vBulletin 3.5.2 – Cross-Site Scripting
# Title: vBulletin Version 3.5.2 - Introduction XSS scripting
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Omnidocs – SQL Injection
--------------------------------------------------------------------
ULoki Community Forum 2.1 – ‘usercp.php’ Cross-Site Scripting
# Exploit Title: ULoki Community Forum v2.1 (usercp.php) Cross Site Scripting
HASHE! Solutions – Multiple SQL Injections
HASHE! Multiple Sql Injection Vulnerability
eSmile Script – ‘index.php’ SQL Injection
eSmile (index.php) Sql Injection Vulnerability
ThinkPHP 2.0 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39909/info
vBulletin Adsense Component – ‘viewpage.php’ SQL Injection
source: https://www.securityfocus.com/bid/38167/info
osTicket 1.6 RC5 – Multiple Vulnerabilities
Advisory Name: SQL injection in osTicket
NewsLetter Tailor 0.2.0 – Remote File Inclusion
==============================================================================
Limny 1.01 – Arbitrary File Upload
----------[exploit Debut]
Fonts Site Script – Remote File Disclosure
=---------------------------------------------=
Zomorrod CMS – SQL Injection
#################################################################
MOJO’s IWms 7 – SQL Injection / Cross-Site Scripting
# Exploit Title: MOJO's IWMS
Yes Solutions – Webapp SQL Injection
####################################################################
NewsLetter Tailor – Authentication Bypass
==============================================================================
NewsLetter Tailor – Database Backup Dump
==============================================================================
CPA Site Solutions – Arbitrary File Upload
###########################################################################
fipsForum 2.6 – Remote Database Disclosure
==============================================================================
VideoDB 3.0.3 – ‘login.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38155/info
Zen Time Tracking 2.2 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/38153/info
Aflam Online 1.0 – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/38147/info
Blue Dove – SQL Injection
####################################################################
JaxCMS 1.0 – Local File Inclusion
Name : JaxCMS (p) Local File Include
TinyMCE WYSIWYG Editor – Multiple Vulnerabilities
[+] Vurnerebility: *Js tiny_mce/tiny_mce WYSIWYG{java script} vurnerebility xss-->popup
Uiga Business Portal – SQL Injection / Cross-Site Scripting
# Exploit Title: Uiga Business Portal SQL/ XSS Vulnerability
Rostermain 1.1 – Authentication Bypass
[+] Rostermain
EncapsCMS 0.3.6 – ‘config[path]’ Remote File Inclusion
[+] EncapsCMS 0){
Killmonster 2.1 – Authentication Bypass
[+] Killmonster
Croogo 1.2.1 – Multiple Cross-Site Request Forgery Vulnerabilities
[#-----------------------------------------------------------------------------------------------#]
Joomla! Component com_productbook – SQL Injection
Joomla Component "com_productbook" SQL Injection Vulnerability
Belkatalog CMS – SQL Injection
#Title:Belkatalog CMS--- sql injection vulnerability
Exponent CMS 0.96.3 – ‘articlemodule’ SQL Injection
Exponent CMS 0.96.3 (articlemodule) Sql Injection Vulnerability
DA Mailing List System 2 – Multiple Vulnerabilities
#######################################################################
Baal Systems 3.8 – Authentication Bypass
[+] Baal Systems
Zen Tracking 2.2 – Authentication Bypass
[+] Zen Tracking
WSN Guest – Database Disclosure
####################################################################
ShopEx Single 4.5.1 – ‘errinfo’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39941/info
ShopEx Single 4.5.1 – Multiple Vulnerabilities
# Exploit Title: ShopEx
odlican.net CMS 1.5 – Arbitrary File Upload
#odlican.net cms v.1.5 remote file upload vulnerability
Arab Network Tech. (ANT) CMS – SQL Injection
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Joomla! Component com_photoblog – Blind SQL Injection
Joomla (com_photoblog) Blind Sql Injection Vulnerability
Open Bulletin Board – Multiple Blind SQL Injections
Open Bulletin Board Multiple Blind Sql Injection Vulnerability
ASCET Interactive Huski Retail – Multiple SQL Injections
source: https://www.securityfocus.com/bid/38129/info
ASCET Interactive Huski CMS – ‘i’ Local File Inclusion
source: https://www.securityfocus.com/bid/38126/info
LANDesk Management Gateway 4.x – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/38119/info
evalSMSI 2.1.3 – Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/38116/info
Audistats 1.3 – SQL Injection
###################################################################################
Data 1 Systems UltraBB 1.17 – ‘view_post.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38097/info
KnowGate hipergate 4.0.12 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/38094/info
Interspire Knowledge Manager < 5.1.3 - Multiple Remote Vulnerabilities
source: https://www.securityfocus.com/bid/38090/info