php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

MyBB Follower User Plugin – SQL Injection

# Exploit Title: Follower User MyBB plugin SQL Injection 0day

2012-11-01 Zixem webapps

Joomla! Component Spider Catalog 1.1 – ‘Product_ID’ SQL Injection

1 ######################################### 1

2012-11-01 D4NB4R webapps

Endpoint Protector 4.0.4.2 – Multiple Persistent Cross-Site Scripting Vulnerabilities

Advisory Name: Multiple Persistent Cross-Site Scripting (XSS) in Endpoint

2012-11-01 CYBSEC Labs webapps

Invision Power Board (IP.Board) 3.3.4 – ‘Unserialize()’ PHP Code Execution

2012-11-01 EgiX webapps

WordPress Plugin bbPress – Multiple Vulnerabilities

# Souhail Hammou - Independant Security Researcher & Penetration Tester .

2012-11-01 Dark-Puzzle webapps

BloofoxCMS 0.3.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56353/info

2012-10-31 Canberk BOLAT webapps

NetCat CMS – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56340/info

2012-10-31 Security Effect Team webapps

WordPress Plugin foxypress 0.4.2.5 – Multiple Vulnerabilities

[waraxe-2012-SA#095] - Multiple Vulnerabilities in Wordpress FoxyPress Plugin

2012-10-31 waraxe webapps

PG Dating Pro CMS 1.0 – Multiple Vulnerabilities

Title:

2012-10-31 Vulnerability-Lab webapps

vam shop 1.69 – Multiple Vulnerabilities

Product: VaM Shop

2012-10-31 Security Effect Team webapps

Joomla! Component com_quiz – SQL Injection

source: https://www.securityfocus.com/bid/56338/info

2012-10-30 Daniel Barragan webapps

CorePlayer – ‘callback’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56334/info

2012-10-28 MustLive webapps

WordPress Plugin Easy Webinar – Blind SQL Injection

# Exploit Title: Wordpress Easy Webinar Plugin Blind SQL Injection Vulnerability

2012-10-28 Robert Cooper webapps

EasyITSP – ‘customers_edit.php’ Authentication Bypass

source: https://www.securityfocus.com/bid/56321/info

2012-10-26 Michal Blaszczak webapps

VicBlog – Multiple SQL Injections

source: https://www.securityfocus.com/bid/56307/info

2012-10-26 Geek webapps

Inventory – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/56293/info

2012-10-26 G13 webapps

Gramophone – ‘rs’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56299/info

2012-10-25 G13 webapps

Bitweaver 2.8.1 – Multiple Vulnerabilities

Trustwave SpiderLabs Security Advisory TWSL2012-016:

2012-10-24 Trustwave's SpiderLabs webapps

SMF – ‘view’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56223/info

2012-10-23 Am!r webapps

ClanSphere 2011.3 – ‘cs_lang’ Cookie Local File Inclusion

Exploit Title: ClanSphere 2011.3 (cs_lang cookie parameter) Local File Include Vulnerability

2012-10-23 blkhtc0rp webapps

WHMCompleteSolution (WHMCS) 4.5.2 – ‘googlecheckout.php’ SQL Injection

source: https://www.securityfocus.com/bid/56173/info

2012-10-22 Starware Security Team webapps

ATutor 1.2 – Multiple Vulnerabilities

Advisory ID: HTB23117

2012-10-22 High-Tech Bridge SA webapps

subrion CMS 2.2.1 – Multiple Vulnerabilities

Advisory ID: HTB23113

2012-10-22 High-Tech Bridge SA webapps

WordPress Plugin social discussions 6.1.1 – Multiple Vulnerabilities

[waraxe-2012-SA#093] - Multiple Vulnerabilities in Wordpress Social Discussions Plugin

2012-10-22 waraxe webapps

Schoolhos CMS Beta 2.29 – ‘id’ SQL Injection

# Exploit Title: Schoolhos CMS SQL Injetions

2012-10-22 Cumi webapps

WordPress Plugin White Label CMS 1.5 – Cross-Site Request Forgery / Persistent Cross-Site Scripting

# Exploit Title: White Label CMS v 1.5 CSRF w/ persistent XSS

2012-10-22 pcsjj webapps

Joomla! Component com_kunena – ‘search’ SQL Injection

#!/usr/bin/perl

2012-10-22 D35m0nd142 webapps

Movable Type Pro 5.13en – Persistent Cross-Site Scripting

-----BEGIN PGP SIGNED MESSAGE-----

2012-10-22 sqlhacker webapps

Joomla! Component com_commedia – ‘task’ SQL Injection

Exploit Title: Joomla commedia Remote Exploit

2012-10-22 D4NB4R webapps

WebTitan – ‘logs-x.php’ Directory Traversal

source: https://www.securityfocus.com/bid/55904/info

2012-10-20 Richard Conner webapps

CMS Mini 0.2.2 – ‘index.php’ Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/56148/info

2012-10-19 Netsparker webapps

CMSQLite 1.3.2 – Multiple Vulnerabilities

Title:

2012-10-19 Vulnerability-Lab webapps

Joomla! Component com_tag – ‘tag’ SQL Injection

Exploit Title: Joomla tag Remote Sql Exploit

2012-10-19 D4NB4R webapps

Joomla! Component com_fss 1.9.1.1447 – SQL Injection

Exploit Title: Joomla Freestyle Support com_fss sqli

2012-10-19 D4NB4R webapps

WordPress Plugin Wordfence Security – Cross-Site Scripting

source: https://www.securityfocus.com/bid/56159/info

2012-10-18 MustLive webapps

Amateur Photographer’s Image Gallery – ‘fullscreen.php?albumid’ SQL Injection

source: https://www.securityfocus.com/bid/56110/info

2012-10-18 cr4wl3r webapps

Amateur Photographer’s Image Gallery – ‘plist.php?albumid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56110/info

2012-10-18 cr4wl3r webapps

Amateur Photographer’s Image Gallery – ‘plist.php?albumid’ SQL Injection

source: https://www.securityfocus.com/bid/56110/info

2012-10-18 cr4wl3r webapps

Amateur Photographer’s Image Gallery – ‘force-download.php?File’ Information Disclosure

source: https://www.securityfocus.com/bid/56110/info

2012-10-18 cr4wl3r webapps

BSW Gallery – ‘uploadpic.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/56109/info

2012-10-18 cr4wl3r webapps

WordPress Plugin FireStorm Professional Real Estate 2.06.01 – SQL Injection

# Exploit Title: Wordpress FireStorm Professional Real Estate 2.06.01 SQL Injection Vulnerability

2012-10-18 Ashiyane Digital Security Team webapps

jCore – ‘/admin/index.php?path’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56102/info

2012-10-17 High-Tech Bridge webapps

WordPress Plugin Slideshow – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56090/info

2012-10-17 waraxe webapps

Symphony CMS 2.3 – Multiple Vulnerabilities

Symphony cms 2.3 multiple vulnerabilities

2012-10-17 Wireghoul webapps

Sisfokol 4.0 – Arbitrary File Upload

Undergroundthalo Hacking Team - Security Advisory

2012-10-17 cr4wl3r webapps

WANem – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56326/info

2012-10-16 Brendan Coles webapps

Joomla! Component com_icagenda – ‘id’ Multiple Vulnerabilities

# Souhail Hammou - Independant Security Researcher & Penetration Tester .

2012-10-16 Dark-Puzzle webapps

MyBB Profile Albums Plugin 0.9 – ‘albums.php?album’ SQL Injection

# Exploit Title: Profile Albums MyBB plugin SQL Injection 0day

2012-10-16 Zixem webapps

AjaXplorer – ‘checkInstall.php’ Remote Command Execution (Metasploit)

##

2012-10-16 Metasploit remote

Project Pier – Arbitrary File Upload (Metasploit)

##

2012-10-16 Metasploit webapps