Joomla! Component VirtueMart Module Customers_who_bought – SQL Injection
[~]>> ...[BEGIN ADVISORY]...
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Joomla! Component 3D Cloud – ‘tagcloud.swf’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37958/info
Joomla! 1.5.12 – Connect Back
#!/usr/bin/php
UGiA PHP UPLOADER 0.2 – Arbitrary File Upload
========================================================================================
Status2k – Remote Add Admin
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
BoastMachine 3.1 – Arbitrary File Upload
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
SilverStripe CMS 2.3.5 – Cross-Site Request Forgery / Open Redirection
# Exploit Title: Silverstripe
Joomla! Component com_mochigames – SQL Injection
[~]>> ...[BEGIN ADVISORY]...
OpenDb 1.5.0.4 – Multiple Local File Inclusions
==============================================================================
Joomla! Component JBDiary – Blind SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Joomla! Component com_jbpublishdownfp – SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Joomla! Component com_casino – SQL Injection
[~]>> ...[BEGIN ADVISORY]...
Joomla! Component com_ContentBlogList – SQL Injection
[~]>> ...[BEGIN ADVISORY]...
magic-portal 2.1 – SQL Injection
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
OpenX 2.6.1 – SQL Injection
source: https://www.securityfocus.com/bid/37913/info
Joomla! Component com_biographies – SQL Injection
#--------------------------------------------------------
Joomla! Component com_gurujibook – SQL Injection
#--------------------------------------------------------
KosmosBlog 0.9.3 – SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery
[#-----------------------------------------------------------------------------------------------#]
Joomla! Component com_avosbillets – SQL Injection
#--------------------------------------------------------
Joomla! Component com_gameserver – SQL Injection
# Exploit Title: Joomla (com_gameserver) SQL Injection Vulnerability
cPanel and WHM 11.25 – ‘failurl’ HTTP Response Splitting
source: https://www.securityfocus.com/bid/37902/info
jQuery Uploadify 2.1.0 – Arbitrary File Upload
# Exploit Title: jQuery uploadify v2.1.0 Remote File Upload
Blog System 1.x – ‘note’ SQL Injection
[#] Script : Blog System
SHOUTcast Server 1.9.8/Win32 – Cross-Site Request Forgery
# Exploit Title: HOUTcast Server Version
Joomla! Component com_book – SQL Injection
==============================================================================
eWebeditor – Directory Traversal
#################################################################
cPanel – HTTP Response Splitting
Recognize-Security - cPanel HTTP Response Splitting Vulnerability
Chipmunk NewsLetter 2.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/40024/info
kloNews 2.0 – ‘cat.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39987/info
PHPMySpace Gold 8.0 – ‘gid’ SQL Injection
source: https://www.securityfocus.com/bid/37881/info
AdvertisementManager 3.1 – ‘req’ Local/Remote File Inclusion
source: https://www.securityfocus.com/bid/44165/info
Blaze Apps 1.x – SQL Injection / HTML Injection
source: https://www.securityfocus.com/bid/40212/info
VisualShapers EZContents 2.0.3 – Authentication Bypass / Multiple SQL Injections
source: https://www.securityfocus.com/bid/37858/info
DataLife Engine 8.3 – ‘/engine/ajax/addcomments.php?_REQUEST[skin]’ Remote File Inclusion
source: https://www.securityfocus.com/bid/37851/info
DataLife Engine 8.3 – ‘/engine/ajax/pm.php?config[lang]’ Remote File Inclusion
source: https://www.securityfocus.com/bid/37851/info
DataLife Engine 8.3 – ‘/engine/inc/help.php?config[langs]’ Remote File Inclusion
source: https://www.securityfocus.com/bid/37851/info
DataLife Engine 8.3 – ‘/engine/inc/include/init.php?selected_language’ Remote File Inclusion
source: https://www.securityfocus.com/bid/37851/info
Bits Video Script 2.04/2.05 – ‘search.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40716/info
Bits Video Script 2.04/2.05 – ‘/register.php’ Arbitrary File Upload / Arbitrary PHP Code Execution
source: https://www.securityfocus.com/bid/40712/info
Bits Video Script 2.04/2.05 – ‘/addvideo.php’ Arbitrary File Upload / Arbitrary PHP Code Execution
source: https://www.securityfocus.com/bid/40712/info
Hitmaaan Gallery 1.3 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/40711/info
Bits Video Script 2.05 Gold Beta – ‘showcase2search.php?rowptem[template]’ Remote File Inclusion
source: https://www.securityfocus.com/bid/40709/info
Bits Video Script 2.05 Gold Beta – ‘showcasesearch.php?rowptem[template]’ Remote File Inclusion
source: https://www.securityfocus.com/bid/40709/info
Serialsystem 1.0.4 Beta – ‘list’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40236/info
Mobile Chat 2.0.2 – ‘chatsmileys.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40232/info
vBulletin 4.0.1 – ‘misc.php’ SQL Injection
source: https://www.securityfocus.com/bid/37854/info
Easysitenetwork Jokes Complete Website – ‘searchingred’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37852/info
Easysitenetwork Jokes Complete Website – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37852/info