exploit-db-mirror/platforms/java/webapps
Offensive Security 557f116d02 DB: 2016-10-19
8 new exploits

TikiWiki 1.9 Sirius - (jhot.php) Remote Command Execution
TikiWiki 1.9 Sirius - 'jhot.php' Remote Command Execution

TikiWiki 1.9.5 Sirius - (sort_mode) Information Disclosure
TikiWiki 1.9.5 Sirius - 'sort_mode' Information Disclosure

TikiWiki 1.9.8 - tiki-graph_formula.php Command Execution
TikiWiki 1.9.8 - 'tiki-graph_formula.php' Command Execution

TikiWiki < 1.9.9 - tiki-listmovies.php Directory Traversal
TikiWiki < 1.9.9 - 'tiki-listmovies.php' Directory Traversal
TikiWiki Project 1.8 - tiki-switch_theme.php theme Parameter Cross-Site Scripting
TikiWiki Project 1.8 - img/wiki_up Arbitrary File Upload
TikiWiki Project 1.8 - tiki-map.phtml Traversal Arbitrary File / Directory Enumeration
TikiWiki Project 1.8 - 'tiki-switch_theme.php' theme Parameter Cross-Site Scripting
TikiWiki Project 1.8 - 'img/wiki_up' Arbitrary File Upload
TikiWiki Project 1.8 - 'tiki-map.phtml' Traversal Arbitrary File / Directory Enumeration
TikiWiki Project 1.8 - categorize.php Direct Request Full Path Disclosure
TikiWiki Project 1.8 - messu-mailbox.php Multiple Parameter Cross-Site Scripting
TikiWiki Project 1.8 - messu-read.php Multiple Parameter Cross-Site Scripting
TikiWiki Project 1.8 - tiki-read_article.php articleId Parameter Cross-Site Scripting
TikiWiki Project 1.8 - tiki-browse_categories.php parentId Parameter Cross-Site Scripting
TikiWiki Project 1.8 - tiki-index.php comments_threshold Parameter Cross-Site Scripting
TikiWiki Project 1.8 - tiki-print_article.php articleId Parameter Cross-Site Scripting
TikiWiki Project 1.8 - tiki-list_file_gallery.php galleryID Parameter Cross-Site Scripting
TikiWiki Project 1.8 - 'categorize.php' Direct Request Full Path Disclosure
TikiWiki Project 1.8 - 'messu-mailbox.php' Multiple Parameter Cross-Site Scripting
TikiWiki Project 1.8 - 'messu-read.php' Multiple Parameter Cross-Site Scripting
TikiWiki Project 1.8 - 'tiki-read_article.php' articleId Parameter Cross-Site Scripting
TikiWiki Project 1.8 - 'tiki-browse_categories.php' parentId Parameter Cross-Site Scripting
TikiWiki Project 1.8 - 'tiki-index.php' comments_threshold Parameter Cross-Site Scripting
TikiWiki Project 1.8 - 'tiki-print_article.php' articleId Parameter Cross-Site Scripting
TikiWiki Project 1.8 - 'tiki-list_file_gallery.php' galleryID Parameter Cross-Site Scripting
TikiWiki Project 1.8 - tiki-upload_file.php galleryID Parameter Cross-Site Scripting
TikiWiki Project 1.8 - tiki-view_faq.php faqId Parameter Cross-Site Scripting
TikiWiki Project 1.8 - tiki-view_chart.php chartId Parameter Cross-Site Scripting
TikiWiki Project 1.8 - tiki-usermenu.php sort_mode Parameter SQL Injection
TikiWiki Project 1.8 - tiki-list_file_gallery.php sort_mode Parameter SQL Injection
TikiWiki Project 1.8 - 'tiki-upload_file.php' galleryID Parameter Cross-Site Scripting
TikiWiki Project 1.8 - 'tiki-view_faq.php' faqId Parameter Cross-Site Scripting
TikiWiki Project 1.8 - 'tiki-view_chart.php' chartId Parameter Cross-Site Scripting
TikiWiki Project 1.8 - 'tiki-usermenu.php' sort_mode Parameter SQL Injection
TikiWiki Project 1.8 - 'tiki-list_file_gallery.php' sort_mode Parameter SQL Injection

Symantec pcAnywhere 12.5.0 Windows (x86) - Remote Code Execution
Symantec pcAnywhere 12.5.0 (Windows x86) - Remote Code Execution

Microsoft Windows (x86) - 'afd.sys' Privilege Escalation (MS11-046)
Pluck CMS 4.7.3 - Cross-Site Request Forgery (Add Page)
LanSpy 2.0.0.155 - Local Buffer Overflow
ManageEngine ServiceDesk Plus 9.2 Build 9207 - Unauthorized Information Disclosure
Cgiemail 1.6 - Source Code Disclosure
Windows DFS Client Driver - Arbitrary Drive Mapping Privilege Escalation (MS16-123)
Windows DeviceApi CMApi PiCMOpenDeviceKey - Arbitrary Registry Key Write Privilege Escalation (MS16-124)
Windows DeviceApi CMApi - User Hive Impersonation Privilege Escalation (MS16-124)
2016-10-19 05:01:18 +00:00
..
18881.txt Updated 2013-12-03 19:44:07 +00:00
20668.py Updated 2013-12-03 19:44:07 +00:00
20925.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
21543.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
21562.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
21879.txt Updated 2013-12-03 19:44:07 +00:00
21946.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
22752.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
23268.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
24190.txt Updated 2013-12-03 19:44:07 +00:00
24791.txt Updated 2013-12-03 19:44:07 +00:00
25702.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
26001.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
26987.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
27888.txt Updated 2013-12-03 19:44:07 +00:00
28116.txt Updated 2013-12-03 19:44:07 +00:00
29918.txt Updated 2013-12-03 22:42:55 +00:00
30271.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
30272.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
30273.txt Updated 12_17_2013 2013-12-17 17:05:06 +00:00
30274.txt Updated 12_17_2013 2013-12-17 17:05:06 +00:00
30275.txt Updated 12_17_2013 2013-12-17 17:05:06 +00:00
30514.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
30674.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
31073.html DB: 2016-09-03 2016-09-03 13:13:25 +00:00
31189.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
31438.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
31621.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
31641.txt Updated 02_15_2014 2014-02-15 04:27:44 +00:00
31816.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
32448.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
32459.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
32574.txt Updated 03_30_2014 2014-03-30 04:31:18 +00:00
32818.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
32821.html DB: 2016-09-03 2016-09-03 13:13:25 +00:00
32858.txt Updated 04_18_2014 2014-04-18 04:35:42 +00:00
32862.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
32863.txt Updated 04_18_2014 2014-04-18 04:35:42 +00:00
32864.txt Updated 04_18_2014 2014-04-18 04:35:42 +00:00
32897.txt Updated 04_18_2014 2014-04-18 04:35:42 +00:00
32909.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
32927.txt Updated 04_20_2014 2014-04-20 04:34:26 +00:00
32940.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
33048.txt Updated 04_28_2014 2014-04-28 04:36:23 +00:00
33181.txt Updated 05_06_2014 2014-05-06 04:36:08 +00:00
33254.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
33286.txt Updated 05_11_2014 2014-05-11 04:36:48 +00:00
33687.txt Updated 06_10_2014 2014-06-10 04:38:25 +00:00
33939.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
34108.txt Updated 07_20_2014 2014-07-20 04:38:35 +00:00
34290.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
34293.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
34345.txt Updated 08_17_2014 2014-08-17 04:41:15 +00:00
35683.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
35781.txt Update: 2015-01-17 2015-01-17 08:35:34 +00:00
36292.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
36299.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
36423.txt DB: 2015-03-19 2015-03-19 09:39:10 +00:00
36436.txt DB: 2015-03-20 2015-03-20 08:36:08 +00:00
36440.txt DB: 2015-03-20 2015-03-20 08:36:08 +00:00
36548.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
36553.java DB: 2015-03-31 2015-03-31 08:35:36 +00:00
36666.txt DB: 2015-04-09 2015-04-09 08:36:09 +00:00
36667.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
36684.txt DB: 2015-04-11 2015-04-11 08:36:20 +00:00
36828.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
36939.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
36971.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
37006.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
37009.xml DB: 2015-05-15 2015-05-15 05:02:32 +00:00
37029.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
37030.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
37031.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
37032.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
37033.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
37110.py DB: 2015-05-27 2015-05-27 05:02:00 +00:00
37372.html DB: 2015-06-26 2015-06-26 05:02:53 +00:00
37416.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
37555.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
37557.txt DB: 2015-07-11 2015-07-11 05:03:28 +00:00
37589.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
37999.txt DB: 2015-08-29 2015-08-29 05:01:51 +00:00
38130.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
38358.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
38461.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
38462.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
38551.py DB: 2015-10-29 2015-10-29 05:02:34 +00:00
38664.py DB: 2015-11-11 2015-11-11 05:02:52 +00:00
38739.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
39193.txt DB: 2016-01-08 2016-01-08 05:03:43 +00:00
39241.py DB: 2016-02-13 2016-02-13 05:03:17 +00:00
39334.txt DB: 2016-09-03 2016-09-03 13:13:25 +00:00
39391.txt DB: 2016-02-02 2016-02-02 05:02:47 +00:00
39418.txt DB: 2016-02-15 2016-02-15 05:04:08 +00:00
39481.txt DB: 2016-02-23 2016-02-23 05:02:07 +00:00
39715.rb DB: 2016-04-22 2016-04-22 05:03:45 +00:00
39837.txt DB: 2016-05-18 2016-05-18 05:02:15 +00:00
39886.txt DB: 2016-06-07 2016-06-07 05:07:41 +00:00
39995.txt DB: 2016-06-22 2016-06-22 05:06:31 +00:00
39996.txt DB: 2016-06-22 2016-06-22 05:06:31 +00:00
40161.txt DB: 2016-07-26 2016-07-26 05:04:05 +00:00
40231.txt DB: 2016-08-12 2016-08-12 05:09:55 +00:00
40286.txt DB: 2016-08-23 2016-08-23 05:06:48 +00:00
40437.txt DB: 2016-09-29 2016-09-29 05:01:16 +00:00
40569.txt DB: 2016-10-19 2016-10-19 05:01:18 +00:00