php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

MyBB User Profile Skype ID Plugin 1.0 – Persistent Cross-Site Scripting

# Exploit Title: Profile Skype ID MyBB Plugin Stored XSS

2012-12-16 limb0 webapps

Social Sites MyBB Plugin 0.2.2 – Cross-Site Scripting

# Exploit Title: Social Sites MyBB Plugin 0.2.2 Cross Site Scripting

2012-12-14 s3m00t webapps

PHP Address Book – ‘group’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56937/info

2012-12-13 Kenneth F. Belva webapps

Centreon Enterprise Server 2.3.3 < 2.3.9-4 - Blind SQL Injection

#!/usr/bin/env python

2012-12-13 modpr0be webapps

MyBB DyMy User Agent Plugin – ‘newreply.php’ SQL Injection

############################################################################

2012-12-13 JoinSe7en webapps

WordPress Plugin Portable phpMyAdmin – Authentication Bypass

'portable-phpMyAdmin (WordPress Plugin)' Authentication Bypass (CVE-2012-5469)

2012-12-13 Mark Stanislav webapps

Facebook Profile MyBB Plugin 2.4 – Persistent Cross-Site Scripting

# Exploit Title: MyBB Facebook Profile Plugin Persistant XSS

2012-12-13 limb0 webapps

MyBB AJAX Chat – Persistent Cross-Site Scripting

# Title: MyBB AJAX Chat Persistent XSS Vulnerability

2012-12-13 Mr. P-teo webapps

MyYoutube MyBB Plugin 1.0 – SQL Injection

# Exploit Title: MyYoutube MyBB plugin SQL UPDATE injection.

2012-12-13 Zixem webapps

TipsOfTheDay MyBB Plugin – Multiple Vulnerabilities

# Exploit Title: TipsOfTheDay mybb plugin stored XSS and SQL injection vulnerabilitys.

2012-12-12 VipVince webapps

PHP-Nuke 8.2.4 – Cross-Site Request Forgery

###########################################################

2012-12-11 sajith webapps

MyBB Profile Blogs Plugin 1.2 – Multiple Vulnerabilities

# Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities.

2012-12-11 Zixem webapps

Joomla! Component com_jooproperty 1.13.0 – Multiple Vulnerabilities

1 ######################################### 1

2012-12-11 D4NB4R webapps

MyBB Bank- 3 Plugin – SQL Injection

# Exploit Title: Bank v3 MyBB plugin SQLi 0day

2012-12-11 Red_Hat webapps

SimpleInvoices invoices Module – Customer Field Cross-Site Scripting

source: https://www.securityfocus.com/bid/56882/info

2012-12-10 tommccredie webapps

Achievo 1.4.5 – Multiple Vulnerabilities (2)

Advisory ID: HTB23126

2012-12-09 High-Tech Bridge SA webapps

Clipbucket 2.6 Revision 738 – Multiple SQL Injections

Advisory ID: HTB23125

2012-12-09 High-Tech Bridge SA webapps

MyBB KingChat Plugin – Persistent Cross-Site Scripting

Exploit Title: MyBB 'kingchat' chat-box plugin.

2012-12-09 VipVince webapps

vBulletin ajaxReg Module – SQL Injection

source: https://www.securityfocus.com/bid/56877/info

2012-12-08 Cold Zero webapps

FOOT Gestion – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56862/info

2012-12-07 Emmanuel Farcy webapps

WordPress Plugin Simple Gmail Login – Stack Trace Information Disclosure

source: https://www.securityfocus.com/bid/56860/info

2012-12-07 Aditya Balapure webapps

Kordil EDms 2.2.60rc3 – SQL Injection

# Exploit Title: Kordil EDMS v2.2.60rc3 SQL Injection Vulnerability

2012-12-06 Woody Hughes webapps

Sourcefabric Newscoop – ‘f_email’ SQL Injection

source: https://www.securityfocus.com/bid/56800/info

2012-12-04 AkaStep webapps

WordPress Theme Nest – ‘codigo’ SQL Injection

source: https://www.securityfocus.com/bid/56792/info

2012-12-04 Ashiyane Digital Security Team webapps

MyBB KingChat Plugin – SQL Injection

# Exploit Title: KingChat MyBB plugin SQL Injection 0day

2012-12-03 Red_Hat webapps

SchoolCMS – Persistent Cross-Site Scripting

Title: SchoolCMS Persistant XSS.

2012-12-03 VipVince webapps

TinyMCPUK – ‘test’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56767/info

2012-12-01 eidelweiss webapps

SilverStripe CMS 3.0.2 – (Multiple Vulnerabilities) Cross-Site Scripting / Cross-Site Request Forgery

Sense of Security - Security Advisory - SOS-12-011

2012-11-30 Sense of Security webapps

SmartCMS – ‘/index.php?menuitem’ SQL Injection / Cross-Site Scripting

##########################################################################

2012-11-30 Yakir Wizman webapps

Free Hosting Manager 2.0 – ‘id’ SQL Injection

##########################################################################

2012-11-30 Yakir Wizman webapps

Elastix – ‘page’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56746/info

2012-11-29 cheki webapps

WordPress Theme Toolbox – ‘mls’ SQL Injection

source: https://www.securityfocus.com/bid/56745/info

2012-11-29 Ashiyane Digital Security Team webapps

WordPress Plugin Video Lead Form – ‘errMsg’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56737/info

2012-11-29 Aditya Balapure webapps

Network Shutdown Module 3.21 – ‘sort_values’ Remote PHP Code Injection (Metasploit)

##

2012-11-29 Metasploit remote

BigDump 0.29b and 0.32b – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/56744/info

2012-11-28 Ur0b0r0x webapps

WordPress Theme CStar Design – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56694/info

2012-11-27 Amirh03in webapps

WordPress Theme Wp-ImageZoom – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56691/info

2012-11-26 Amirh03in webapps

WordPress Plugin Ads Box – ‘count’ SQL Injection

source: https://www.securityfocus.com/bid/56681/info

2012-11-26 Ashiyane Digital Security Team webapps

SmartCMS – ‘index.php?idx’ SQL Injection

=============================================================================================================

2012-11-26 NoGe webapps

PRADO PHP Framework 3.2.0 – Arbitrary File Read

PRADO PHP Framework 3.2.0 Arbitrary File Read Vulnerability

2012-11-26 LiquidWorm webapps

BuyClassifiedScript – PHP Code Injection

# Exploit Title: buyclassifiedscript PHP code injection vulnerability

2012-11-26 d3b4g webapps

ES CmS 0.1 – SQL Injection

# Exploit Title: ES CmS 0.1 Sql Injection Vulnerability

2012-11-25 hossein beizaee webapps

jBilling 3.0.2 – Cross-Site Scripting

# Exploit Title: jBilling 3.0.2 Cross Site Scripting Vulnerability

2012-11-25 Woody Hughes webapps

Beat Websites – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56683/info

2012-11-24 Metropolis webapps

WordPress Theme Magazine Basic – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56664/info

2012-11-22 Novin hack webapps

WordPress Plugin Zarzadzonie Kontem – ‘ajaxfilemanager.php’ Script Arbitrary File Upload

source: https://www.securityfocus.com/bid/56663/info

2012-11-22 Ashiyane Digital Security Team webapps

WordPress Plugin Plg Novana – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56661/info

2012-11-22 sil3nt webapps

WordPress Plugin Webplayer – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56660/info

2012-11-22 Novin hack webapps

WordPress Plugin Zingiri Web Shop – ‘path’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/56659/info

2012-11-22 Ashiyane Digital Security Team webapps

XiVO – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/56652/info

2012-11-21 Francis Provencher webapps