ManageEngine OpUtils 5 – ‘Login.DO’ SQL Injection
================================================================================
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
MASA2EL Music City 1.0 – SQL Injection
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Interspire Knowledge Manager 5 – ‘callback.snipshot.php’ Arbitrary File Creation
source: https://www.securityfocus.com/bid/38186/info
myBusinessAdmin – ‘content.php’ Blind SQL Injection
myBusinessAdmin (content.php) Blind Sql Injection Vulnerability
cityadmin – ‘links.php’ Blind SQL Injection
cityadmin (links.php) Blind Sql Injection Vulnerability
RealAdmin – ‘detail.php’ Blind SQL Injection
RealAdmin (detail.php) Blind Sql Injection Vulnerability
Hipergate 4.0.12 – Multiple Vulnerabilities
Permanent XSS:
PHP Car Rental-Script – Authentication Bypass
Name : PHP Car Rental-Script (Auth Bypass) SQL Injection
KubeLance 1.7.6 – Cross-Site Request Forgery (Add Admin)
[#-----------------------------------------------------------------------------------------------#]
MobPartner Chat – Multiple SQL Injections
MobPartner Chat Multiple Sql Injection Vulnerability
MYRE Classified – ‘cat’ SQL Injection
###################################################################################
Dlili Script – SQL Injection
==============================================================================
GCP 2.0 datasets provided as BioCASE Web services – Local File Inclusion
========================================================================
EmiratesHost – Insecure Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/39963/info
Joomla! Component AutartiTarot – Directory Traversal
source: https://www.securityfocus.com/bid/38034/info
Joomla! Component com_gambling – ‘gamblingEvent’ SQL Injection
source: https://www.securityfocus.com/bid/38033/info
Home Of AlegroCart 1.1 – Cross-Site Request Forgery (Change Administrator Password)
[#]----------------------------------------------------------------[#]
RaakCMS – Multiple Vulnerabilities
#################################################################
Snif 1.5.2 – Any Filetype Download
--------------------------------------------
Joomla! Component Yelp – SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Joomla! Component Job – SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Evernew Free Joke Script – ‘viewjokes.php’ SQL Injection
Name : Evernew Free Joke Script (viewjokes.php) SQL Injection
ShoutCMS – ‘content.php’ Blind SQL Injection
Shout! (content.php) Blind Sql Injection Vulnerability
HAWHAW – ‘newsread.php’ SQL Injection
source: https://www.securityfocus.com/bid/39978/info
Site Manager 3.0 – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/39973/info
Last Wizardz – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/39968/info
Joomla! Component com_rsgallery2 2.0 – ‘catid’ SQL Injection
source: https://www.securityfocus.com/bid/38009/info
Saman Portal – SQL Injection
#################################################################
Maian Greetings 2.1 – Arbitrary File Upload
========================================================================================
Creative SplashWorks-SplashSite – ‘page.php’ Blind SQL Injection
####################################################################
crownweb – ‘page.cfm’ SQL Injection
crownweb (page.cfm) Sql Injection Vulnerability
dotProject 2.1.3 – Cross-Site Scripting / Improper Permissions
# Exploit Title: dotProject 2.1.3 XSS and Improper Permissions
IPB (nv2) Awards < 1.1.0 - SQL Injection
#################################################
ThinkAdmin – ‘page.php’ SQL Injection
==========================================================
Joomla! Component com_simplefaq – ‘catid’ Blind SQL Injection
Joomla Component com_simplefaq (catid) Blind Sql Injection Vulnerability
Joomla! Component JE Event Calendar – SQL Injection
[~]>> ...[BEGIN ADVISORY]...
phpunity.newsmanager – Local File Inclusion
#############################################################################################################
Joomla! Component com_dms 2.5.1 – SQL Injection
[~] Joomla Component com_dms Remote SQL injection vulnerability - (category_id)
eWebeditor ASP Version – Multiple Vulnerabilities
#################################################################
Joomla! Component JE Quiz – ‘eid’ Blind SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Joomla! Component Jreservation – Blind SQL Injection
[~]>> ...[BEGIN ADVISORY]...
CommonSpot Server – ‘/utilities/longproc.cfm’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37986/info
Joomla! Component CCNewsLetter – Local File Inclusion
Joomla Component com_ccnewsletter Local File Inclusion
Joomla! Component jVideoDirect – Blind SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Joomla! Component com_kunena – Blind SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Novaboard 1.1.2 – SQL Injection
#############################################################
Joomla! Component CCNewsLetter – Directory Traversal
[~]>> ...[BEGIN ADVISORY]...
Discuz! 6.0 – ‘tid’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37982/info
Joomla! Component com_virtuemart – order_status_id SQL Injection
[~]>> ...[BEGIN ADVISORY]...