php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

ezStats for Battlefield 3 – ‘/ezStats2/compare.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57759/info

2013-02-06 L0n3ly-H34rT webapps

ezStats2 – ‘style.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/57757/info

2013-02-06 L0n3ly-H34rT webapps

Hiverr 2.2 – Multiple Vulnerabilities

# Exploit Title: Hiverr v2.2 Multiple Vulnerabilities

2013-02-06 xStarCode webapps

Glossword 1.8.3 – SQL Injection

#cs

2013-02-05 AkaStep webapps

glossword 1.8.12 – Multiple Vulnerabilities

===================================================

2013-02-05 AkaStep webapps

Free Monthly Websites 2.0 – Multiple Vulnerabilities

Title:

2013-02-05 X-Cisadane webapps

AdaptCMS 2.0.4 – ‘config.php?question’ SQL Injection

# Exploit Title: AdaptCMS

2013-02-05 kallimero webapps

ArrowChat 1.5.61 – Multiple Vulnerabilities

# Exploit Title: ArrowChat

2013-02-05 kallimero webapps

EasyITSP – ‘voicemail.php’ Directory Traversal

source: https://www.securityfocus.com/bid/57741/info

2013-02-04 Michal Blaszczak webapps

Simple Machine Forum 2.0.x < 2.0.4 - File Disclosure / Directory Traversal

# Exploit Title: SMF < 2.0.4 File Disclosure/Path Traversal

2013-02-04 NightlyDev webapps

WordPress Theme flashnews – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/57676/info

2013-02-02 MustLive webapps

DataLife Engine – ‘preview.php’ PHP Code Injection (Metasploit)

##

2013-02-01 Metasploit remote

WordPress Plugin Audio Player – ‘playerID’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57848/info

2013-01-31 hiphop webapps

Kohana Framework 2.3.3 – Directory Traversal

Title:

2013-01-29 Vulnerability-Lab webapps

DataLife Engine 9.7 – ‘preview.php’ PHP Code Injection

------------------------------------------------------------------

2013-01-28 EgiX webapps

PHP weby directory software 1.2 – Multiple Vulnerabilities

===========================================

2013-01-28 AkaStep webapps

iCart Pro – ‘section’ SQL Injection

source: https://www.securityfocus.com/bid/57564/info

2013-01-25 n3tw0rk webapps

PHPWeby Free Directory Script – ‘contact.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/57561/info

2013-01-25 AkaStep webapps

ImageCMS 4.0.0b – Multiple Vulnerabilities

Advisory ID: HTB23132

2013-01-25 High-Tech Bridge SA webapps

WordPress Plugin SolveMedia 1.1.0 – Cross-Site Request Forgery

# Exploit Title: WordPress SolveMedia 1.1.0 CSRF Vulnerability

2013-01-25 Junaid Hussain webapps

WordPress Plugin WP-Table Reloaded – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57664/info

2013-01-24 hiphop webapps

WordPress Theme Chocolate WP – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/57541/info

2013-01-23 Eugene Dokukin webapps

gpEasy CMS – ‘section’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57522/info

2013-01-23 High-Tech Bridge SA webapps

DigiLIBE – Execution-After-Redirect Information Disclosure

source: https://www.securityfocus.com/bid/57499/info

2013-01-22 Robert Gilbert webapps

Adult WebMaster Script – Password Disclosure

# Exploit Title: Yagina.com Adult Webmaster Script Admin Password Disclosure

2013-01-22 Dshellnoi Unix webapps

WordPress Plugin Developer Formatter – Cross-Site Request Forgery

====================================================================================================================

2013-01-22 Junaid Hussain webapps

PHP-Charts 1.0 – PHP Code Execution (Metasploit)

##

2013-01-21 Metasploit remote

NConf 1.3 – Arbitrary File Creation

# Exploit Title: nconf file read and wrtite exploit

2013-01-21 haidao webapps

NConf 1.3 – ‘/detail.php/detail_admin_items.php?id’ SQL Injection

# Exploit Title: nconf detail.php，detail_admin_items.php blind injection

2013-01-21 haidao webapps

Scripts Genie Classified Ultra – SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/57465/info

2013-01-20 3spi0n webapps

WordPress Plugin Ripe HD FLV Player – SQL Injection

-------------------------------------------------------------------

2013-01-19 Zikou-16 webapps

Joomla! Component com_collector – Arbitrary File Upload

# Exploit Title:Joomla com_collecter shell upload

2013-01-19 Red Dragon_al webapps

PHP-Charts – Arbitrary PHP Code Execution

===============================================================

2013-01-18 AkaStep webapps

IP.Gallery – ‘img’ SQL Injection

source: https://www.securityfocus.com/bid/57444/info

2013-01-17 Ashiyane Digital Security Team webapps

Invision Gallery 2.0.5 – SQL Injection

##############

2013-01-17 Ashiyane Digital Security Team webapps

Cydia Repo Manager – Cross-Site Request Forgery

# Cydia Repo Manager CSRF Vulnerability

2013-01-16 Ramdan Yantu webapps

phpLiteAdmin – ‘table’ SQL Injection

source: https://www.securityfocus.com/bid/57431/info

2013-01-15 KedAns-Dz webapps

CMS snews – SQL Injection

____ ____ ____ _______/ |________ ____ ____

2013-01-15 By onestree webapps

phpShop 2.0 – SQL Injection

# Exploit Title : phpshop 2.0 SQL Injection Vulnerability

2013-01-14 By onestree webapps

phlyLabs phlyMail Lite 4.03.04 – Full Path Disclosure / Persistent Cross-Site Scripting

phlyLabs phlyMail Lite 4.03.04 Path Disclosure and Stored XSS Vulnerabilities

2013-01-13 LiquidWorm webapps

phlyLabs phlyMail Lite 4.03.04 – ‘go’ Open Redirect

phlyLabs phlyMail Lite 4.03.04 (go param) Open Redirect Vulnerability

2013-01-13 LiquidWorm webapps

PHPLiteAdmin 1.9.3 – Remote PHP Code Injection

# Exploit Title: phpliteadmin

2013-01-11 L@usch webapps

WordPress Plugin Gallery – ‘filename_1’ Arbitrary File Access

source: https://www.securityfocus.com/bid/57256/info

2013-01-10 Beni_Vanda webapps

eXtplorer 2.1 – Arbitrary File Upload (Metasploit)

##

2013-01-10 Metasploit remote

Quick.CMS / Quick.Cart – Cross-Site Scripting

source: https://www.securityfocus.com/bid/57254/info

2013-01-09 High-Tech Bridge webapps

Prizm Content Connect – Arbitrary File Upload

source: https://www.securityfocus.com/bid/57242/info

2013-01-09 Include Security Research webapps

TinyBrowser – ‘edit.php’ Directory Listing

source: https://www.securityfocus.com/bid/57230/info

2013-01-09 MustLive webapps

TinyBrowser – ‘tinybrowser.php’ Directory Listing

source: https://www.securityfocus.com/bid/57230/info

2013-01-09 MustLive webapps

tinybrowser – ‘type’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57230/info

2013-01-09 MustLive webapps

WeBid 1.0.6 – SQL Injection

# Exploit Title: WeBid 1.0.6 SQL Injection Vulnerability

2013-01-09 Life Wasted webapps