php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

WordPress Plugin Comment Rating 2.9.32 – Multiple Vulnerabilities

# Exploit Title: Wordpress plugin: Comment Rating SQL injection

2013-02-27 ebanyu webapps

Joomla! 3.0.2 – ‘highlight.php’ PHP Object Injection

-------------------------------------------------------------------

2013-02-27 EgiX webapps

PolarPearCMS – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2013-02-26 Metasploit remote

Glossword 1.8.8 < 1.8.12 - Arbitrary File Upload (Metasploit)

##

2013-02-26 Metasploit remote

Kordil EDms 2.2.60rc3 – Arbitrary File Upload (Metasploit)

##

2013-02-26 Metasploit remote

MTP Poll 1.0 – Multiple Cross-Site Scripting Vulnerabilities

MTP Poll 1.0 Multiple Remote Script Insertion Vulnerabilities

2013-02-26 LiquidWorm webapps

MTP Guestbook 1.0 – Multiple Cross-Site Scripting Vulnerabilities

MTP Guestbook 1.0 Multiple Remote Script Insertion Vulnerabilities

2013-02-26 LiquidWorm webapps

MTP Image Gallery 1.0 – ‘edit_photos.php?title’ Cross-Site Scripting

MTP Image Gallery 1.0 (title) Remote Script Insertion Vulnerability

2013-02-26 LiquidWorm webapps

Rix4Web Portal – Blind SQL Injection

################################################

2013-02-26 L0n3ly-H34rT webapps

Brewthology 0.1 – SQL Injection

#Brewthology 0.1 SQL Injection Exploit

2013-02-26 cr4wl3r webapps

phpMyRecipes – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/58160/info

2013-02-25 PDS webapps

WordPress Plugin Smart Flv – ‘jwplayer.swf’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58135/info

2013-02-25 Henri Salo webapps

File Manager – HTML Injection / Local File Inclusion

source: https://www.securityfocus.com/bid/58313/info

2013-02-23 Benjamin Kunz Mejri webapps

OpenEMR – ‘site’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58085/info

2013-02-21 Gjoko Krstic webapps

PHPmyGallery 1.5 – Local File Disclosure / Cross-Site Scripting

source: https://www.securityfocus.com/bid/58081/info

2013-02-21 TheMirkin webapps

PHPMyRecipes 1.2.2 – ‘viewrecipe.php?r_id’ SQL Injection

#phpMyRecipes 1.2.2 SQL Injection Exploit

2013-02-21 cr4wl3r webapps

glFusion 1.2.2 – Multiple Cross-Site Scripting Vulnerabilities

Advisory ID: HTB23142

2013-02-21 High-Tech Bridge SA webapps

RTTucson Quotations Database Script – Authentication Bypass

# RTTucson Quotations Database Script (Auth Bypass) SQL Injection Vulnerability

2013-02-21 cr4wl3r webapps

Web Cookbook – Multiple Vulnerabilities

# Web Cookbook Multiple Vulnerability

2013-02-21 cr4wl3r webapps

ZeroClipboard 1.9.x – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58116/info

2013-02-20 MustLive webapps

ZenPhoto – ‘index.php’ SQL Injection

source: https://www.securityfocus.com/bid/58078/info

2013-02-20 HosseinNsn webapps

WordPress Plugin Pretty Link – Cross-Site Scripting

source: https://www.securityfocus.com/bid/58072/info

2013-02-20 hiphop webapps

CKEditor 4.0.1 – Multiple Vulnerabilities

===========================================

2013-02-20 AkaStep webapps

OpenEMR – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2013-02-20 Metasploit remote

RTTucson Quotations Database – Multiple Vulnerabilities

##################################################################################

2013-02-20 3spi0n webapps

CKEditor – ‘posteddata.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58045/info

2013-02-19 AkaStep webapps

Squirrelcart – ‘table’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58025/info

2013-02-19 Gjoko Krstic webapps

Piwigo 2.4.6 – ‘/install.php’ Arbitrary File Read/Delete

Piwigo 2.4.6 (install.php) Remote Arbitrary File Read/Delete Vulnerability

2013-02-19 LiquidWorm webapps

Scripts Genie Hot Scripts Clone – ‘showcategory.php?cid’ SQL Injection

-+=--+=--+=--+=--+=--+=--+=--+=--+=--+=-

2013-02-18 Easy Laster webapps

Cometchat Application – Multiple Vulnerabilities

#####################################

2013-02-18 z3r0sPlOiT webapps

Scripts Genie Pet Rate Pro – Multiple Vulnerabilities

#########################################################################

2013-02-18 TheMirkin webapps

Scripts Genie Top Sites – ‘out.php?id’ SQL Injection

##################################################################################

2013-02-17 3spi0n webapps

Scripts Genie Domain Trader – ‘catalog.php?id’ SQL Injection

##################################################################################

2013-02-17 3spi0n webapps

Scripts Genie Games Site Script – ‘index.php?id’ SQL Injection

##################################################################################

2013-02-17 3spi0n webapps

Scripts Genie Gallery Personals – ‘gallery.php?L’ SQL Injection

##################################################################################

2013-02-17 3spi0n webapps

ChillyCMS 1.3.0 – Multiple Vulnerabilities

# Exploit Title: chillyCMS 1.3.0 Multiple Vulnerabilities

2013-02-15 Abhi M Balakrishnan webapps

Cometchat – Multiple Vulnerabilities

##################################################################################

2013-02-15 B127Y webapps

WordPress Plugin NextGEN Gallery – Full Path Disclosure

source: https://www.securityfocus.com/bid/57957/info

2013-02-14 Henrique Montenegro webapps

Ultra Light Forum – Persistent Cross-Site Scripting

# Ultra Light Forum Persistant XSS Vulnerability

2013-02-14 cr4wl3r webapps

OpenEMR 4.1.1 – ‘ofc_upload_image.php’ Arbitrary File Upload

2013-02-13 LiquidWorm webapps

Sonar – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57982/info

2013-02-12 DevilTeam webapps

BlackNova Traders – ‘news.php’ SQL Injection

source: https://www.securityfocus.com/bid/57910/info

2013-02-12 ITTIHACK webapps

osCommerce – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/57892/info

2013-02-12 Jakub Galczyk webapps

IP.Gallery 4.2.x/5.0.x – Persistent Cross-Site Scripting

# Exploit Title: IP.Gallery 4.2.x and 5.0.x persistent XSS vulnerability

2013-02-11 Mohamed Ramadan webapps

IRIS Citations Management Tool – (Authenticated) Remote Command Execution

Here is a bug that I finally found time to write about :-)

2013-02-11 aeon webapps

Easy Live Shop System – SQL Injection

+--------------------------------------------------

2013-02-10 Ramdan Yantu webapps

WordPress Theme Pinboard – ‘tab’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57873/info

2013-02-09 Henrique Montenegro webapps

CubeCart 5.2.0 – ‘cubecart.class.php’ PHP Object Injection

-------------------------------------------------------------------------

2013-02-07 EgiX webapps

WordPress Plugin Wysija Newsletters – Multiple SQL Injections

source: https://www.securityfocus.com/bid/57775/info

2013-02-06 High-Tech Bridge webapps

WordPress Plugin CommentLuv – ‘_ajax_nonce’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57771/info

2013-02-06 High-Tech Bridge webapps