php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

WespaJuris 3.0 – Multiple Vulnerabilities

2012-08-08 WhiteCollarGroup webapps

Getsimple CMS 3.1.2 – ‘path’ Local File Inclusion

source: https://www.securityfocus.com/bid/54866/info

2012-08-07 PuN!Sh3r webapps

PBBoard – Authentication Bypass

source: https://www.securityfocus.com/bid/54862/info

2012-08-07 i-Hmx webapps

TCExam 11.2.x – ‘/admin/code/tce_edit_question.php?subject_module_id’ SQL Injection

source: https://www.securityfocus.com/bid/54861/info

2012-08-07 Chris Cooper webapps

TCExam 11.2.x – ‘/admin/code/tce_edit_answer.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/54861/info

2012-08-07 Chris Cooper webapps

Dir2web – ‘/system/src/dispatcher.php?oid’ SQL Injection

source: https://www.securityfocus.com/bid/54845/info

2012-08-07 Daniel Correa webapps

YT-Videos Script – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/54859/info

2012-08-06 3spi0n webapps

Joomla! Component com_photo – Multiple SQL Injections

source: https://www.securityfocus.com/bid/54814/info

2012-08-06 Chokri Ben Achor webapps

Mibew Messenger 1.6.4 – ‘threadid’ SQL Injection

source: https://www.securityfocus.com/bid/54857/info

2012-08-05 Ucha Gobejishvili webapps

WordPress Plugin Effective Lead Management 3.0.0 – Persistent Cross-Site Scripting

# Exploit Title: WP Lead Management v3.0.0 Persistent XSS

2012-08-05 Chris Kellum webapps

Tickets CAD 2.20G – Multiple Vulnerabilities

# Exploit Title: Tickets CAD 2.20G Multiple Vulnerabilities

2012-08-05 chap0 webapps

Islamnt Islam Forum Script 1.2 – Blind SQL Injection

2012-08-05 s3n4t00r webapps

Wiki Web Help – ‘configpath’ Remote File Inclusion

source: https://www.securityfocus.com/bid/55387/info

2012-08-04 L0n3ly-H34rT webapps

Open Constructor – ‘confirm.php?q’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54822/info

2012-08-04 Lorenzo Cantoni webapps

Open Constructor – ‘/data/file/edit.php?result’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54822/info

2012-08-04 Lorenzo Cantoni webapps

Open Constructor – ‘/users/users.php?keyword’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54822/info

2012-08-04 Lorenzo Cantoni webapps

Elefant CMS – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54805/info

2012-08-03 PuN!Sh3r webapps

WordPress Theme ShopperPress – SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/55062/info

2012-08-02 Benjamin Kunz Mejri webapps

PHP 5.4.3 – PDO Memory Access Violation Denial of Service

source: https://www.securityfocus.com/bid/54777/info

2012-08-02 0x721427D8 dos

Mahara 1.4.1 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/54776/info

2012-08-02 anonymous webapps

am4ss Support System 1.2 – PHP Code Injection

2012-08-02 i-Hmx webapps

am4ss 1.2 – Multiple Vulnerabilities

###########################################

2012-08-02 s3n4t00r webapps

Joomla! Component com_joomgalaxy 1.2.0.4 – Multiple Vulnerabilities

_______________________________________________________________________________________

2012-08-02 D4NB4R webapps

WebPageTest – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2012-08-02 Metasploit webapps

tekno.Portal 0.1b – ‘link.php’ SQL Injection

source: https://www.securityfocus.com/bid/54786/info

2012-08-01 Socket_0x03 webapps

WordPress Plugin G-Lock Double Opt-in Manager – SQL Injection

source: https://www.securityfocus.com/bid/54767/info

2012-08-01 BEASTIAN webapps

Distimo Monitor – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54757/info

2012-08-01 Benjamin Kunz Mejri webapps

ManageEngine Application Manager 10 – Multiple Vulnerabilities

Title:

2012-08-01 Vulnerability-Lab webapps

ManageEngine Mobile Application Manager 10 – SQL Injection

Title:

2012-08-01 Vulnerability-Lab webapps

Joomla! Component com_movm – SQL Injection

_______________________________________________________________________________________

2012-08-01 D4NB4R webapps

pBot – Remote Code Execution

#!/usr/bin/perl

2012-08-01 bwall remote

Joomla! Component com_niceajaxpoll 1.3.0 – SQL Injection

############################################################

2012-08-01 Patrick de Brouwer webapps

Limny – ‘index.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/54753/info

2012-07-31 L0n3ly-H34rT webapps

Scrutinizer 9.0.1.19899 – Arbitrary File Upload

source: https://www.securityfocus.com/bid/54726/info

2012-07-30 Mario Ceballos webapps

Scrutinizer 9.0.1.19899 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54725/info

2012-07-30 Mario Ceballos webapps

Symantec Web Gateway 5.0.3.18 – ‘deptUploads_data.php?groupid’ Blind SQL Injection

#!/usr/bin/python

2012-07-30 Kc57 webapps

eNdonesia – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/54741/info

2012-07-29 Crim3R webapps

JW Player – ‘playerready’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54739/info

2012-07-29 MustLive webapps

ocPortal 7.1.5 – ‘redirect’ Open Redirection

source: https://www.securityfocus.com/bid/54715/info

2012-07-29 Aung Khant webapps

phpBB – Multiple SQL Injections

source: https://www.securityfocus.com/bid/54734/info

2012-07-28 HauntIT webapps

CuteFlow 2.11.2 – Arbitrary File Upload (Metasploit)

##

2012-07-27 Metasploit webapps

tekno.Portal 0.1b – ‘anket.php’ SQL Injection

source: https://www.securityfocus.com/bid/54698/info

2012-07-25 Socket_0x03 webapps

Joomla! Component Odudeprofile 2.8 – ‘profession’ SQL Injection

source: https://www.securityfocus.com/bid/54677/info

2012-07-25 Daniel Barragan webapps

phpProfiles – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/54660/info

2012-07-24 L0n3ly-H34rT webapps

Zabbix 2.0.1 – Session Extractor

#!/usr/bin/python

2012-07-24 muts webapps

WordPress Plugin Front End Upload 0.5.4.4 – Arbitrary ‘.PHP’ File Upload

# Exploit Title: WordPress Front End Upload v0.5.4.4 Arbitrary PHP File Upload Vulnerability

2012-07-24 Chris Kellum webapps

Alienvault Open Source SIEM (OSSIM) 3.1 – Reflected Cross-Site Scripting / Blind SQL Injection

#!/usr/bin/python

2012-07-23 muts webapps

MySQL Squid Access Report 2.1.4 – HTML Injection

# Exploit Title: MySQL Squid Access Report 2.1.4 / HTML Injection#

2012-07-23 Daniel Godoy webapps

Symantec Web Gateway 5.0.3.18 – Blind SQL Injection Backdoor via MySQL Triggers

######################################################################################

2012-07-23 muts webapps

EGallery – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2012-07-23 Metasploit webapps