php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
PHP Webquest 2.6 – SQL Injection
# Exploit Title: sql injection
Mangallam CMS – SQL Injection
Document Title:
NPDS CMS REvolution-13 – SQL Injection
Title - NPDS CMS Revolution-13 - SQL Injection Vulnerability
ecommerceMajor – SQL Injection / Authentication Bypass
##################################################################################################
ArticleFR CMS 3.0.5 – Arbitrary File Upload
# Exploit Title: Arbitrary File Upload in articleFR CMS 3.0.5
ArticleFR CMS 3.0.5 – SQL Injection
# Exploit Title: SQL injection vulnerability in articleFR CMS 3.0.5
vBulletin vBSSO Single Sign-On 1.4.14 – SQL Injection
# Exploit Title: vBulletin vBSSO Single Sign-On –
WordPress Plugin Pixarbay Images 2.3 – Multiple Vulnerabilities
Mogwai Security Advisory MSA-2015-01
RedaxScript 2.1.0 – Privilege Escalation
# Exploit Title: Privilege Escalation in RedaxScript 2.1.0
WordPress Plugin Cforms 14.7 – Remote Code Execution
# Exploit Title: Remote Code Execution via Unauthorised File upload in Cforms 14.7
WordPress Plugin Pie Register 2.0.13 – Privilege Escalation
# Exploit Title: Pie Register 2.0.13 Privilege escalation
Gecko CMS 2.3 – Multiple Vulnerabilities
Gecko CMS 2.3 Multiple Vulnerabilities
vBulletin MicroCART 1.1.4 – Arbitrary Files Deletion / SQL Injection / Cross-Site Scripting
# Exploit Title: vBulletin MicroCART 1.1.4 - Arbitrary File(s) Deletion,
Sefrengo CMS 1.6.0 – SQL Injection
Advisory: SQL-Injection in administrative Backend of Sefrengo CMS v.1.6.0
Microweber CMS 0.95 – SQL Injection
# Exploit Title: SQL Injection in Microweber CMS 0.95
AdaptCMS 3.0.3 – Multiple Vulnerabilities
#!/usr/bin/env python
Crea8Social 2.0 – Cross-Site Scripting Change Interface
# Exploit Title: Crea8Social v.2.0 XSS Change Interface
PhotoPost < 4.85 - Multiple Vulnerabilities
PhotoPost Multiple Vulnerabilities
e107 2 Bootstrap CMS – Cross-Site Scripting
_____ _____ ______
ReviewPost < 2.84 - Multiple Vulnerabilities
ReviewPost Multiple Vulnerabilities
PhotoPost Classifieds < 2.01 - Multiple Vulnerabilities
PhotoPost Classifieds Multiple Vulnerabilities
Absolut Engine 1.73 – Multiple Vulnerabilities
Advisory: Multiple SQL Injections and Reflecting XSS in Absolut Engine v.1.73 CMS
Social Microblogging PRO 1.5 – Persistent Cross-Site Scripting
# Exploit Title: Social Microblogging PRO 1.5 Stored XSS Vulnerability
PHP-Calendar < 0.10.1 - Arbitrary File Inclusion
PHP-Calendar Arbitrary File Inclusion
WHM.AutoPilot < 2.4.6.5 - Multiple Vulnerabilities
WHM.AutoPilot Multiple Vulnerabilities
Easy File Sharing Web Server 6.8 – Persistent Cross-Site Scripting
Exploit Title: Easy File Sharing Webserver =>6.8 Persistent XSS
PMB 4.1.3 – (Authenticated) SQL Injection
# Exploit Title: PMB
phpList 3.0.6/3.0.10 – SQL Injection
Document Title:
Lazarus Guestbook 1.22 – Multiple Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
PHPMyRecipes 1.2.2 – ‘browse.php?category’ SQL Injection
##################################################################################################
Codiad 2.4.3 – Multiple Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
GQ File Manager 0.2.5 – Multiple Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Piwigo 2.7.2 – Multiple Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
ProjectSend r561 – Multiple Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
MiniBB 3.1 – Blind SQL Injection
# Exploit Title: miniBB 3.1 Blind SQL Injection
CMS Papoo 6.0.0 Rev. 4701 – Persistent Cross-Site Scripting
Advisory: Persistent XSS Vulnerability in CMS Papoo Light v6
WordPress Plugin WP Symposium 14.11 – Arbitrary File Upload
#!/usr/bin/python
ResourceSpace 6.4.5976 – Cross-Site Scripting / SQL Injection / Insecure Cookie Handling
Title: ResourceSpace Multiple Cross Site Scripting, and HTML and SQL
phpMyAdmin 4.0.x/4.1.x/4.2.x – Denial of Service
=============
PHPads 213607 – Authentication Bypass / Password Change
PHPads Authentication Bypass Exploit
WordPress Plugin Download Manager 2.7.4 – Remote Code Execution
#!/usr/bin/python
GLPI 0.85 – Blind SQL Injection
# Exploit Title: GLPI 0.85 Blind SQL Injection