PHP Banner Exchange 1.2 – ‘signupconfirm.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40165/info
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
PHP File Uploader – Arbitrary File Upload
source: https://www.securityfocus.com/bid/40159/info
SLAED CMS 2.0 – ‘stop’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37574/info
Discuz! 2.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37573/info
Joomla! Component com_oziogallery2 / IMAGIN – Arbitrary File Write
# Exploit Title: Joomla component com_oziogallery2 / IMAGIN arbitrary file write
Elite Gaming Ladders 3.0 – SQL Injection
# Exploit Title: Elite Gaming Ladders v3.0 SQL Injection Exploit
Smart Vision Script News – ‘newsdetail.php’ SQL Injection (1)
# Exploit Title: Smart Vsion Script News (newsdetail) SQL Injection Vulnerability
WorldPay Script Shop – ‘productdetail’ SQL Injection
============================================
Simple Portal 2.0 – Authentication Bypass
+===================================================================================+
Acidcat CMS 3.5 – Multiple Vulnerabilities
==============================================================================
Joomla! Component Bamboo Simpla Admin Template – SQL Injection
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
portal modulnet 1.0 – ‘id’ SQL Injection
+===================================================================================+
Rezervi 3.0.2 – ‘mail.inc.php’ Remote File Inclusion
###############################################################
Joomla! Component com_otzivi – Blind SQL Injection
#############################################################
Joomla! Component com_doqment – ‘cid’ SQL Injection
#############################################################################
Joomla! Component Bridge of Hope Template – SQL Injection
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
Live TV Script – SQL Injection
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
MasterWeb Script 1.0 – ‘details&newsID’ SQL Injection
+===================================================================================+
Joomla! Component com_hotbrackets – Blind SQL Injection
#############################################################
Joomla! Component com_alfresco – SQL Injection
#############################################################
Joomla! Component com_tpjobs – Blind SQL Injection
#####################################################################
Joomla! Component com_countries – SQL Injection
#############################################################
Joomla! Component com_abbrev – Local File Inclusion
[++] Joomla Component com_abbrev Local File Inclusion Vulnerability
Joomla! Component com_bfsurvey – Local File Inclusion
@~~=======================================~~@
Joomla! Component com_bfsurvey_basic – SQL Injection
[+] Joomla Component com_bfsurvey_basic SQL Injection Vulnerability
Joomla! Component com_biblestudy – Local File Inclusion
@~~=======================================~~@
Joomla! Component com_cartweberp – Local File Inclusion
@~~=======================================~~@
Football Pool 3.1 – Database Disclosure
==============================================================================
Service d’upload 1.0.0 – Arbitrary File Upload
========================================================================================
Obsession-Design Image-Gallery 1.1 – ‘display.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40557/info
X7CHAT 1.3.6b – Arbitrary Add Admin
#####################################################
Left 4 Dead Stats 1.1 – SQL Injection
----------------------------------
WordPress Plugin Events – SQL Injection
+===================================================================================+
Joomla! Component com_dailymeals – Local File Inclusion
@~~=======================================~~@
AL-Athkat.2.0 – Cross-Site Scripting
========================================================================================
superlink script 1.0 – ‘id’ SQL Injection
+===================================================================================+
eazyPortal 1.0.0 – Multiple Vulnerabilities
[#-----------------------------------------------------------------------------------------------#]
Proxyroll.com Clone PHP Script – Insecure Cookie Handling
# Exploit Title: Proxyroll.com Clone PHP Script Cookie Handling And Tamper Data
HLstatsX Community Edition 1.6.5 – Cross-Site Scripting
# Exploit Title: HLstatsX Community Edition 1.6.5 Cross Site Scripting Vulnerability
DZOIC ClipHouse – Authentication Bypass
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
CMS Made Simple 1.x – Cross-Site Scripting / Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/40483/info
VisionGate 1.6 – ‘login.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37569/info
VirtuaSystems VirtuaNews Pro 1.0.4 – ‘admin.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37568/info
PHPCart 3.1.2 – ‘search.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37567/info
Reamday Enterprises Magic News Plus 1.0.2 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/37566/info
Joomla! Component com_avosbillets – Blind SQL Injection
#############################################################
Mini-NUKE 2.3 Freehost – Multiple Vulnerabilities
==============================================================================
DZOIC Handshakes – Authentication Bypass
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????