tincan ltd – ‘section’ SQL Injection
+/=============================================\+
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
FAQEngine 4.24.00 – Remote File Inclusion
###################################################################################
Image Hosting Script – Arbitrary File Upload
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
gridcc script 1.0 – SQL Injection / Cross-Site Scripting
+===================================================================================+
CMScontrol 7.x – Arbitrary File Upload
#############################################################
Alex Guestbook – Multiple Vulnerabilities
==============================================================================
Smart Statistics 1.0 – ‘smart_Statistics_admin.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40468/info
DigitalHive – ‘mt’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37697/info
D-Link Routers – Authentication Bypass (2)
Multiple D-Link routers suffer from insecure implementations of the Home Network Administration
E-membres 1.0 – Remote Database Disclosure
==============================================================================
Egreetings 1.0b – Remote Database Disclosure
========================================================================
ABB 1.1 – Forum Remote Database Disclosure
==============================================================================
Simply Classified 0.2 – Cross-Site Scripting / Cross-Site Request Forgery
#################################################################
Joomla! Component com_jashowcase – Directory Traversal
@~~=======================================~~@
Joomla! Component com_jvideodirect – Directory Traversal
@~~=======================================~~@
Joomla! Component com_jcollection – Directory Traversal
@~~=======================================~~@
ZeeWays Script – SQL Injection
# Exploit Title: ZeEwAyS ScRiPt SQL Injection Vulnerability
Joomla! Component com_dashboard – Directory Traversal
@~~=======================================~~@
phpMDJ 1.0.3 – SQL Injection
,--------------------------------------------------------------,
PHPCalendars – Multiple Vulnerabilities
==============================================================================
TermiSBloG 1.0 – SQL Injections
#############################################################
ProArcadeScript to Game – SQL Injection
# Software Link: proarcadescript.com
PPVChat – Multiple Vulnerabilities
##########################[andresg888]##########################
ProfitCode Shopping Cart – Multiple Local/Remote File Inclusion Vulnerabilities
# Author: Zer0 Thunder
Joomla! Component Jobads – ‘type’ SQL Injection
source: https://www.securityfocus.com/bid/37686/info
DELTAScripts PHPClassifieds – ‘rate.php’ Blind SQL Injection
Name : DELTAScripts PHPClassifieds
DELTAScripts PHPLinks – ‘catid’ SQL Injection
Name : DELTAScripts PHPLinks
Joomla! Component com_ksadvertiser – SQL Injection
########################################################################
CU Village CMS Site 1.0 – ‘print_view’ Blind SQL Injection
+===================================================================================+
Datetopia Match Agency BiZ – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/40488/info
Calendarix 0.7 – ‘calpath’ Remote File Inclusion
source: https://www.securityfocus.com/bid/37673/info
dotProject 2.1.3 – Multiple SQL Injections / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/37669/info
Joomla! Component DM Orders – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/37655/info
Joomla! Component Regional Booking – ‘id’ Blind SQL Injection
Joomla Component Regional Booking (id) Blind SQL Injection Vulnerability
Drupal 6.15 – Multiple Persistent Cross-Site Scripting Vulnerabilities
# Exploit Title: 0day Drupal
Read Excel Script 1.1 – Arbitrary File Upload
Read Excel v1.1 Shell Upload Vulnerability
AutoIndex PHP Script – ‘index.php’ Directory Traversal
==============================================================================
Ulisse’s Scripts 2.6.1 – ‘ladder.php’ SQL Injection
# Tested on: Windows Vista Home Premium and Linux 2.6.28.1 (Backtrack 3)
Zeeways Technology – ‘product_desc.php’ SQL Injection
#############################################################
L2Web LineWeb 1.0.5 – Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/40577/info
KubeLabs PHPDug 2.0 – ‘upcoming.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40554/info
Sniggabo CMS 2.21 – ‘search.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40534/info
Roundcube Webmail 0.2 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/37654/info
SpawCMS Editor – Arbitrary File Upload
# Author: j4ck
Roundcube Webmail – Multiple Vulnerabilities
# Exploit Title: RoundCube Webmail XSS Voulerability
Joomla! Component com_king – Blind SQL Injection
#############################################################
Joomla! Component com_kk – Blind SQL Injection
#############################################################
Milonic News – ‘viewnews’ SQL Injection
=============================================================================
D-Link DKVM-IP8 – Cross-Site Scripting
# Exploit Title: D-LINK DKVM-IP8 XSS Vulnerability
Docebo 3.6.0.2 (stable) – Local File Inclusion
# Exploit Title: Docebo 3.6.0.2 (stable) Local File Inclusion