Pogodny CMS – SQL Injection
# Exploit Title: [Pogodny CMS SQL injection]
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
microUpload – Arbitrary File Upload
------------------------------------------------------
Joomla! Component com_hdvideoshare – SQL Injection
==============================================================================
Joomla! Component com_joomportfolio – Blind Injection
==============================================================================
blog ink – Bypass Setting
========================================================================================
CoffieNet CMS – Admin Bypass
========================================================================================
Dodo Upload 1.3 – Arbitrary File Upload (Bypass)
========================================================================================
WordPress Plugin Copperleaf Photolog 0.16 – SQL Injection
#############################################################################################################
superengine CMS (Custom Pack) – SQL Injection
_______ _|__| | ____________ ____ ____
Généré par KDPics 1.18 – Remote Add Admin
==============================================================================
Katalog Stron Hurricane 1.3.5 – Remote File Inclusion / SQL Injection
#############################################################################################################
File Upload Manager 1.3 – Web Shell File Upload
# Version: v1.3
Joomla! Component com_videos – SQL Injection
http://server/index.php?option=com_videos&act=view&Itemid=27&id=-1084+UNION SELECT 1,concat(username,0x3a,password),3...
Joomla! Component Jw_allVideos – Arbitrary File Download
#################################################################
Mambo Component AkoGallery – SQL Injection
Mambo com_akogallery Remote Sql Injection Vulnerability
JTL-Shop 2 – ‘druckansicht.php’ SQL Injection
JTL-Shop 2 (druckansicht.php) SQL Injection Vulnerability
ShortCMS 1.2.0 – SQL Injection
#######################[ Informatique inside ]##########################
Calendarix 0.8.20071118 – SQL Injection
#######################[ Informatique inside ]##########################
PHP PEAR 1.9.0 – Multiple Remote File Inclusions
###########################################################
WordPress Core 2.9 – Failure to Restrict URL Access
WordPress >= 2.9 Failure to Restrict URL Access
InterTech Co 1.0 – SQL Injection
------------------------------------------------------
ZeusCMS 0.2 – Database Backup Dump / Local File Inclusion
==============================================================================
WSN Guest 1.02 – ‘orderlinks’ SQL Injection
###########################
statcountex 3.1 – Multiple Vulnerabilities
# Software Link: http://www.2enetworx.com/dev/projects/download.asp?pid=4&rid=34
MRW PHP Upload – Arbitrary File Upload
# Date: 12/02/2010
southburn Web – ‘products.php’ SQL Injection
####################################################################
Vito CMS – SQL Injection
####################################################################
Basic-CMS – ‘nav_id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38235/info
CMS Made Simple 1.6.6 – Local File Inclusion / Cross-Site Scripting
source: https://www.securityfocus.com/bid/38234/info
Infragistics WebHtmlEditor 7.1 – Multiple Vulnerabilities
---------------------------------------------------------------------------------------------------------------------...
daChooch – SQL Injection
==============================================================================
CMS Made Simple 1.6.6 – Multiple Vulnerabilities
################################################################
Alqatari Group 1.0 – Blind SQL Injection
+===================================================================================+
Izumi 1.1.0 – Multiple Local File Inclusion / Remote File Inclusions
##################################################################
CommodityRentals CD Rental Software – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/38184/info
vBulletin 3.5.4 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/38179/info
Trade Manager Script – SQL Injection
:::::::::::::::::::::::::
apemCMS – SQL Injection
============ { Ariko-Security - Advisory #1/2/2010 } =============
Vacation Rental Script – SQL Injection
:::::::::::::::::::::::::
Video Games Rentals Script – SQL Injection
# Exploit Title: video games rentals Script SQL injection Vulnerability
J.A.G (Just Another Guestbook) 1.14 – Database Disclosure
# Software Link: http://www.xs4all.nl/~crisp/jag/jag.zip
RSA – SecurID Cross-Site Scripting
Discovered 12-11-2008
X-Cart Pro 4.0.13 – SQL Injection
X-Cart Pro v4.0.13 SQL Injection Proof of Concept
Cisco Collaboration Server 5 – Cross-Site Scripting / Source Code Disclosure
Cisco Collaboration Server 5 XSS, Source Code Disclosure
Books/eBooks Rental Software – SQL Injection
[!] Books/eBooks Rental Software SQL injection Vulnerability
CD Rentals Script – SQL Injection
[!] CD Rentals Script SQL injection Vulnerability
myPHP Guestbook 2.0.4 – Database Backup Dump
==============================================================================
GameRoom Script – Authentication Bypass / Arbitrary File Upload
|=-----------------------------------------------------=|
vBulletin 2.3.x – SQL Injection
# Title: vbulletin Vulnerability versions 2.3 .* - SQL injection.
vBulletin 3.0.0 – Cross-Site Scripting
# Title: vBulletin 3.0.0 XSS