php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Ezylog Photovoltaic Management Server – Multiple Vulnerabilities

Multiple vulnerabilities in Ezylog photovoltaic management server

2012-09-12 Roberto Paleari webapps

Webify Photo Gallery – Arbitrary File Deletion

#########################################################################################

2012-09-12 JIKO webapps

Webify Business Directory – Arbitrary File Deletion

#########################################################################################

2012-09-12 JIKO webapps

Webify eDownloads Cart – Arbitrary File Deletion

#########################################################################################

2012-09-12 JIKO webapps

Subrion CMS 2.2.1 – Cross-Site Request Forgery (Add Admin)

Subrion CMS 2.2.1 CSRF Add Admin Exploit

2012-09-12 LiquidWorm webapps

FBDj – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/55504/info

2012-09-11 TUNISIAN CYBER webapps

akcms 4.2.4 – Information Disclosure

############################################

2012-09-11 L0n3ly-H34rT webapps

Webify Blog – Arbitrary File Deletion

#########################################################################################

2012-09-11 JIKO webapps

DELTAScripts PHP Links – Multiple SQL Injections

source: https://www.securityfocus.com/bid/55478/info

2012-09-10 L0n3ly-H34rT webapps

VICIDIAL Call Center Suite – Multiple SQL Injections

source: https://www.securityfocus.com/bid/55476/info

2012-09-10 Ertebat Gostar Co webapps

SiteGo – Remote File Inclusion

############################################

2012-09-10 L0n3ly-H34rT webapps

Joomla! Component RokModule 1.1 – ‘module’ Blind SQL Injection

Titulo: Joomla Component RokModule Blind SQLi [module] Vulnerability

2012-09-10 Yarolinux webapps

VICIDIAL Call Center Suite 2.2.1-237 – Multiple Vulnerabilities

####################################################################################

2012-09-10 Ertebat Gostar Co webapps

Pinterestclones – Security Bypass / HTML Injection

source: https://www.securityfocus.com/bid/55469/info

2012-09-08 DaOne webapps

Pinterest Clone Script – Multiple Vulnerabilities

##########################################

2012-09-08 DaOne webapps

Sflog! CMS 1.0 – Arbitrary File Upload (Metasploit)

##

2012-09-08 Metasploit remote

WordPress Theme Purity – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55605/info

2012-09-07 Matan Azugi webapps

TestLink 1.9.3 – Cross-Site Request Forgery

Advisory ID: HTB23088

2012-09-07 High-Tech Bridge SA webapps

Clipster Video – Persistent Cross-Site Scripting

##########################################

2012-09-07 DaOne webapps

Cannonbolt Portfolio Manager 1.0 – Multiple Vulnerabilities

Cannonbolt Portfolio Manager v1.0 Stored XSS and SQL Injection Vulnerabilities

2012-09-07 LiquidWorm webapps

OpenFiler 2.3 – Multiple Cross-Site Scripting / Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/55500/info

2012-09-06 Brendan Coles webapps

web@all – Local File Inclusion / Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/55426/info

2012-09-06 KedAns-Dz webapps

Extcalendar 2.0 – Multiple SQL Injections / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/55424/info

2012-09-05 Ashiyane Digital Security Team webapps

Flogr – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55418/info

2012-09-05 High-Tech Bridge webapps

Kayako Fusion – ‘download.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55417/info

2012-09-05 High-Tech Bridge webapps

ES Job Search Engine 3.0 – SQL Injection

Title:

2012-09-05 Vulnerability-Lab webapps

MobileCartly 1.0 – Arbitrary File Creation (Metasploit)

##

2012-09-05 Metasploit webapps

PHPFox 3.0.1 – ‘ajax.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55405/info

2012-09-04 Crim3R webapps

Sciretech (Multiple Products) – Multiple SQL Injections

source: https://www.securityfocus.com/bid/55390/info

2012-09-04 AkaStep webapps

Group Office Calendar – ‘/calendar/json.php’ SQL Injection

/-------------------------------------\

2012-09-04 Chris Cooper webapps

Support4Arabs Pages 2.0 – SQL Injection

############################################

2012-09-04 L0n3ly-H34rT webapps

Sitemax Maestro – SQL Injection / Local File Inclusion

source: https://www.securityfocus.com/bid/55386/info

2012-09-03 AkaStep webapps

AV Arcade Free Edition – ‘add_rating.php?id’ Blind SQL Injection

##########################################

2012-09-02 DaOne webapps

Admidio 2.3.5 – Multiple Vulnerabilities

Advisory: Admidio 2.3.5 Multiple security vulnerabilities

2012-09-02 Stefan Schurtz webapps

Joomla! Component Spider Calendar – SQL Injection

Exploit Title: Joomla spider calendar lite Remote Exploit

2012-09-01 D4NB4R webapps

SugarCRM Community Edition 6.5.2 (Build 8410) – Multiple Vulnerabilities

################################################################################

2012-09-01 Brendan Coles webapps

SugarCRM Community Edition – Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/55347/info

2012-08-31 Brendan Coles webapps

vBulletin Yet Another Awards System 4.0.2 – SQL Injection

# Exploit Title: vBulletin Yet Another Awards System 4.0.2 Time Based SQL Injection 0day

2012-08-31 Backsl@sh/Dan webapps

WordPress Plugin Download Monitor – ‘dlsearch’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55487/info

2012-08-30 Chris Cooper webapps

Crowbar – ‘file’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55315/info

2012-08-30 Matthias Weckbecker webapps

TomatoCart – ‘example_form.ajax.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55295/info

2012-08-30 HauntIT webapps

Booking System Pro – Cross-Site Request Forgery

# Exploit Title: Booking System Pro CSRF Vulnerability

2012-08-30 DaOne webapps

PrestaShop 1.4.7 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55280/info

2012-08-29 High-Tech Bridge webapps

Phorum 5.2.18 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55275/info

2012-08-29 High-Tech Bridge webapps

JW Player – ‘logo.link’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55199/info

2012-08-29 MustLive webapps

WordPress Plugin HD Webplayer 1.1 – SQL Injection

_______ _____ _ _ _______ _____

2012-08-29 JoinSe7en webapps

Disqus Blog Comments – Blind SQL Injection

:--------------------------------------------------------------------------------------------------------------------...

2012-08-29 Spy_w4r3 webapps

WordPress Plugin Simple:Press Forum – Arbitrary File Upload

source: https://www.securityfocus.com/bid/55243/info

2012-08-28 Iranian Dark Coders webapps

WordPress Plugin Cloudsafe365 – ‘file’ Remote File Disclosure

source: https://www.securityfocus.com/bid/55241/info

2012-08-28 Jan Van Niekerk webapps

RV Shopping Cart – Cross-Site Request Forgery

# Exploit Title: RV Shopping cart CSRF Vulnerability

2012-08-28 DaOne webapps