php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

elproLOG MONITOR Webaccess 2.1 – Multiple Vulnerabilities

Title:

2013-10-04 Vulnerability-Lab webapps

SPAMINA Cloud Email Firewall – Directory Traversal

source: https://www.securityfocus.com/bid/64693/info

2013-10-03 Sisco Barrera webapps

WordPress Plugin SEO Watcher – ‘ofc_upload_image.php’ Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/62825/info

2013-10-03 wantexz webapps

Alienvault Open Source SIEM (OSSIM) 3.1 – ‘date_from’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/62790/info

2013-10-02 Yu-Chi Ding webapps

GLPI 0.84.1 – Multiple Vulnerabilities

Advisory ID: HTB23173

2013-10-02 High-Tech Bridge SA webapps

Gnew 2013.1 – Multiple Vulnerabilities (2)

Advisory ID: HTB23171

2013-10-02 High-Tech Bridge SA webapps

SimpleRisk 20130915-01 – Multiple Vulnerabilities

1. *Advisory Information*

2013-09-30 Ryan Dewhurst webapps

XAMPP 1.8.1 – ‘lang.php?WriteIntoLocalDisk method’ Local Write Access

=============================================

2013-09-30 Manuel García Cárdenas webapps

FreeSMS – ‘/pages/crc_handler.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/63004/info

2013-09-27 Sarahma Security webapps

FreeSMS – ‘/pages/crc_handler.php?scheduleid’ SQL Injection

source: https://www.securityfocus.com/bid/63004/info

2013-09-27 Sarahma Security webapps

ArticleSetup – Multiple Vulnerabilities

#Exploit Title : ArticleSetup Multiple Vulnerabilities

2013-09-26 DevilScreaM webapps

Piwigo 2.5.2 – Cross-Site Scripting

#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#

2013-09-26 Arsan webapps

X2CRM 3.4.1 – Multiple Vulnerabilities

Advisory ID: HTB23172

2013-09-25 High-Tech Bridge SA webapps

SilverStripe CMS – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/62782/info

2013-09-23 Benjamin Kunz Mejri webapps

WordPress Plugin NOSpamPTI – Blind SQL Injection

[ NOSpamPTI Wordpress plugin Blind SQL Injection ]

2013-09-23 Alexandro Silva webapps

GLPI – ‘install.php’ Remote Command Execution (Metasploit)

##

2013-09-23 Metasploit remote

WordPress Plugin Lazy SEO 1.1.9 – Arbitrary File Upload

#######################################################################

2013-09-22 Ashiyane Digital Security Team webapps

Joomla! Component JVideoClip 1.5.1 – ‘uid’ SQL Injection

source: https://www.securityfocus.com/bid/62610/info

2013-09-21 SixP4ck3r webapps

MentalJS – Sandbox Security Bypass

source: https://www.securityfocus.com/bid/62581/info

2013-09-20 Rafay Baloch webapps

Monstra CMS 1.2.0 – ‘login’ SQL Injection

source: https://www.securityfocus.com/bid/62572/info

2013-09-20 linc0ln.dll webapps

vTiger CRM 5.4.0 – ‘index.php?onlyforuser’ SQL Injection

Advisory ID: HTB23168

2013-09-20 High-Tech Bridge SA webapps

OpenEMR 4.1.1 Patch 14 – SQL Injection / Privilege Escalation / Remote Code Execution (Metasploit)

##

2013-09-20 xistence remote

Western Digital Arkeia < 10.0.10 - Remote Code Execution (Metasploit)

##

2013-09-20 xistence remote

WordPress Plugin RokMicroNews – ‘thumb.php’ Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/62513/info

2013-09-19 MustLive webapps

WordPress Plugin RokIntroScroller – ‘thumb.php’ Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/62493/info

2013-09-19 MustLive webapps

WordPress Plugin RokNewsPager – ‘thumb.php’ Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/62458/info

2013-09-18 MustLive webapps

WordPress Plugin Complete Gallery Manager 3.3.3 – Arbitrary File Upload

Title:

2013-09-18 Vulnerability-Lab webapps

WordPress Plugin RokStories – ‘thumb.php’ Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/62459/info

2013-09-17 MustLive webapps

Western Digital Arkeia Appliance 10.0.10 – Multiple Vulnerabilities

#####################################################################################################################...

2013-09-17 xistence webapps

OpenEMR 4.1.1 Patch 14 – Multiple Vulnerabilities

#####################################################################################################################...

2013-09-17 xistence webapps

WordPress Plugin mukioplayer4wp – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/62438/info

2013-09-13 Ashiyane Digital Security Team webapps

Zimplit CMS 3.0 – Multiple Vulnerabilities

#####################################################################################################################...

2013-09-13 Yashar shahinzadeh webapps

eTransfer Lite – ‘file name’ HTML Injection

source: https://www.securityfocus.com/bid/62313/info

2013-09-10 Benjamin Kunz Mejri webapps

AjaXplorer 1.0 – Multiple Vulnerabilities

Trustwave SpiderLabs Security Advisory TWSL2013-027:

2013-09-10 Trustwave's SpiderLabs webapps

glFusion 1.3.0 – ‘search.php?cat_id’ SQL Injection

Information

2013-09-10 Omar Kurt webapps

Zyxware Health Monitoring System – Multiple Vulnerabilities

# Exploit Title: Zyxware Health Monitoring System Multiple Vulnerability

2013-09-09 Sarahma Security webapps

Moodle 2.3.8/2.4.5 – Multiple Vulnerabilities

#######################################################################

2013-09-09 Ciaran McNally webapps

WordPress Plugin Event Easy Calendar – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/62269/info

2013-09-07 anonymous webapps

Practico CMS 13.7 – Authentication Bypass

############################################################

2013-09-06 shiZheni webapps

CMS Mini 0.2.2 – Multiple Vulnerabilities

------------------------------------------------------------------------------------------

2013-09-06 SANTHO webapps

Woltlab Burning Board FLVideo Addon – ‘video.php?value’ SQL Injection

# Exploit Title: Woltlab Burning Board FLVideo Addon SQL Injection flvideo.php Exploit

2013-09-06 Easy Laster webapps

dBlog CMS – ‘m’ SQL Injection

source: https://www.securityfocus.com/bid/62146/info

2013-09-03 ACC3SS webapps

WordPress Plugin IndiaNIC Testimonial – Multiple Vulnerabilities

Details

2013-09-03 RogueCoder webapps

appRain CMF – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/62061/info

2013-08-29 Yashar shahinzadeh webapps

SPIP – ‘connect’ PHP Injection (Metasploit)

##

2013-08-29 Metasploit remote

cm3 Acora CMS – ‘top.aspx’ Information Disclosure

source: https://www.securityfocus.com/bid/62010/info

2013-08-26 Pedro Andujar webapps

Joomla! Component com_virtuemart 2.0.22a – SQL Injection

------------------------------------------------------------

2013-08-26 Matias Fontanini webapps

MusicBox 2.3.8 – Multiple Vulnerabilities

#Exploit Title : Musicbox 2.3.8 Multiple Vulnerabilities

2013-08-26 DevilScreaM webapps

PhpVibe 3.1 – Multiple Vulnerabilities

###########################################################################################

2013-08-26 Esac webapps

mooSocial 1.3 – Multiple Vulnerabilities

###########################################################################################

2013-08-26 Esac webapps