TestLink 1.8.5 – ‘order_by_login_dir’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37839/info
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Soft Direct 1.05 – Multiple Vulnerabilities
========================================================================================
Fatwiki (fwiki) 1.0 – Remote File Inclusion
#############################################################################################################
FreePBX 2.5.x – Information Disclosure
Advisory Name: Information disclosure in FreePBX 2.5.x
FreePBX 2.5.1 – SQL Injection
Advisory Name: SQL injection in FreePBX 2.5.1
al3jeb script – Remote Change Password
al3jeb script Remote Change Password Exploit
FreePBX 2.5.x < 2.6.0 - Persistent Cross-Site Scripting
Advisory Name: Permanent Cross-Site Scripting (XSS) in FreePBX 2.5.x – 2.6.0
Testlink TestManagement and Execution System 1.8.5 – Multiple Directory Traversal Vulnerabilities
1.Title :Multiple directory Traversal Vulnerabilites in Testlink TestManagement and Execution System.
Joomla! Component com_libros – SQL Injection
########################################################################
Joomla! Component com_prime – Directory Traversal
@~~=======================================~~@
Max’s Image Uploader – Arbitrary File Upload
========================================================================================
Joomla! Component com_pc – Local File Inclusion
#############################################################
Uploader by CeleronDude 5.3.0 – Arbitrary File Upload (2)
#############################
Ebay Clone from clone2009 – SQL Injection
Name : Ebay Clone from (clone2009.com)
ITechSctipts Alibaba Clone – Multiple Vulnerabilities
Name : ITechSctipts Alibaba Clone
CLONEBID B2B Marketplace – Multiple Vulnerabilities
Name : CLONEBID B2B Marketplace
Transload Script – Arbitrary File Upload
# Exploit Title: Translod Script Uplaod Vulnerability
PonVFTP – ‘login.php’ SQL Injection
source: https://www.securityfocus.com/bid/40608/info
Triburom – ‘forum.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40316/info
LetoDms 1.4.x – ‘lang’ Local File Inclusion
source: https://www.securityfocus.com/bid/37828/info
PonVFTP – Bypass / Arbitrary File Upload
in the name of allah
Max’s File Uploader – Arbitrary File Upload
in the name of allah
Joomla! Component com_marketplace 1.2 – ‘catid’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37819/info
Xforum 1.4 – ‘nbpageliste’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37818/info
Technology for Solutions 1.0 – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37811/info
Zenoss 2.3.3 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/37802/info
dokuwiki 2009-12-25 – Multiple Vulnerabilities
Reported: 13-01-2010
Joomla! Component com_articlemanager – SQL Injection
########################################################################
StivaSoft Stiva SHOPPING CART 1.0 – ‘demo.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40310/info
Tribisur – ‘cat’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37800/info
Joomla! Component com_tienda – ‘categoria’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37798/info
Public Media Manager – SQL Injection
#################################################
PSI CMS 0.3.1 – SQL Injection
###########################################
Asp VevoCart Control System 3.0.4 – Database Disclosure
========================================================================================
Hesk Help Desk 2.1 – Cross-Site Request Forgery
#############################################################
Populum 2.3 – SQL Injection
# Exploit Title: Populum SQL injection vulnerability
CiviCRM 3.1 < Beta 5 - Multiple Cross-Site Scripting Vulnerabilities
# Author: h00die (mcyr2@csc.com) & Ch3nz (vpierorazio@csc.com)
Simple PHP Blog 0.5.x – ‘search.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37752/info
Docmint 1.0/2.1 – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37721/info
PHPepperShop 2.5 – ‘USER_ARTIKEL_HANDLING_AUFRUF.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37707/info
Layout CMS 1.0 – SQL Injection / Cross-Site Scripting
+===================================================================================+
Active Calendar 1.2 – ‘$_SERVER[‘PHP_SELF’]’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37709/info
@lex Guestbook 5.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37706/info
Jamit Job Board – ‘post_id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37701/info
DELTAScripts PHP Links 1.0 – ’email’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37700/info
Alwjeez Script – Database Backup
::::::::::::::::Exploit:::::::::::