php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

WordPress Plugin Crayon Syntax Highlighter – ‘wp_load’ Remote File Inclusion

source: https://www.securityfocus.com/bid/55919/info

2012-10-15 Charlie Eriksen webapps

SilverStripe CMS 2.4.x – ‘BackURL’ Open Redirection

source: https://www.securityfocus.com/bid/55915/info

2012-10-15 Aung Khant webapps

airVisionNVR 1.1.13 – ‘readfile()’ Disclosure / SQL Injection

Exploit Title: airVisionNVR readfile() disclosure and sql injection

2012-10-15 pennyGrit webapps

Cartweaver 3 – Local File Inclusion

# Exploit Title: Cartweaver 3 LFI exploit

2012-10-15 HaxOr webapps

vOlk Botnet Framework 4.0 – Multiple Vulnerabilities

Title:

2012-10-11 Vulnerability-Lab webapps

Omnistar Document Manager 8.0 – Multiple Vulnerabilities

Title:

2012-10-11 Vulnerability-Lab webapps

OpenX 2.8.10 – ‘plugin-index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55860/info

2012-10-10 High-Tech Bridge webapps

qdPM 7.0 – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2012-10-10 Metasploit webapps

phpMyAdmin 3.5.2.2 – ‘server_sync.php’ Backdoor (Metasploit)

##

2012-10-10 Metasploit webapps

PhpTax – ‘pfilez’ Execution Remote Code Injection (Metasploit)

##

2012-10-10 Metasploit webapps

Interspire Email Marketer – Cross-Site Scripting / HTML Injection / SQL Injection

source: https://www.securityfocus.com/bid/55829/info

2012-10-08 Ibrahim El-Sayed webapps

Web Help Desk by SolarWinds – Persistent Cross-Site Scripting

# Author: loneferret of Offensive Security

2012-10-08 loneferret webapps

MyAuth3 – Blind SQL Injection

# Exploit Title: MyAuth3 Blind SQL Injection / Root Shell Access 0day exploit

2012-10-07 Marcio Almeida webapps

Blog Mod 0.1.9 – ‘index.php?month’ SQL Injection

2012-10-07 WhiteCollarGroup webapps

Open Realty – ‘select_users_lang’ Local File Inclusion

source: https://www.securityfocus.com/bid/55834/info

2012-10-06 L0n3ly-H34rT webapps

WordPress Plugin Shopp – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/55817/info

2012-10-05 T0x!c webapps

phpMyBitTorrent 2.04 – Multiple Vulnerabilities

[waraxe-2012-SA#091] - Multiple Vulnerabilities in phpMyBitTorrent 2.04

2012-10-04 waraxe webapps

Template CMS 2.1.1 – Multiple Vulnerabilities

Advisory ID: HTB23115

2012-10-04 High-Tech Bridge SA webapps

phpMyChat Plus 1.94 RC1 – Multiple Vulnerabilities

############################################

2012-10-04 L0n3ly-H34rT webapps

Omnistar Mailer 7.2 – Multiple Vulnerabilities

Title:

2012-10-03 Vulnerability-Lab webapps

WordPress Plugin spider Calendar – Multiple Vulnerabilities

Exploit Title: Wordpress spider calendar Plugin Multiple Vulnerabilities

2012-10-03 D4NB4R webapps

ZenPhoto – ‘admin-news-articles.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55755/info

2012-10-02 Scott Herbert webapps

Switchvox – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/55739/info

2012-10-02 Ibrahim El-Sayed webapps

phptax 0.8 – Remote Code Execution

-----------------------------------------------------

2012-10-02 Jean Pascal Pereira webapps

Omnistar Mailer – Multiple SQL Injections / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/55760/info

2012-10-01 Vulnerability Laboratory webapps

WordPress Plugin Akismet – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55749/info

2012-10-01 Tapco Security webapps

WordPress Theme Archin 3.2 – Configuration Access

# Exploit Title: Archin WordPress Theme Unauthenticated Configuration Access

2012-10-01 bwall webapps

AlamFifa CMS – ‘user_name_cookie’ SQL Injection

source: https://www.securityfocus.com/bid/55746/info

2012-09-30 L0n3ly-H34rT webapps

WordPress Plugin ABC Test – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55689/info

2012-09-26 Scott Herbert webapps

ViArt Shop Evaluation 4.1 – Multiple Remote File Inclusions

############################################

2012-09-26 L0n3ly-H34rT webapps

WordPress Plugin Token Manager – ‘tid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55664/info

2012-09-25 TheCyberNuxbie webapps

ViArt Shop Enterprise 4.1 – Arbitrary Command Execution

2012-09-25 LiquidWorm webapps

WordPress Plugin Sexy Add Template – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/55666/info

2012-09-22 the_cyber_nuxbie webapps

WordPress Core 3.4.2 – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/55660/info

2012-09-22 AkaStep webapps

YCommerce – Multiple SQL Injections

source: https://www.securityfocus.com/bid/55653/info

2012-09-21 Ricardo Almeida webapps

WordPress Plugin MF Gig Calendar – Cross-Site Scripting

source: https://www.securityfocus.com/bid/55622/info

2012-09-20 Chris Cooper webapps

Poweradmin – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55619/info

2012-09-20 Siavash webapps

Manhali 1.8 – Local File Inclusion

############################################

2012-09-20 L0n3ly-H34rT webapps

torrenttrader 2.08 – Multiple Vulnerabilities

[waraxe-2012-SA#089] - Multiple Vulnerabilities in TorrentTrader 2.08

2012-09-19 waraxe webapps

WordPress Plugin wp-topbar 4.02 – Multiple Vulnerabilities

# Exploit Title: WP-TopBar 4.02 CSRF

2012-09-19 Blake Entrekin webapps

WordPress Core 3.4.2 – Multiple Path Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/55597/info

2012-09-18 AkaStep webapps

vBulletin 4.1.12 – ‘blog_plugin_useradmin.php’ SQL Injection

source: https://www.securityfocus.com/bid/55592/info

2012-09-18 Am!r webapps

TAGWORX.CMS – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/55586/info

2012-09-18 Crim3R webapps

minimal Gallery – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55577/info

2012-09-17 ayastar webapps

Netsweeper WebAdmin Portal – Multiple Vulnerabilities

# Exploit Title: Netsweeper WebAdmin Portal CSRF, Reflective XSS, and SQL Injection ("The later")\

2012-09-17 Jacob Holcomb webapps

Auxilium PetRatePro – Multiple Vulnerabilities

##########################################

2012-09-17 DaOne webapps

webERP 4.08.4 – ‘WorkOrderEntry.php’ SQL Injection

# Exploit Title: webERP

2012-09-17 modpr0be webapps

luxcal 2.7.0 – Multiple Vulnerabilities

#################################################

2012-09-17 L0n3ly-H34rT webapps

NeoBill CMS 0.8 Alpha – Multiple Vulnerabilities

Title:

2012-09-14 Vulnerability-Lab webapps

ASTPP VoIP Billing (4cf207a) – Multiple Vulnerabilities

Title:

2012-09-14 Vulnerability-Lab webapps