component com_acstartseite – SQL Injection
Joomla Component com_acstartseite Sql Injection Vulnerability
wh-em.com upload 7.0 – Insecure Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/38610/info
EziScript Google Page Rank 1.1 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/38266/info
Extreme Mobster – ‘login’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38265/info
BGSvetionik BGS CMS – ‘search’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38264/info
Portrait Software Portrait Campaign Manager 4.6.1.22 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/38252/info
Limny 2.0 – Cross-Site Request Forgery (Create Admin User)
/¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯\
Limny 2.0 – Cross-Site Request Forgery (Change Email and Password)
/¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯\
SongForever.com Clone – Arbitrary File Upload
========================================================================================
Mambo Component ‘com_acnews’ – ‘id’ SQL Injection
Mambo Component com_acnews [id] | SQL Injection