php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

WordPress Theme Colormix – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/59371/info

2013-04-21 MustLive webapps

Crafty Syntax Live Help 3.1.2 – Remote File Inclusion / Full Path Disclosure

source: https://www.securityfocus.com/bid/59322/info

2013-04-19 ITTIHACK webapps

Fork CMS – ‘js.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/59298/info

2013-04-18 Rafay Baloch webapps

KrisonAV CMS 3.0.1 – Multiple Vulnerabilities

Advisory ID: HTB23150

2013-04-18 High-Tech Bridge SA webapps

Sosci Survey – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/59278/info

2013-04-17 T. Lazauninkas webapps

ZPanel – ‘templateparser.class.php’ Crafted Template Remote Command Execution

Hi all,

2013-04-16 Sven Slootweg webapps

phpVms Virtual Airline Administration 2.1.934/2.1.935 – SQL Injection

=============================================================================================================

2013-04-15 NoGe webapps

CMSLogik 1.2.1 – Multiple Vulnerabilities

#!/usr/bin/python

2013-04-15 LiquidWorm webapps

Vanilla Forums Van2Shout Plugin 1.0.51 – Multiple Cross-Site Request Forgery Vulnerabilities

# Exploit Title:

2013-04-15 Henry Hoggard webapps

Todoo Forum 2.0 – ‘todooforum.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/59069/info

2013-04-14 Chiekh Bouchenafa webapps

Todoo Forum 2.0 – ‘todooforum.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/59069/info

2013-04-14 Chiekh Bouchenafa webapps

Simple HRM System 2.3 – Multiple Vulnerabilities

# Exploit Title: Multiple Vulnerabilities in Simple HRM system v2.3 and

2013-04-12 Doraemon webapps

Free Monthly Websites 2.0 – Admin Password Change

==========================================================================================

2013-04-12 Yassin Aboukir webapps

Request Tracker – ‘ShowPending’ SQL Injection

source: https://www.securityfocus.com/bid/59022/info

2013-04-11 cheki webapps

WordPress Plugin Spider Video Player – ‘theme’ SQL Injection

source: https://www.securityfocus.com/bid/59021/info

2013-04-11 Ashiyane Digital Security Team webapps

WordPress Plugin Spiffy XSPF Player – ‘playlist_id’ SQL Injection

source: https://www.securityfocus.com/bid/58976/info

2013-04-10 Ashiyane Digital Security Team webapps

phpMyAdmin – ‘tbl_gis_visualization.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58962/info

2013-04-09 waraxe webapps

WordPress Plugin Traffic Analyzer – ‘aoid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58948/info

2013-04-09 Beni_Vanda webapps

EasyPHP – ‘/index.php’ Authentication Bypass / Remote PHP Code Injection

source: https://www.securityfocus.com/bid/58945/info

2013-04-09 KedAns-Dz webapps

ZAPms 1.41 – SQL Injection

=============================================================================================================

2013-04-09 NoGe webapps

WHMCompleteSolution (WHMCS) Group Pay Plugin 1.5 – ‘grouppay.php?hash’ SQL Injection

#######################################################################

2013-04-08 HJauditing Employee Tim webapps

Vanilla Forums 2-0-18-4 – SQL Injection

# Exploit Title: Vanilla Forums - SQL-Injection - Insert arbitrary user & dump usertable

2013-04-08 bl4ckw0rm webapps

OpenCart – Cross-Site Request Forgery (Change User Password)

# Exploit Title : OpenCart CSRF

2013-04-08 Saadi Siddiqui webapps

Zimbra – ‘aspell.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58913/info

2013-04-05 Michael Scherer webapps