php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

PlaySms 0.9.9.2 – Cross-Site Request Forgery

# Exploit Title : PlaySMS

2013-12-10 Saadi Siddiqui webapps

osCMax – Arbitrary File Upload / Full Path Information Disclosure

source: https://www.securityfocus.com/bid/64307/info

2013-12-09 KedAns-Dz webapps

WordPress Plugin PhotoSmash Galleries – ‘bwbps-uploader.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/64173/info

2013-12-08 Ashiyane Digital Security Team webapps

Ovidentia 7.9.6 – Multiple Vulnerabilities

###########################################################

2013-12-08 sajith webapps

WordPress Plugin Download Manager Free & Pro 2.5.8 – Persistent Cross-Site Scripting

# Exploit Title: Wordpress Plugin: Wordpress Download Manager Free & Pro

2013-12-08 Jeroen - IT Nerdbox webapps

WordPress Plugin Easy Career Openings – ‘jobid’ SQL Injection

source: https://www.securityfocus.com/bid/64167/info

2013-12-06 Iranian_Dark_Coders_Team webapps

NeoBill 0.9-alpha – ‘language’ Local File Inclusion

source: https://www.securityfocus.com/bid/64112/info

2013-12-06 KedAns-Dz webapps

NeoBill – ‘/install/include/solidstate.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/64112/info

2013-12-06 KedAns-Dz webapps

NeoBill – ‘/modules/nullregistrar/PHPwhois/example.php?query’ Remote Code Execution

source: https://www.securityfocus.com/bid/64112/info

2013-12-06 KedAns-Dz webapps

Enorth Webpublisher CMS – ‘thisday’ SQL Injection

source: https://www.securityfocus.com/bid/64110/info

2013-12-06 xin.wang webapps

WordPress Plugin page-flip-image-gallery – Arbitrary File Upload

###############################################################

2013-12-06 Ashiyane Digital Security Team webapps

BoxBilling 3.6.11 – ‘mod_notification’ Persistent Cross-Site Scripting

BoxBilling 3.6.11 (mod_notification) Stored Cross-Site Scripting Vulnerability

2013-12-06 LiquidWorm webapps

WordPress Plugin DZS Video Gallery 3.1.3 – Remote File Disclosure / Local File Disclosure

# Exploit Title: WordPress DZS Video Gallery (dzs-videogallery) 3.1.3 Plugins Remote and Local File Disclosure Vulner...

2013-12-06 aceeeeeeeer . webapps

Eaton Network Shutdown Module 3.21 – Remote PHP Code Injection

#!/usr/bin/env python

2013-12-06 Filip Waeytens webapps

Dokeos 2.2 RC2 – ‘index.php?language’ SQL Injection

Advisory ID: HTB23181

2013-12-03 High-Tech Bridge SA webapps

Chamilo Lms 1.9.6 – ‘profile.php?password’ SQL Injection

Advisory ID: HTB23182

2013-12-03 High-Tech Bridge SA webapps

Kimai 0.9.2 – ‘db_restore.php’ SQL Injection (Metasploit)

##

2013-12-03 Metasploit remote

WordPress Plugin Formcraft – SQL Injection

#######################################################################

2013-12-02 Ashiyane Digital Security Team webapps

PHPThumb – ‘PHPThumb.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/64041/info

2013-12-01 DevilScreaM webapps

Multiple WordPress Orange Themes – Cross-Site Request Forgery (Arbitrary File Upload)

#Title : Wordpress Orange Themes CSRF File Upload Vulnerability

2013-12-01 Jje Incovers webapps

MyBB 1.6.11 – Remote Code Execution

2013-11-30 BlackDream webapps

Zend-Framework – Full Information Disclosure

# Exploit Title : Zend-Framework Full Info Disclosure

2013-11-30 Ariel Orellana webapps

FlashComs Chat 6.5 – Arbitrary File Upload

2013-11-30 Miya Chung webapps

Palo Alto Networks Pan-OS 5.0.8 – Multiple Vulnerabilities

from http://thomaspollet.blogspot.be/2013/11/Palo-Alto-XSS.html

2013-11-27 Thomas Pollet webapps

WordPress Plugin dzs-videogallery – Arbitrary File Upload

###################################################################################################

2013-11-26 link_satisi webapps

MyBB Ajaxfs 2 Plugin – SQL Injection

###########################

2013-11-24 IeDb ir webapps

WordPress Plugin Blue Wrench Video Widget – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/63800/info

2013-11-23 Haider Mahmood webapps

ImpressPages CMS 3.8 – Persistent Cross-Site Scripting

###########################################################

2013-11-23 sajith webapps

LimeSurvey 2.00+ (build 131107) – Multiple Vulnerabilities

LimeSurvey v2.00+ (build 131107) Script Insertion And SQL Injection Vulnerability

2013-11-23 LiquidWorm webapps

WordPress Theme Suco – ‘themify-ajax.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/63836/info

2013-11-20 DevilScreaM webapps

PHP-Nuke 8.2.4 – Multiple Vulnerabilities

[SOJOBO-ADV-13-04] - PHP-Nuke 8.2.4 multiple vulnerabilities

2013-11-20 Sojobo dev team webapps

TomatoCart 1.1.8.2 – ‘class’ Local File Inclusion

source: https://www.securityfocus.com/bid/63795/info

2013-11-18 Esac webapps

LiveZilla 5.0.1.4 – Remote Code Execution

CVE-2013-6225: Security Advisory – Curesec Research Team

2013-11-18 Curesec Research Team webapps

WordPress Theme Make A Statement (MaS) – Cross-Site Request Forgery

#Title : Wordpress Make A Statement Themes CSRF File Upload Vulnerability

2013-11-18 DevilScreaM webapps

WordPress Theme Amplus – Cross-Site Request Forgery

#Title : Wordpress Amplus Themes CSRF File Upload Vulnerability

2013-11-18 DevilScreaM webapps

WordPress Theme Dimension – Cross-Site Request Forgery

#Title : Wordpress Dimension Themes CSRF File Upload Vulnerability

2013-11-18 DevilScreaM webapps

WordPress Theme Euclid 1.x – Cross-Site Request Forgery

#Title : Wordpress Euclid V1 Themes CSRF File Upload Vulnerability

2013-11-18 DevilScreaM webapps

Limonade Framework – ‘limonade.php’ Local File Disclosure

source: https://www.securityfocus.com/bid/63771/info

2013-11-17 Yashar shahinzadeh webapps

Testa OTMS – Multiple SQL Injections

source: https://www.securityfocus.com/bid/63773/info

2013-11-13 Ashiyane Digital Security Team webapps

Juniper Junos J-Web – Privilege Escalation

Sense of Security - Security Advisory - SOS-13-003 security advisory

2013-11-12 Sense of Security webapps

WordPress Theme Highlight Premium – Cross-Site Request Forgery / Arbitrary File Upload

#Title : Wordpress Highlight Premium Themes CSRF File Upload Vulnerability

2013-11-10 DevilScreaM webapps

Horde Groupware Web Mail Edition 5.1.2 – Cross-Site Request Forgery (2)

#############################

2013-11-08 Marcela Benetrix webapps

Project’Or RIA 3.4.0 – ‘objectDetail.php?objectId’ SQL Injection

=============================================

2013-11-08 Vicente Aguilera Diaz webapps

appRain 3.0.2 – Blind SQL Injection

Advisory ID: HTB23177

2013-11-08 High-Tech Bridge SA webapps

Flatpress 1.0 – Remote Code Execution

#!/usr/bin/perl

2013-11-08 Wireghoul webapps

Vanilla Forums 2.0 < 2.0.18.5 - 'class.utilitycontroller.php' PHP Object Injection

-------------------------------------------------------------------------------------------

2013-11-08 EgiX webapps

WordPress Theme Kernel – Arbitrary File Upload

###################################################################################################

2013-11-07 link_satisi webapps

Microweber 0.905 – Error-Based SQL Injection

===============================================================================

2013-11-07 Zy0d0x webapps

WordPress Theme This Way – ‘upload_settings_image.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/63523/info

2013-11-01 Bet0 webapps

pdirl PHP Directory Listing 1.0.4 – Cross-Site Scripting

Document Title:

2013-11-01 Vulnerability-Lab webapps