php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

FluxBB 1.5.3 – Multiple Vulnerabilities

FluxBB 1.5.3 Multiple Remote Vulnerabilities

2013-07-29 LiquidWorm webapps

Symantec Web Gateway 5.1.0.x – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20130726-0 >

2013-07-27 SEC Consult webapps

Basic Forum by JM LLC – Multiple Vulnerabilities

Dear Offensive Security,

2013-07-27 Sp3ctrecore webapps

Windu CMS 2.2 – Multiple Vulnerabilities

Windu CMS 2.2 CSRF Add Admin Exploit

2013-07-27 LiquidWorm webapps

Easy Blog by JM LLC – Multiple Vulnerabilities

Dear Offensive Security,

2013-07-27 Sp3ctrecore webapps

Alienvault Open Source SIEM (OSSIM) – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61456/info

2013-07-25 xistence webapps

vBulletin 4.0.2 – ‘update_order’ SQL Injection

source: https://www.securityfocus.com/bid/61449/info

2013-07-24 n3tw0rk webapps

WordPress Plugin Duplicator – Cross-Site Scripting

source: https://www.securityfocus.com/bid/61425/info

2013-07-24 High-Tech Bridge webapps

Magnolia CMS – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61423/info

2013-07-24 High-Tech Bridge webapps

Dell Kace 1000 SMA 5.4.742 – SQL Injection

Title:

2013-07-23 Vulnerability-Lab webapps

WordPress Plugin FlagEm – ‘cID’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/61401/info

2013-07-22 IeDb ir webapps

Collabtive – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/61384/info

2013-07-22 Enrico Cinquini webapps

MLM (Multi Level Marketing) Script – Multiple Vulnerabilities

##################################################################################

2013-07-22 3spi0n webapps

Anchor CMS 0.9.1 – Persistent Cross-Site Scripting

# Exploit Title : AnchorCMS Stored XSS exploit v0.9.1

2013-07-18 DURAKIBOX webapps

Xibo 1.2.2/1.4.1 – ‘index.php?p’ Directory Traversal

Exploit Title: Xibo Directory Traversal Vulnerability

2013-07-18 Mahendra webapps

MCImageManager – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/61825/info

2013-07-16 MustLive webapps

Dell Kace 1000 SMA 5.4.70402 – Persistent Cross-Site Scripting

Title:

2013-07-16 Vulnerability-Lab webapps

Saurus CMS 4.7.1 – Multiple Vulnerabilities

[waraxe-2013-SA#106] - Multiple Vulnerabilities in Saurus CMS 4.7.1

2013-07-16 waraxe webapps

WordPress Plugin Spicy Blogroll – Local File Inclusion

2013-07-13 Ahlspiess webapps

OpenEMR 4.1 – ‘note’ HTML Injection

source: https://www.securityfocus.com/bid/61154/info

2013-07-12 Nate Drier webapps

WordPress Plugin Pie Register – ‘wp-login.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61140/info

2013-07-12 gravitylover webapps

S9Y Serendipity 1.6.2 – ‘serendipity_admin_image_selector.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/61138/info

2013-07-12 Omar Kurt webapps

PrestaShop – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/61158/info

2013-07-11 EntPro Cyber Security Research Group webapps

WordPress Plugin miniBB – SQL Injection / Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61116/info

2013-07-11 Netsparker webapps

Mintboard – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61114/info

2013-07-10 Canberk BOLAT webapps

iVote – ‘details.php’ SQL Injection

source: https://www.securityfocus.com/bid/61086/info

2013-07-10 Ashiyane Digital Security Team webapps

vBulletin vBShout Mod – Persistent Cross-Site Scripting

##########################################################################################

2013-07-10 []0iZy5 webapps

vBulletin Advanced User Tagging Mod – Persistent Cross-Site Scripting

##########################################################################################

2013-07-10 []0iZy5 webapps

OpenNetAdmin 13.03.01 – Remote Code Execution

# Exploit Title: OpenNetAdmin Remote Code Execution

2013-07-07 Mandat0ry webapps

phpVibe 3.1 – Information Disclosure / Remote File Inclusion

source: https://www.securityfocus.com/bid/61026/info

2013-07-06 indoushka webapps

OpenX 2.8.10 – Multiple Vulnerabilities

Advisory ID: HTB23155

2013-07-05 High-Tech Bridge SA webapps

Kasseler CMS 2 r1223 – Multiple Vulnerabilities

Advisory ID: HTB23158

2013-07-05 High-Tech Bridge SA webapps

InstantCMS 1.6 – PHP Remote Code Execution (Metasploit)

require 'msf/core'

2013-07-05 Metasploit remote

WordPress Plugin Category Grid View Gallery – ‘ID’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/60905/info

2013-07-02 Iranian Exploit DataBase webapps

WordPress Plugin WP Feed – ‘nid’ SQL Injection

source: https://www.securityfocus.com/bid/60904/info

2013-07-02 Iranian Exploit DataBase webapps

Machform Form Maker 2 – Multiple Vulnerabilities

###########################################################################################

2013-07-02 Yashar shahinzadeh webapps

GLPI 0.83.9 – ‘Unserialize()’ Remote Code Execution

source: https://www.securityfocus.com/bid/60823/info

2013-07-01 Xavier Mehrenberger webapps

C.P.Sub 4.5 – Authentication Bypass

#!/usr/bin/python

2013-07-01 Chako webapps

WordPress Plugin Xorbin Digital Flash Clock – ‘widgetUrl’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/60862/info

2013-06-30 Prakhar Prasad webapps

WordPress Plugin Xorbin Analog Flash Clock – ‘widgetUrl’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/60860/info

2013-06-30 Prakhar Prasad webapps

Atomy Maxsite – ‘index.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/60859/info

2013-06-30 Iranian_Dark_Coders_Team webapps

WordPress Plugin WP Private Messages – ‘msgid’ SQL Injection

source: https://www.securityfocus.com/bid/60854/info

2013-06-29 IeDb ir webapps

Nameko – ‘nameko.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/60853/info

2013-06-29 Andrea Menin webapps

Xaraya – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/60795/info

2013-06-26 High-Tech Bridge webapps

PHP-Charts 1.0 – ‘index.php?type’ Remote Code Execution

#!/usr/bin/python

2013-06-26 infodox webapps

e107 Advanced Medal System Plugin – SQL Injection

# Exploit Title: Advanced Medal System SQL Injection

2013-06-26 Life Wasted webapps

Barnraiser Prairie – ‘get_file.php’ Directory Traversal

source: https://www.securityfocus.com/bid/60782/info

2013-06-25 prairie webapps

LibrettoCMS File Manager – Arbitrary File Upload (Metasploit)

##

2013-06-24 Metasploit remote

Elemata CMS RC3.0 – ‘global.php?id’ SQL Injection

# Exploit Title : Elemata CMS RC3.0 SQL Injection

2013-06-24 CWH Underground webapps

PodHawk 1.85 – Arbitrary File Upload

# Exploit Title : PodHawk Arbitary File Upload Vulnerability

2013-06-24 CWH Underground webapps