php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

PsychoStats 3.2.2b – ‘awards.php’ Blind SQL Injection

Exploit Title : PsychoStats awards.php blind SQL Injection

2013-03-27 Mohamed from ALG webapps

WordPress Plugin Mathjax Latex 1.1 – Cross-Site Request Forgery

# Title: Wordpress Mathjax Latex 1.1 Cross-Site Request Forgery Vulnerability

2013-03-26 Junaid Hussain webapps

Atmail WebMail – ‘INBOX.Trash?mailId’ Reflected Cross-Site Scripting

source: https://www.securityfocus.com/bid/65408/info

2013-03-25 Vicente Aguilera Diaz webapps

Atmail WebMail – ‘searchResultsTab5?filter’ Reflected Cross-Site Scripting

source: https://www.securityfocus.com/bid/65408/info

2013-03-25 Vicente Aguilera Diaz webapps

Atmail WebMail – Message Attachment File Name Reflected Cross-Site Scripting

source: https://www.securityfocus.com/bid/65408/info

2013-03-25 Vicente Aguilera Diaz webapps

WordPress Plugin Banners Lite – ‘wpbanners_show.php’ HTML Injection

source: https://www.securityfocus.com/bid/58671/info

2013-03-25 Fernando A. Lagos B webapps

Ra1NX PHP Bot – pubcall Authentication Bypass Remote Code Execution (Metasploit)

# Exploit Title: "Ra1NX" PHP Bot pubcall Authentication Bypass Remote Code Execution

2013-03-25 bwall webapps

vBulletin 5.0.0 Beta 11 < 5.0.0 Beta 28 - SQL Injection

# Exploit Title: vBulletin 5 Beta XX SQLi 0day

2013-03-25 Orestis Kourides webapps

ClipShare 4.1.1 – ‘gid’ Blind SQL Injection

# Exploit Title: ClipShare 4.1.1 (gmembers.php) Blind SQL Injection Vulnerability

2013-03-25 Esac webapps

Free Hosting Manager 2.0.2 – Multiple SQL Injections

-------------------------------------------------------------------------

2013-03-25 Saadi Siddiqui webapps

Jaow CMS – ‘add_ons’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58658/info

2013-03-23 Metropolis webapps

OpenCart 1.5.5.1 – ‘FileManager.php’ Directory Traversal Arbitrary File Access

[waraxe-2013-SA#098] - Directory Traversal Vulnerabilities in OpenCart 1.5.5.1

2013-03-22 waraxe webapps

Stradus CMS 1.0beta4 – Multiple Vulnerabilities

##########################################

2013-03-22 DaOne webapps

Slash CMS – Multiple Vulnerabilities

##########################################

2013-03-22 DaOne webapps

Flatnux CMS 2013-01.17 – ‘index.php’ Local File Inclusion

##########################################

2013-03-22 DaOne webapps

AContent 1.3 – Local File Inclusion

##########################################

2013-03-22 DaOne webapps

WordPress Plugin IndiaNIC FAQs Manager 1.0 – Blind SQL Injection

# Exploit Title: WordPress IndiaNIC FAQ 1.0 Plugin Blind SQL Injection

2013-03-22 m3tamantra webapps

WordPress Plugin IndiaNIC FAQs Manager 1.0 – Multiple Vulnerabilities

#####################################################

2013-03-22 m3tamantra webapps

WordPress Plugin Occasions – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/58599/info

2013-03-19 m3tamantra webapps

ViewGit 0.0.6 – Multiple Cross-Site Scripting Vulnerabilities

Vulnerability Report

2013-03-19 Matthew R. Bucci webapps

Rebus:list – ‘list.php?list_id’ SQL Injection

# Exploit Title: Rebus:list SQL Injection Vulnerability

2013-03-19 Robert Cooper webapps

WordPress Plugin Count Per Day 3.2.5 – ‘counter.php’ Cross-Site Scripting

#!/usr/bin/ruby

2013-03-19 m3tamantra webapps

WordPress Plugin Occasions 1.0.4 – Cross-Site Request Forgery

CSRF Occasions

2013-03-19 m3tamantra webapps

Joomla! Component com_rsfiles – ‘cid’ SQL Injection

# Title : Joomla Component RSfiles

2013-03-18 ByEge webapps

WordPress Plugin Simply Poll 1.4.1 – Multiple Vulnerabilities

# Exploit Title: WordPress Simply Poll Plugin 1.4.1 CSRF and stored XSS

2013-03-18 m3tamantra webapps

DaloRadius – Multiple Vulnerabilities

-------------------------------------------------------------------------

2013-03-18 Saadi Siddiqui webapps

ClipShare 4.1.4 – Multiple Vulnerabilities

=====================================================================

2013-03-15 AkaStep webapps

WordPress Plugin LeagueManager 3.8 – SQL Injection

#!/usr/bin/ruby

2013-03-15 Joshua Reynolds webapps

Petite Annonce – Cross-Site Scripting

source: https://www.securityfocus.com/bid/58508/info

2013-03-14 Metropolis webapps

Web Cookbook – Multiple SQL Injections

# Exploit Title: Web Cookbook Multiple SQL Injection

2013-03-13 Saadat Ullah webapps

PHPBoost – Arbitrary File Upload / Information Disclosure

source: https://www.securityfocus.com/bid/58432/info

2013-03-11 KedAns-Dz webapps

KindEditor – Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/58431/info

2013-03-11 KedAns-Dz webapps

Privoxy Proxy – Authentication Information Disclosure

source: https://www.securityfocus.com/bid/58425/info

2013-03-11 Chris John Riley webapps

WordPress Plugin podPress – ‘playerID’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58421/info

2013-03-11 hiphop webapps

Asteriskguru Queue Statistics – ‘warning’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58418/info

2013-03-10 Manuel García Cárdenas webapps

SWFupload – Multiple Content Spoofing / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58417/info

2013-03-10 MustLive webapps

WordPress Plugin Terillion Reviews – Profile Id HTML Injection

source: https://www.securityfocus.com/bid/58415/info

2013-03-08 Aditya Balapure webapps

Your Own Classifieds – Cross-Site Scripting

source: https://www.securityfocus.com/bid/58399/info

2013-03-08 Rafay Baloch webapps

CosCMS 1.721 – OS Command Injection

Advisory ID: HTB23145

2013-03-07 High-Tech Bridge SA webapps

Qool CMS 2.0 RC2 – Multiple Vulnerabilities

Qool CMS v2.0 RC2 XSRF Add Root Exploit

2013-03-07 LiquidWorm webapps

WordPress Plugin Count Per Day – ‘daytoshow’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58307/info

2013-03-05 alejandr0.m0f0 webapps

Nconf 1.3 – Multiple SQL Injections

# Exploit Title: nconf handle_item.php，Modify_attr.php etc Multiple Sql injection

2013-03-04 Saadi Siddiqui webapps

Plogger – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/58271/info

2013-03-02 Saadat Ullah webapps

Question2Answer – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/58414/info

2013-03-01 MustLive webapps

WordPress Plugin Uploader – ‘blog’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58285/info

2013-03-01 CodeV webapps

Batavi – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58151/info

2013-03-01 Dognaedis webapps

PHP-Fusion 7.02.05 – Multiple Vulnerabilities

[waraxe-2013-SA#097] - Multiple Vulnerabilities in PHP-Fusion 7.02.05

2013-03-01 waraxe webapps

Piwigo 2.4.6 – Multiple Vulnerabilities

Advisory ID: HTB23144

2013-03-01 High-Tech Bridge SA webapps

doorGets CMS – Cross-Site Request Forgery

# Title: Doorgets CSRF Vulnerability

2013-03-01 n0pe webapps

Geeklog – Cross-Site Scripting

source: https://www.securityfocus.com/bid/58209/info

2013-02-27 High-Tech Bridge webapps