php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

WordPress Plugin All In One WP Security 3.8.2 – SQL Injection

Advisory ID: HTB23231

2014-09-25 High-Tech Bridge SA webapps

Cart Engine 3.0 – Multiple Vulnerabilities

=== Details ===

2014-09-25 Quantum Leap webapps

OSClass 3.4.1 – ‘index.php’ Local File Inclusion

Information

2014-09-25 Netsparker webapps

WordPress Plugin Login Widget With ShortCode 3.1.1 – Multiple Vulnerabilities

Details

2014-09-25 dxw webapps

webEdition 6.3.8.0 (SVN-Revision: 6985) – Directory Traversal

Advisory ID: HTB23227

2014-09-24 High-Tech Bridge SA webapps

Restaurant Script (PizzaInn Project) – Persistent Cross-Site Scripting

Title: Pizza Inn Registration Stored XSS

2014-09-24 Kenneth F. Belva webapps

Glype 1.4.9 – Local Address Filter Bypass

------------------------------------------------------------------------

2014-09-24 Securify webapps

Glype 1.4.9 – Cookie Injection Directory Traversal Local File Inclusion

------------------------------------------------------------------------

2014-09-24 Securify webapps

Joomla! Component com_macgallery 1.5 – Arbitrary File Download

######################

2014-09-24 Claudio Viviani webapps

Joomla! Component com_facegallery 1.0 – Multiple Vulnerabilities

######################

2014-09-24 Claudio Viviani webapps

LittleSite 0.1 – ‘index.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/43495/info

2014-09-23 Eolas_Gadai webapps

ClassApps SelectSurvey.net – Multiple SQL Injections

##########

2014-09-20 BillV-Lists webapps

Livefyre LiveComments Plugin – Persistent Cross-Site Scripting

Title : Stored XSS in Livefyre LiveComments Plugin

2014-09-20 Brij Kishore Mishra webapps

vBulletin 4.x Verify Email Before Registration Plugin – SQL Injection

#Title: vBulletin Verify Email Before Registration Plugin - SQL Injection

2014-09-20 Dave webapps

M/Monit 3.3.2 – Cross-Site Request Forgery

Vulnerability title: M/Monit CSRF Author: Dolev Farhi Contact: dolevf at

2014-09-20 Dolev Farhi webapps

WordPress Plugin Slideshow Gallery 1.4.6 – Arbitrary File Upload

#!/usr/bin/env python

2014-09-16 Claudio Viviani webapps

ALCASAR 2.8.1 – Remote Code Execution

#!/usr/bin/env python

2014-09-15 eF webapps

WordPress Plugin Wordfence Security – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/69815/info

2014-09-14 Voxel@Night webapps

Food Order Portal – ‘admin_user_delete.php’ Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/69787/info

2014-09-12 KnocKout webapps

Joomla! Component com_formmaker 3.4 – SQL Injection

######################

2014-09-12 Claudio Viviani webapps

Joomla! Component Spider Contacts 1.3.6 – ‘contacts_id’ SQL Injection

#!/usr/bin/env python

2014-09-11 Claudio Viviani webapps

OroCRM – Persistent Cross-Site Scripting

# Affected software: OroCRM is an easy-to-use, open source CRM with built in marketing automation tools for your comm...

2014-09-11 Provensec webapps

Parallels Plesk Sitebuilder 9.5 – Multiple Vulnerabilities

#+++++++++++++++++++++++++++++++++++++++++++++++++++++++++

2014-09-09 alieye webapps

WordPress Plugin WP Support Plus Responsive Ticket System 2.0 – Multiple Vulnerabilities

# Exploit Title: Wordpress WP Support Plus Responsive Ticket System 2.0

2014-09-09 Fikri Fadzil webapps

WordPress Plugin W3 Total Cache – ‘admin.php’ Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/69745/info

2014-09-08 Voxel@Night webapps

WordPress Plugin Xhanch My Twitter – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/69744/info

2014-09-08 Voxel@Night webapps

WordPress Plugin WP to Twitter – Authentication Bypass

source: https://www.securityfocus.com/bid/69741/info

2014-09-08 Voxel@Night webapps

WordPress Plugin Ninja Forms 2.7.7 – Authentication Bypass

source: https://www.securityfocus.com/bid/69740/info

2014-09-08 Voxel@Night webapps

WordPress Theme Antioch – ‘download.php’ Arbitrary File Download

source: https://www.securityfocus.com/bid/69673/info

2014-09-08 Ashiyane Digital Security Team webapps

WordPress Theme Epic – ‘download.php’ Arbitrary File Download

source: https://www.securityfocus.com/bid/69672/info

2014-09-08 Ashiyane Digital Security Team webapps

WordPress Theme Authentic – ‘download.php’ Arbitrary File Download

source: https://www.securityfocus.com/bid/69671/info

2014-09-08 Ashiyane Digital Security Team webapps

WordPress Theme Urban City – ‘download.php’ Arbitrary File Download

source: https://www.securityfocus.com/bid/69670/info

2014-09-08 Ashiyane Digital Security Team webapps

Mpay24 PrestaShop Payment Module 1.5 – Multiple Vulnerabilities

Mpay24 PrestaShop Payment Module Multiple Vulnerabilities

2014-09-08 Wireghoul webapps

Atmail Webmail 7.2 – Multiple Vulnerabilities

#Title: Atmail Webmail =>7.2 - Multiple XSS & FPD

2014-09-08 smash webapps

osCommerce 2.3.4 – Multiple Vulnerabilities

#Title: osCommerce 2.3.4 - Multiple vulnerabilities

2014-09-08 smash webapps

Zen Cart 1.5.3 – Multiple Vulnerabilities

#Title: Zen Cart 1.5.3 - CSRF & Admin Panel XSS

2014-09-08 smash webapps

phpMyFAQ 2.8.x – Multiple Vulnerabilities

#Title: phpMyFAQ 2.8.X - Multiple Vulnerabilities

2014-09-08 smash webapps

vBulletin 5.1.x – Persistent Cross-Site Scripting

#Title: vBulletin 5.1.X - Cross Site Scripting

2014-09-08 smash webapps

WordPress Plugin Bulk Delete Users by Email 1.0 – Cross-Site Request Forgery

# Exploit Title: Bulk Delete Users by Email, Wordpress Plugin 1.0 - CSRF

2014-09-08 Fikri Fadzil webapps

WordPress Theme Acento – ‘view-pdf.php?File’ Arbitrary File Download

#+++++++++++++++++++++++++++++++++++++++++++++++++++++++++

2014-09-08 alieye webapps

Joomla! Component Spider Calendar 3.2.6 – SQL Injection

#!/usr/bin/env python

2014-09-08 Claudio Viviani webapps

WordPress Plugin Spider Facebook – ‘facebook.php’ SQL Injection

source: https://www.securityfocus.com/bid/69675/info

2014-09-07 Claudio Viviani webapps

PhpOnlineChat 3.0 – Cross-Site Scripting

# Exploit Title: [phponlinechat xss ]

2014-09-07 N0 Feel webapps

WordPress Plugin Like Dislike Counter 1.2.3 – SQL Injection

#################################################################################################

2014-09-07 Att4ck3r.ir webapps

LoadedCommerce7 – Systemic Query Factory

Title: LoadedCommerce7 Systemic Query Factory Vulnerability

2014-09-07 Breaking.Technology webapps

Invision Power Board (IP.Board) 3.x – Cross-Site Request Forgery / Token Hjiacking

#Title: IP Board 3.x CSRF - Token hjiacking

2014-09-07 Piotr S. webapps

MyBB User Social Networks Plugin 1.2 – Persistent Cross-Site Scripting

# Exploit Title: User Social Networks MyBB Plugin 1.2 - Cross Site Scripting

2014-09-05 Fikri Fadzil webapps

WordPress Plugin Premium Gallery Manager – Configuration Access

#Exploit Title : Wordpress Plugins Premium Gallery Manager Unauthenticated Configuration Access Vulnerability

2014-09-05 Hannaichi webapps

vBulletin 4.0.x < 4.1.2 - 'search.php?cat' SQL Injection

# vBulletin 4.0.x => 4.1.2 AUTOMATIC SQL Injection exploit

2014-09-03 D35m0nd142 webapps

WordPress Plugin Huge-IT Image Gallery 1.0.1 – (Authenticated) SQL Injection

######################

2014-09-02 Claudio Viviani webapps