php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

WordPress Theme Think Responsive 1.0 – Arbitrary File Upload

###################################################################################################

2013-11-01 Byakuya Kouta webapps

ImpressPages CMS 3.6 – ‘manage()’ Remote Code Execution

#!/usr/bin/python

2013-11-01 LiquidWorm webapps

WordPress Theme Switchblade 1.3 – Arbitrary File Upload

###################################################################################################

2013-11-01 Byakuya Kouta webapps

ImpressPages CMS 3.6 – Arbitrary File Deletion

ImpressPages CMS v3.6 Remote Arbitrary File Deletion Vulnerability

2013-11-01 LiquidWorm webapps

Opsview pre 4.4.1 – Blind SQL Injection

CVE-2013-5694 Blind SQL Injection in Ops View

2013-10-31 J. Oquendo webapps

ProcessMaker Open Source – (Authenticated) PHP Code Execution (Metasploit)

##

2013-10-31 Metasploit remote

ISPConfig – (Authenticated) Arbitrary PHP Code Execution (Metasploit)

##

2013-10-31 Metasploit remote

NAS4Free – Remote Code Execution (Metasploit)

##

2013-10-31 Metasploit remote

ImpressPages CMS 3.6 – Multiple Cross-Site Scripting / SQL Injection Vulnerabilities

ImpressPages CMS v3.6 Multiple XSS/SQLi Vulnerabilities

2013-10-31 LiquidWorm webapps

vTiger CRM 5.3.0 5.4.0 – (Authenticated) Remote Code Execution (Metasploit)

##

2013-10-31 Metasploit remote

Apache + PHP < 5.3.12 / < 5.4.2 - Remote Code Execution + Scanner

#!/usr/bin/env python

2013-10-31 noptrix remote

Apache + PHP < 5.3.12 / < 5.4.2 - cgi-bin Remote Code Execution

On Debian and Ubuntu the vulnerability is present in the default install

2013-10-29 kingcope remote

GTX CMS 2013 Optima – SQL Injection

Document Title:

2013-10-29 Vulnerability-Lab webapps

Olat CMS 7.8.0.1 – Persistent Cross-Site Scripting

Document Title:

2013-10-29 Vulnerability-Lab webapps

Horde Groupware Web Mail Edition 5.1.2 – Cross-Site Request Forgery (1)

#############################

2013-10-29 Marcela Benetrix webapps

ILIAS eLearning CMS 4.3.4 < 4.4 - Persistent Cross-Site Scripting

Document Title:

2013-10-29 Vulnerability-Lab webapps

Onpub CMS 1.4/1.5 – Multiple SQL Injections

Document Title:

2013-10-28 Vulnerability-Lab webapps

PHP RSS Reader 2010 – SQL Injection

# Exploit Title: [PHP RSS READER 2010 SQLI]

2013-10-28 mishal abdullah webapps

WordPress Theme Curvo – Cross-Site Request Forgery / Arbitrary File Upload

###################################################################################################

2013-10-26 Byakuya Kouta webapps

Open Flash Chart 2 – Arbitrary File Upload (Metasploit)

##

2013-10-26 Metasploit remote

WordPress Theme SAICO 1.0 < 1.0.2 - Arbitrary File Upload

###################################################################################################

2013-10-24 Byakuya Kouta webapps

WordPress Theme Daily Deal – Arbitrary File Upload

source: https://www.securityfocus.com/bid/63257/info

2013-10-23 DevilScreaM webapps

Course Registration Management System – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/63435/info

2013-10-21 Omar Kurt webapps

Joomla! Component Maian15 – ‘name’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/63287/info

2013-10-20 SultanHaikal webapps

ZonPHP 2.25 – Remote Code Execution

# Exploit Title: ZonPHP V2.25 RCE Vulnerability

2013-10-20 Halim Cruzito webapps

WHMCompleteSolution (WHMCS) 5.2.8 – SQL Injection

# Exploit Title: WHMCS 5.2.8 SQL Injection

2013-10-19 g00n webapps

WordPress Theme Area53 – Arbitrary File Upload

###################################################################################################

2013-10-19 Byakuya Kouta webapps

PHP Point Of Sale – ‘ofc_upload_image.php’ Remote Code Execution

source: https://www.securityfocus.com/bid/63219/info

2013-10-18 Gabby remote

Woltlab Burning Board Regenbogenwiese 2007 Addon – SQL Injection

# Exploit Title: Woltlab Burning Board Regenbogenwiese 2007 Addon SQL Injection Exploit

2013-10-17 Easy Laster webapps

WordPress Plugin Realty – Blind SQL Injection

$$$$$$\ $$\ $$\ $$$$$$\

2013-10-17 Napsterakos webapps

Zikula CMS 1.3.5 – Multiple Vulnerabilities

Document Title:

2013-10-17 Vulnerability-Lab webapps

WordPress Plugin Quick Paypal Payments 3.0 – Presistant Cross-Site Scripting

TITLE

2013-10-17 Zy0d0x webapps

WebTester 5.x – Multiple Vulnerabilities

==========================================================================================

2013-10-16 X-Cisadane webapps

Dolibarr ERP/CRM 3.4.0 – ‘exportcsv.php?sondage’ SQL Injection

# Exploit Title: Dolibarr 3.4.0 SQLi

2013-10-15 drone webapps

WordPress Plugin Dexs PM System – (Authenticated) Persistent Cross-Site Scripting

===============================================================================

2013-10-15 TheXero webapps

aMSN 0.98.9 Web App – Multiple Vulnerabilities

# Exploit Title: aMSN LFI/SQLi

2013-10-14 drone webapps

WordPress Plugin Cart66 1.5.1.14 – Multiple Vulnerabilities

# Exploit Title: Wordpress Cart66 Plugin 1.5.1.14 Multiple Vulnerabilities

2013-10-14 absane webapps

StatusNet/Laconica 0.7.4/0.8.2/0.9.0beta3 – Arbitrary File Reading

+-------------------------------------------------------------------------------+

2013-10-14 spiderboy webapps

vBulletin 4.1.x – ‘/install/upgrade.php’ Security Bypass

source: https://www.securityfocus.com/bid/62909/info

2013-10-13 Joshua Rogers webapps

Bilboplanet – ‘auth.php’ SQL Injection

source: https://www.securityfocus.com/bid/62989/info

2013-10-11 Omar Kurt webapps

Ziteman CMS – Login Page SQL Injection

source: https://www.securityfocus.com/bid/62949/info

2013-10-10 Ashiyane Digital Security Team webapps

WordPress Plugin WP-Realty – ‘listing_id’ SQL Injection

source: https://www.securityfocus.com/bid/63217/info

2013-10-08 Napsterakos webapps

Alienvault Open Source SIEM (OSSIM) – ‘Timestamp’ Directory Traversal

source: https://www.securityfocus.com/bid/62899/info

2013-10-08 Ding Yu-Chi webapps

WordPress Plugin Quick Contact Form 6.0 – Persistent Cross-Site Scripting

===============================================================================

2013-10-08 Zy0d0x webapps

WHMCompleteSolution (WHMCS) 5.2.7 – SQL Injection

#!/usr/bin/env python

2013-10-08 localhost.re webapps

WordPress Plugin Woopra Analytics – ‘ofc_upload_image.php’ Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/62876/info

2013-10-07 wantexz webapps

Aanval 7.1 build 70151 – Multiple Vulnerabilities

-----------

2013-10-04 xistence webapps

Apache Tomcat/JBoss EJBInvokerServlet / JMXInvokerServlet (RMI over HTTP) Marshalled Object – Remote Code Execution

2013-10-04 rgod remote

CMS Formulasi 2.07 – Multiple Vulnerabilities

###################################################################################################################

2013-10-04 Sarahma Security webapps

FlashChat 6.0.2 < 6.0.8 - Arbitrary File Upload

#######################################################

2013-10-04 x-hayben21 webapps