php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

RV Article Publisher – Cross-Site Request Forgery

# Exploit Title: RV Article publisher CSRF Vulnerability

2012-08-28 DaOne webapps

mieric AddressBook 1.0 – SQL Injection

-----------------------------------------------------

2012-08-28 Jean Pascal Pereira webapps

CommPort 1.01 – Multiple Vulnerabilities

--------------------------------------------

2012-08-28 Jean Pascal Pereira webapps

Joomla! Component Komento – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/55212/info

2012-08-27 Crim3R webapps

IBM Rational ClearQuest 8.0 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/55125/info

2012-08-27 anonymous webapps

aoop CMS 0.3.6 – Multiple Vulnerabilities

Inshell Security Advisory

2012-08-27 Julien Ahrens webapps

xt:Commerce VEYTON 4.0.15 – ‘products_name_de’ Script Insertion

xt:Commerce VEYTON 4.0.15 (products_name_de) Script Insertion Vulnerability

2012-08-27 LiquidWorm webapps

WordPress Plugin Count Per Day 3.2.3 – Cross-Site Scripting

###################################################################################

2012-08-27 Crim3R webapps

Vlinks 2.0.3 – ‘id’ SQL Injection

#########################################################################################

2012-08-27 JIKO webapps

web@all CMS 2.0 – Multiple Vulnerabilities

web@all CMS 2.0 (_order) SQL Injection Vulnerability

2012-08-27 LiquidWorm webapps

XWiki 4.2-milestone-2 – Multiple Persistent Cross-Site Scripting Vulnerabilities

# Exploit Title: Multiple Stored XSS Vulnerabilities in XWiki.

2012-08-27 Shai rod webapps

Wiki Web Help 0.3.9 – Multiple Persistent Cross-Site Scripting Vulnerabilities

# Exploit Title: Multiple Stored XSS Vulnerabilities in Wiki Web Help.

2012-08-27 Shai rod webapps

Mihalism Multi Host – ‘users.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55237/info

2012-08-25 Explo!ter webapps

LibGuides – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55222/info

2012-08-25 Crim3R webapps

WordPress Plugin Finder – ‘order’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55217/info

2012-08-25 Crim3R webapps

PHP Web Scripts Text Exchange Pro – ‘page’ Local File Inclusion

source: https://www.securityfocus.com/bid/55205/info

2012-08-24 Yakir Wizman webapps

businesswiki 2.5rc3 – Persistent Cross-Site Scripting / Arbitrary file upload

#!/usr/bin/python

2012-08-24 Shai rod webapps

Easy Banner Pro – ‘index.php’ Local File Inclusion

-----------------------------------------------------------

2012-08-24 Yakir Wizman webapps

AB Banner Exchange – ‘index.php’ Local File Inclusion

-----------------------------------------------------------

2012-08-24 Yakir Wizman webapps

Text Exchange Pro – ‘index.php’ Local File Inclusion

-----------------------------------------------------------

2012-08-24 Yakir Wizman webapps

Ad Manager Pro – Multiple Vulnerabilities

-----------------------------------------------------------

2012-08-24 Yakir Wizman webapps

webpa 1.1.0.1 – Multiple Vulnerabilities

:::::::-. ... ::::::. :::.

2012-08-24 dun webapps

PHP Web Scripts Ad Manager Pro – ‘page’ Local File Inclusion

source: https://www.securityfocus.com/bid/55189/info

2012-08-23 Corrado Liotta webapps

KindEditor – ‘name’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55172/info

2012-08-23 LiquidWorm webapps

Monstra CMS 1.2.1 – Multiple HTML Injection Vulnerabilities

Monstra 1.2.1 Multiple HTML Injection Vulnerabilities

2012-08-23 LiquidWorm webapps

SiNG cms – ‘Password.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55168/info

2012-08-23 LiquidWorm webapps

Ad Manager Pro 4 – Local File Inclusion

-=[--------------------ADVISORY-------------------]=-

2012-08-23 CorryL webapps

op5 Monitoring 5.4.2 – VM Applicance Multiple Vulnerabilities

# Author: loneferret of Offensive Security

2012-08-23 loneferret webapps

letodms 3.3.6 – Multiple Vulnerabilities

# Exploit Title: LetoDMS 3.3.6 Multiple Reflected/Stored XSS & Password Change CSRF Vulnerability

2012-08-23 Shai rod webapps

WordPress Plugin Monsters Editor for WP Super Edit – Arbitrary File Upload

source: https://www.securityfocus.com/bid/55175/info

2012-08-22 Crim3R webapps

WordPress Plugin Rich Widget – Arbitrary File Upload

source: https://www.securityfocus.com/bid/55174/info

2012-08-22 Crim3R webapps

1024 CMS 2.1.1 – ‘p’ SQL Injection

source: https://www.securityfocus.com/bid/55170/info

2012-08-22 kallimero webapps

Joomla! Component CiviCRM – Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/55166/info

2012-08-22 Crim3R webapps

Banana Dance – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/55153/info

2012-08-22 Canberk BOLAT webapps

OrderSys 1.6.4 – Multiple SQL Injections / Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55147/info

2012-08-22 Canberk BOLAT webapps

Jara 1.6 – Multiple SQL Injections / Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55145/info

2012-08-22 Canberk BOLAT webapps

XODA 0.4.5 – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2012-08-22 Metasploit webapps

VamCart 0.9 – Cross-Site Request Forgery

# Exploit Title: VamCart v0.9 CSRF Vulnerability

2012-08-22 DaOne webapps

OpenDocMan 1.2.6.1 – Cross-Site Request Forgery (Password Change)

# Exploit Title: OpenDocMan Password Change CSRF

2012-08-22 Shai rod webapps

JPM Article Blog Script 6 – ‘tid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55112/info

2012-08-21 Mr.0c3aN webapps

Clipbucket 2.5 – Blind SQL Injection

# Author: loneferret of Offensive Security

2012-08-21 loneferret webapps

Clipbucket 2.5 – Directory Traversal

# Author: loneferret of Offensive Security

2012-08-21 loneferret webapps

XODA Document Management System 0.4.5 – Cross-Site Scripting / Arbitrary File Upload

# Exploit Title: XODA Document Management System Stored XSS & Arbitrary File Upload Vulnerability.

2012-08-21 Shai rod webapps

uebimiau webmail 2.7.2 – Persistent Cross-Site Scripting

#!/usr/bin/python

2012-08-20 Shai rod webapps

YourArcadeScript 2.4 – ‘index.php?id’ SQL Injection

##########################################

2012-08-20 DaOne webapps

Hivemail Webmail – Multiple Persistent Cross-Site Scripting Vulnerabilities

#!/usr/bin/python

2012-08-20 Shai rod webapps

PG Portal Pro – Cross-Site Request Forgery

###########################################################

2012-08-20 Noxious webapps

GWebmail 0.7.3 – Cross-Site Scripting / Local File Inclusion / Remote Code Execution

#!/usr/bin/python

2012-08-20 Shai rod webapps

Clipbucket 2.5 – Cross-Site Request Forgery

##########################################

2012-08-20 DaOne webapps

T-dah Webmail – Cross-Site Request Forgery / Persistent Cross-Site Scripting

# -----------------------------------------------------------

2012-08-20 Yakir Wizman webapps