php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Feng Office – Security Bypass / HTML Injection

source: https://www.securityfocus.com/bid/56626/info

2012-11-21 Ur0b0r0x webapps

dotProject 2.1.x – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56624/info

2012-11-21 High-Tech Bridge webapps

dotProject 2.1.x – ‘index.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/56624/info

2012-11-21 High-Tech Bridge webapps

PHP Server Monitor – Persistent Cross-Site Scripting

# Author: loneferret of Offensive Security

2012-11-21 loneferret webapps

Yii Framework 1.1.8 – Search SQL Injection

# Exploit Title: Yii Framework - Search SQL Injection Vulnerability

2012-11-21 Juno_okyo webapps

WordPress Theme Madebymilk – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56608/info

2012-11-20 Ashiyane Digital Security Team webapps

openSIS 5.1 – ‘ajax.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/56598/info

2012-11-20 Julian Horoszkiewicz webapps

WordPress Plugin Facebook Survey 1.0 – SQL Injection

Title:

2012-11-20 Vulnerability Research Laboratory webapps

Omni-Secure – ‘dir’ Multiple File Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/56575/info

2012-11-19 HaCkeR_EgY webapps

weBid 1.0.5 – Directory Traversal

# Author: loneferret of Offensive Security

2012-11-19 loneferret webapps

WeBid 1.0.5 – Cross-Site Scripting

# Exploit Title: WeBid

2012-11-19 Woody Hughes webapps

ATutor 2.1 – ‘tool_file’ Local File Inclusion

source: https://www.securityfocus.com/bid/56600/info

2012-11-16 Julian Horoszkiewicz webapps

Open-Realty 2.5.8 – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/56580/info

2012-11-16 Aung Khant webapps

Friends in War The FAQ Manager – ‘question’ SQL Injection

source: https://www.securityfocus.com/bid/56576/info

2012-11-16 unsuprise webapps

WordPress Plugin Tagged Albums – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56569/info

2012-11-16 Ashiyane Digital Security Team webapps

WordPress Theme Dailyedition-mouss – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56568/info

2012-11-16 Ashiyane Digital Security Team webapps

friendsinwar FAQ Manager – ‘view_faq.php?question’ SQL Injection

# Exploit Title: friendsinwar FAQ Manager SQL Injection (URL) Vulnerability

2012-11-16 unsuprise webapps

ReciPHP 1.1 – SQL Injection

\#'#/

2012-11-15 cr4wl3r webapps

BabyGekko 1.2.2e – Multiple Vulnerabilities

Advisory ID: HTB23122

2012-11-15 High-Tech Bridge SA webapps

Friends in War Make or Break 1.3 – Authentication Bypass

# Exploit Title: friendsinwar Make or break V1.3 SQL Injection (authbypass) Vulnerability

2012-11-15 d3b4g webapps

iDev Rentals 1.0 – Multiple Vulnerabilities

Title:

2012-11-15 Vulnerability-Lab webapps

MYRE Realty Manager – Multiple Vulnerabilities

# Exploit Title:MYRE Realty Manager Multiple Vulnerabilities

2012-11-14 d3b4g webapps

MYREphp Vacation Rental Software – Multiple Vulnerabilities

# Exploit Title: MYREphp Vacation Rental Software Multiple Vulnerabilities

2012-11-14 d3b4g webapps

friendsinwar FAQ Manager – SQL Injection / Authentication Bypass

# Exploit Title: friendsinwar FAQ Manager SQL Injection (authbypass) Vulnerability

2012-11-14 d3b4g webapps

Myrephp Business Directory – Multiple Vulnerabilities

# Exploit Title: Myrephp Business Directory, Multiple Vulnerabilities

2012-11-14 d3b4g webapps

Narcissus – Remote Command Execution

:::::::-. ... ::::::. :::.

2012-11-14 dun webapps

dotProject 2.1.6 – Remote File Inclusion

:::::::-. ... ::::::. :::.

2012-11-14 dun webapps

Invision Power Board (IP.Board) 3.3.4 – ‘Unserialize()’ PHP Code Execution (Metasploit)

##

2012-11-13 Metasploit remote

Eventy CMS 1.8 Plus – Multiple Vulnerabilities

Title:

2012-11-13 Vulnerability-Lab webapps

vBulletin vBay 1.1.9 – Error-Based SQL Injection

#!/usr/bin/env python -W ignore::DeprecationWarning

2012-11-12 Dan UK webapps

Bananadance Wiki b2.2 – Multiple Vulnerabilities

Title:

2012-11-12 Vulnerability-Lab webapps

WordPress Plugin Eco-annu – ‘eid’ SQL Injection

source: https://www.securityfocus.com/bid/56479/info

2012-11-09 Ashiyane Digital Security Team webapps

WordPress Plugin PHP Event Calendar – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/56478/info

2012-11-09 Ashiyane Digital Security Team webapps

WordPress Theme Kakao – ‘ID’ SQL Injection

source: https://www.securityfocus.com/bid/56477/info

2012-11-09 sil3nt webapps

NetOffice Dwins 1.4p3 – SQL Injection

:::::::-. ... ::::::. :::.

2012-11-09 dun webapps

AR Web Content Manager (AWCM) – ‘cookie_gen.php’ Arbitrary Cookie Generation

source: https://www.securityfocus.com/bid/56465/info

2012-11-08 Sooel Son webapps

WordPress Plugin FLV Player – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56418/info

2012-11-07 Ashiyane Digital Security Team webapps

OrangeHRM – ‘sortField’ SQL Injection

source: https://www.securityfocus.com/bid/56417/info

2012-11-07 High-Tech Bridge webapps

Xivo 1.2 – Arbitrary File Download

Xivo 1.2 Arbitrary File Download under root privileges

2012-11-07 Mr.Un1k0d3r webapps

Invision Power Board (IP.Board) 3.3.4 – Unserialize Regex Bypass

2012-11-07 webDEViL webapps

VeriCentre – Multiple SQL Injections

source: https://www.securityfocus.com/bid/56409/info

2012-11-06 Cory Eubanks webapps

ZenPhoto 1.4.3.3 – Multiple Vulnerabilities

[waraxe-2012-SA#096] - Multiple Vulnerabilities in Zenphoto 1.4.3.3

2012-11-06 waraxe webapps

AWAuctionScript CMS – Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/56388/info

2012-11-04 X-Cisadane webapps

WordPress Plugin Spider Catalog 1.1 – HTML Code Injection / Cross-Site Scripting

1 ######################################### 1

2012-11-04 D4NB4R webapps

Joomla! Component Parcoauto – ‘idVeicolo’ SQL Injection

source: https://www.securityfocus.com/bid/56384/info

2012-11-03 Andrea Bocchetti webapps

DCForum – ‘auth_user_file.txt’ File Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/56383/info

2012-11-02 r45c4l webapps

Achievo 1.4.5 – Multiple Vulnerabilities (1)

Information

2012-11-02 Canberk BOLAT webapps

PrestaShop 1.5.1 – Persistent Cross-Site Scripting

PrestaShop

2012-11-02 David Sopas webapps

vBulletin ChangUonDyU Advanced Statistics – SQL Injection

# Exploit Title: vBulletin ChangUonDyU Advanced Statistics - SQL Injection

2012-11-02 Juno_okyo webapps

WordPress Plugin All Video Gallery 1.1 – SQL Injection

# Exploit Title: Wordpress All Video Gallery 1.1 SQL Injection Vulnerability

2012-11-02 Ashiyane Digital Security Team webapps