php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Dexter (CasinoLoader) – SQL Injection (Metasploit)

##

2014-02-16 Metasploit remote

Rhino – Cross-Site Scripting / Password Reset

source: https://www.securityfocus.com/bid/65628/info

2014-02-12 Slotleet webapps

MyBB 1.6.12 – ‘misc.php’ Remote Denial of Service

source: https://www.securityfocus.com/bid/65545/info

2014-02-12 Amir dos

phpBB 3.0.8 – Remote Denial of Service

source: https://www.securityfocus.com/bid/65481/info

2014-02-11 Amir dos

WordPress Plugin BuddyPress 1.9.1 – Privilege Escalation

# Exploit Title: Wordpress plugin Buddypress

2014-02-11 Pietro Oliva webapps

WordPress Plugin Frontend Upload – Arbitrary File Upload

# Exploit Title: Frontend Upload Wordpress Plugin - File Arbitrary Upload

2014-02-11 Daniel Godoy webapps

MyBB Extended Useradmininfo Plugin 1.2.1 – Cross-Site Scripting

# Exploit Title: Extended Useradmininfo MyBB Plugin 1.2.1 - Cross Site

2014-02-09 Fikri Fadzil webapps

WHMCompleteSolution (WHMCS) 5.12 – ‘cart.php’ Denial of Service

source: https://www.securityfocus.com/bid/65470/info

2014-02-07 Amir dos

AuraCMS 2.3 – Multiple Vulnerabilities

Advisory ID: HTB23196

2014-02-07 High-Tech Bridge SA webapps

doorGets CMS 5.2 – SQL Injection

Advisory ID: HTB23197

2014-02-07 High-Tech Bridge SA webapps

CTERA 3.2.29.0/3.2.42.0 – Persistent Cross-Site Scripting

# Exploit Title: [CTERA Project Folders - Stored XSS]

2014-02-07 Luigi Vezzoso webapps

S9Y Serendipity 1.7.5 – ‘Backend’ Multiple Vulnerabilities

Advisory: Serendipity 1.7.5 (Backend) - Multiple security vulnerabilities

2014-02-07 Stefan Schurtz webapps

osCommerce 2.3.3.4 – ‘geo_zones.php?zID’ SQL Injection

# Title: osCommerce v2.x SQL Injection Vulnerability

2014-02-07 Ahmed Aboul-Ela webapps

Joomla! 3.2.1 – SQL Injection

# Exploit Title: Joomla 3.2.1 sql injection

2014-02-06 killall-9 webapps

PHP Webcam Video Conference – Multiple Vulnerabilities

# Exploit: PHP Webcam Video Conference - LFI/XSS

2014-02-06 vinicius777 webapps

WordPress Theme Kiddo – Arbitrary File Upload

source: https://www.securityfocus.com/bid/65460/info

2014-02-05 TUNISIAN CYBER webapps

Singapore 0.9.9b Beta – Image Gallery Remote File Inclusion / Cross-Site Scripting

source: https://www.securityfocus.com/bid/65420/info

2014-02-05 TUNISIAN CYBER webapps

Pandora Fms 5.0RC1 – Remote Command Injection

-----------

2014-02-05 xistence webapps

Joomla! Component com_community 2.6 – Code Execution

#!/usr/bin/python

2014-02-05 Matias Fontanini webapps

ImpressCMS 1.3.5 – Multiple Vulnerabilities

I have discovered two vulnerabilities in ImpressCMS. These have been

2014-02-05 Pedro Ribeiro webapps

ownCloud 6.0.0a – Multiple Vulnerabilities

# Exploit Title: ownCloud 6.0.0a File Deletion XSS and CSRF Protection Bypass

2014-02-05 absane webapps

Plogger 1.0 (RC1) – Multiple Vulnerabilities

# Exploit Title: Multiply vulnerabilites in plogger 1.0 (RC1)

2014-02-05 killall-9 webapps

WordPress Theme Dandelion – Arbitrary File Upload

# Exploit Title: Wordpress Dandelion Themes Arbitry File Upload

2014-02-05 TheBlackMonster webapps

Booking Calendar – Multiple Vulnerabilities

Booking Calendar PHP - Multiple Vulnerabilties

2014-02-05 AtT4CKxT3rR0r1ST webapps

Eventy Online Scheduler 1.8 – Multiple Vulnerabilities

Eventy Online Scheduler V1.8 - Multiple Vulnerabilties

2014-02-05 AtT4CKxT3rR0r1ST webapps

TopicsViewer 3.0 Beta 1 – Multiple Vulnerabilities

TopicsViewer v3.0 Beta 1 - Multiple Sql Injection Vulnerabilty

2014-02-05 AtT4CKxT3rR0r1ST webapps

Job Site 1.0 – Multiple Vulnerabilities

Jobsite logo - Multiple Vulnerabilties

2014-02-05 AtT4CKxT3rR0r1ST webapps

CiMe Citas Médicas – Multiple Vulnerabilities

# Exploit Title: Control de Citas 1.4 (CIME) - Multiple Vulnerabilities

2014-02-03 vinicius777 webapps

Simple E-document – Arbitrary File Upload (Metasploit)

##

2014-01-29 Metasploit remote

pfSense 2.1 build 20130911-1816 – Directory Traversal

######################################################################

2014-01-29 @u0x webapps

ManageEngine Support Center Plus 7916 – Directory Traversal

-----------

2014-01-29 xistence webapps

LinPHA 1.3.4 – Multiple Vulnerabilities

# Exploit Title: linPHA 1.3.4 - Pemanent XSS and CSRF

2014-01-29 killall-9 webapps

Eventum 2.3.4 – ‘hostname’ Remote Code Execution

Advisory ID: HTB23198

2014-01-28 High-Tech Bridge webapps

Eventum – Insecure File Permissions

source: https://www.securityfocus.com/bid/65186/info

2014-01-27 High-Tech Bridge webapps

Maian Uploader 4.0 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/65137/info

2014-01-24 KedAns-Dz webapps

WordPress Plugin WP E-Commerce – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/65130/info

2014-01-24 KedAns-Dz webapps

ZenPhoto – SQL Injection

source: https://www.securityfocus.com/bid/65126/info

2014-01-24 KedAns-Dz webapps

XOS Shop – ‘goto’ SQL Injection

source: https://www.securityfocus.com/bid/65121/info

2014-01-24 JoKeR_StEx webapps

Skybluecanvas CMS 1.1 r248-03 – Remote Command Execution

Vulnerability in SkyBlueCanvas CMS

2014-01-24 Scott Parish webapps

Joomla! Component JV Comment 3.0.2 – ‘id’ SQL Injection

Advisory ID: HTB23195

2014-01-24 High-Tech Bridge SA webapps

Joomla! Component Komento 1.7.2 – Persistent Cross-Site Scripting

Advisory ID: HTB23194

2014-01-24 High-Tech Bridge SA webapps

pChart 2.1.3 – Multiple Vulnerabilities

# Exploit Title: pChart 2.1.3 Directory Traversal and Reflected XSS

2014-01-24 Balazs Makany webapps