CVE-2015-4671

Cross-site scripting XSS vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the zoneid parameter to index.php...

CVE-2015-4671: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the zoneid parameter to index.php...

PT-2016-3622

Name of the Vulnerable Software and Affected Versions OpenCart versions prior to 2.1.0.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via the zone id parameter to "index.php". This can lead to cross-site scripting XSS attacks. Recommendations For versions...

PHPWEB search/index.php SQL注入漏洞

0x01 框架介绍 PHPWEB智能网站管理系统是一款具有可视化管理和模块化网站功能的网站管理软件。可视化的鼠标拖曳排版，自由插入、拖动和叠放插件，所见即所得，让网站制作如同搭积木般便捷易玩；各种插件、边框、菜单可灵活组合和任意摆放，摆脱页面框架的束缚，尽享创意的乐趣；灵活的管理权限和会员权限配置、强大的网站互动功能，让DIY制作的网站毫不逊色于专业开发；模块化的网站功能，十多种常用网站模块和不断增加的专业功能模块可供选用，可根据需要安装卸载模块，即可用于简单的企业展示网站，又可用于开发各种专业网站。 官方主页：www.phpweb.net/ Dork:...

CVE-2016-1499

ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information from a directory listing and possibly cause a denial of service CPU consumption via the force parameter to index.php/apps/files/ajax/scan.php...

PHPOK官方DEMO配置不当可getshell(影响其他站点)

简要描述： 这.... 详细说明： Demo未配置好权限，可直接拿shell 首先登陆demo站后台 http://demo.phpok.com/admin.php 进入风格管理 更改模板格式为php 然后直接创建一个index.php内容为一句话即可。 从配置文件可以看出绑定了多个网站，其中有些是正在运行的 如yuechi.net ，岳池在线。 还有update.phpok.com,估计是用来更新的。 mask 区域 alHos n 8 Host Host admin@p ot /qg Name 1000 ;/qghost/w eny,a fro...

CVE-2016-1499: Exposure of Sensitive Information to an Unauthorized Actor

ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information from a directory listing and possibly cause a denial of service CPU consumption via the force parameter to index.php/apps/files/ajax/scan.php...

PT-2016-4845

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 8.0.10 ownCloud Server versions 8.1.x prior to 8.1.5 ownCloud Server versions 8.2.x prior to 8.2.2 Description The issue allows remote authenticated users to obtain sensitive information from a directory listi...

RW::Download 4.0.8 File Inclusion / SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : http://0day.today 0 1 + Support e-mail :...

Beezfud - Remote Code Execution

Exploit for php platform in category web applications ================================================================================ Beezfud Remote Code Execution ================================================================================ Vendor Homepage: https://github.com/EVA-01/beezfud...

Beezfud - Remote Code Execution

Beezfud - Remote Code Execution ================================================================================ Beezfud Remote Code Execution ================================================================================ Vendor Homepage: https://github.com/EVA-01/beezfud Date: 23/12/2015...

Beezfud - Remote Code Execution

================================================================================ Beezfud Remote Code Execution ================================================================================ Vendor Homepage: https://github.com/EVA-01/beezfud Date: 23/12/2015 Software Link:...

Docebo LMS 4.0.3 Cross Site Scripting

| Title : Docebo LMS 4.0.3 Multi Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by Docebo ® Community Edition | Tested on: windows 8.1 Français V.Pro | Download : http://www.dl.persianscript.ir/script/DoceboLMS403PersianScript.ir.zip...

CVE-2015-7777

CVE-2015-7777 corresponds to a cross-site scripting (XSS) vulnerability in the index.php script of the JosephErnest Void CMS, exploitable via a crafted URI to affect Void versions released before 2015-10-02. Public sources in connected documents confirm the affected product (Void CMS), the vulner...

CVE-2015-7777: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in JosephErnest Void before 2015-10-02 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...

PT-2015-7604

Name of the Vulnerable Software and Affected Versions JosephErnest Void versions prior to 2015-10-02 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URI. This occurs in the index.php file. Recommendations For versions prior...

onanera.eu XSS vulnerability

Vulnerable URL: http://www.onanera.eu/index.php?tag="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check...

keramikboa.se XSS vulnerability

Vulnerable URL: http://keramikboa.se/index.php?kat=sagofigurer="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:|...

CVE-2015-7857

SQL injection vulnerability in the getListQuery function in administrator/components/comcontenthistory/models/history.php in Joomla! 3.2 before 3.4.5 allows remote attackers to execute arbitrary SQL commands via the listselect parameter to index.php...

CVE-2015-7857: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the getListQuery function in administrator/components/comcontenthistory/models/history.php in Joomla! 3.2 before 3.4.5 allows remote attackers to execute arbitrary SQL commands via the listselect parameter to index.php...