webapps

Joomla! Component JSP Tickets 1.1 – SQL Injection

# # # # #

Joomla! Component jLike 1.0 – Information Leak

Joomla! Component Zh GoogleMap 8.4.0.0 – SQL Injection

Joomla! Component Zh YandexMap 6.2.1.0 – ‘id’ SQL Injection

Joomla! Component Zh BaiduMap 3.0.0.1 – SQL Injection

Online Voting System – Authentication Bypass

# Exploit Title: Online Voting System - Authentication Bypass

NixCMS 1.0 – ‘category_id’ SQL Injection

# #

Matrimonial Website Script 2.1.6 – ‘uid’ SQL Injection

# Exploit Title: Matrimonial Website Script 2.1.6 - 'uid' SQL Injection

Wonder CMS 2.3.1 – ‘Host’ Header Injection

# Exploit Title: Wonder CMS 2.3.1 Host Header Injection

Wonder CMS 2.3.1 – Unrestricted File Upload

Affected Code:

FiberHome AN5506 – Remote DNS Change

# FIBERHOME AN5506 Unauthenticated Remote DNS Change Vulnerability

Oracle Hospitality Simphony (MICROS) 2.7 < 2.9 - Directory Traversal

# Exploit Title: Oracle Hospitality Simphony (MICROS) directory traversal

Joomla! Component JMS Music 1.1.1 – SQL Injection

# # # # #

Joomla! Component Jimtawl 2.1.6 – Arbitrary File Upload

# # # # #

Joomla! Component JEXTN Classified 1.0.0 – ‘sid’ SQL Injection

# # # # #

Joomla! Component JEXTN Reverse Auction 3.1.0 – SQL Injection

# # # # #

Event Manager 1.0 – SQL Injection

# # # # #

Joomla! Component JE PayperVideo 3.0.0 – ‘usr_plan’ SQL Injection

IPSwitch MOVEit 8.1 < 9.4 - Cross-Site Scripting

# Exploit Title: IPSwitch MoveIt Stored Cross Site Scripting (XSS)

Advance Loan Management System – ‘id’ SQL Injection

# Exploit Title: Advance Loan Management System - 'id' SQL Injection

Real Estate Custom Script – ‘route’ SQL Injection

# Exploit Title: Real Estate Custom Script - 'route' SQL Injection

Fancy Clone Script – ‘search_browse_product’ SQL Injection

# Exploit Title: Fancy Clone Script - 'search_browse_product' SQL Injection

Joomla! Component JEXTN Membership 3.1.0 – ‘usr_plan’ SQL Injection

BMC BladeLogic RSCD Agent 8.3.00.64 – Windows Users Disclosure

# Exploit Title: BMC BladeLogic RSCD agent get Windows users

Joomla! Component Visual Calendar 3.1.3 – ‘id’ SQL Injection

# # # # #

Joomla! Component CP Event Calendar 3.0.1 – ‘id’ SQL Injection

# # # # #

Joomla! Component Picture Calendar for Joomla! 3.1.4 – Directory Traversal

# # # # #

Advantech WebAccess < 8.3 - SQL Injection

#!/usr/bin/python2.7

iBall WRA150N – Multiple Vulnerabilities

## Vulnerabilities summary

KeystoneJS < 4.0.0-beta.7 - Cross-Site Request Forgery

# Exploit Title: Application wide CSRF Bypass

Netis WF2419 Router – Cross-Site Request Forgery

# Exploit Title: Netis-WF2419 Router Cross-Site Request Forgery (CSRF)

Buddy Zone 2.9.9 – SQL Injection

# # # # #

Multilanguage Real Estate MLM Script 3.0 – ‘srch’ SQL Injection

# # # # #

Hot Scripts Clone – ‘subctid’ SQL Injection

# # # # #

TSiteBuilder 1.0 – SQL Injection

# # # # #

Task Rabbit Clone 1.0 – ‘id’ SQL Injection

# # # # #

Joomla! Component Jtag Members Directory 5.3.7 – Arbitrary File Download

# # # # #

Joomla! Component JS Support Ticket 1.1.0 – Cross-Site Request Forgery

[CODE]

Nexpose < 6.4.66 - Cross-Site Request Forgery

# Exploit Title: [Cross Site Request Forgery at Nexpose Automated Actions]

Gnew 2018.1 – Cross-Site Request Forgery

# Exploit Title: Gnew 2018.1 - Cross-Site Request Forgery

PACSOne Server 6.6.2 DICOM Web Viewer – SQL Injection

# Exploit Title: PACSOne Server 6.6.2 DICOM Web Viewer SQL Injection

PACSOne Server 6.6.2 DICOM Web Viewer – Directory Trasversal

# Exploit Title: PACSOne Server 6.6.2 DICOM Web Viewer Directory Trasversal / Local File Inclusion

WordPress Plugin Learning Management System – ‘course_id’ SQL Injection

# Exploit Title: Good LMS - Learning Management System WP Plugin SQL

Dodocool DC38 N300 – Cross-site Request Forgery

# Exploit Title: DODOCOOL DC38 N300 Cross-site Request Forgery

ASUS DSL-N14U B1 Router 1.1.2.3_345 – Change Administrator Password

import requests

Telerik UI for ASP.NET AJAX 2012.3.1308 < 2017.1.118 - Arbitrary File Upload

# Exploit Title: Telerik UI for ASP.NET AJAX RadAsyncUpload uploader

Telerik UI for ASP.NET AJAX 2012.3.1308 < 2017.1.118 - Encryption Keys Disclosure

# Exploit Title: Telerik UI for ASP.NET AJAX DialogHandler Dialog cracker

WordPress Plugin Email Subscribers & Newsletters 3.4.7 – Information Disclosure

# Exploit Title: WordPress Plugin Email Subscribers & Newsletters 3.4.7 - Information Disclosure

Professional Local Directory Script 1.0 – SQL Injection

# # # # #

Flexible Poll 1.2 – SQL Injection

# # # # #