php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Dell SonicWALL Scrutinizer 9.0.1 – ‘statusFilter.php?q’ SQL Injection

#!/usr/bin/python

2012-07-22 muts webapps

WordPress Plugin chenpress – Arbitrary File Upload

source: https://www.securityfocus.com/bid/54635/info

2012-07-21 Am!r webapps

X-Cart Gold 4.5 – ‘products_map.php?symb’ Cross-Site Scripting

######################################################################################

2012-07-21 muts webapps

Maian Survey – ‘/index.php’ URI redirection / Local File Inclusion

source: https://www.securityfocus.com/bid/54613/info

2012-07-20 PuN!Sh3r webapps

iBoutique 4.0 – ‘key’ SQL Injection

##############################################################################

2012-07-20 SecPod Research webapps

PHP-Nuke module (SPChat) – SQL Injection

## Owner : Pr0T3cT10n

2012-07-20 Yakir Wizman webapps

WebKit Cross-Site Scripting Filter – ‘Cross-Site ScriptingAuditor.cpp’ Security Bypass

source: https://www.securityfocus.com/bid/56570/info

2012-07-19 Tushar Dalvi webapps

CodeIgniter 2.1 – ‘xss_clean()’ Filter Security Bypass

source: https://www.securityfocus.com/bid/54620/info

2012-07-19 Krzysztof Kotowicz webapps

Joomla! Component com_hello – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/54611/info

2012-07-19 AJAX Security Team webapps

Nwahy Articles 2.2 – Cross-Site Request Forgery (Add Admin)

##########################################

2012-07-18 DaOne webapps

AVA VoIP – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/54591/info

2012-07-17 Ibrahim El-Sayed webapps

Forum Oxalis 0.1.2 – SQL Injection

#################################################

2012-07-17 Jean Pascal Pereira webapps

EmbryoCore CMS 1.03 – ‘loadcss.php’ Multiple Directory Traversal Vulnerabilities

source: https://www.securityfocus.com/bid/54470/info

2012-07-16 Sammy FORGIT webapps

Rama Zeiten CMS – ‘download.php’ Remote File Disclosure

source: https://www.securityfocus.com/bid/54467/info

2012-07-16 Sammy FORGIT webapps

web@all – ‘name’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54466/info

2012-07-16 Sammy FORGIT webapps

WordPress Plugin Post Recommendations – ‘abspath’ Remote File Inclusion

source: https://www.securityfocus.com/bid/54459/info

2012-07-16 Sammy FORGIT webapps

Simple Machines 2.0.2 – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/54456/info

2012-07-16 Benjamin Kunz Mejri webapps

Event Calender PHP – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/54455/info

2012-07-16 snup webapps

PBBoard CMS 2.1.4 – Multiple Vulnerabilities

Title:

2012-07-16 Vulnerability-Lab webapps

CakePHP 2.x < 2.2.0-RC2 - XML External Entity Injection

# Exploit title: CakePHP XXE injection

2012-07-16 Pawel Wylecial webapps

VamCart CMS 0.9 – Multiple Vulnerabilities

Title:

2012-07-16 Vulnerability-Lab webapps

WordPress Theme Diary/Notebook Site5 – Email Spoofing

#!/usr/bin/perl

2012-07-16 bwall webapps

Elite Bulletin Board – Multiple SQL Injections

source: https://www.securityfocus.com/bid/54452/info

2012-07-15 ToXiC webapps

Joomla! Component com_osproperty 2.0.2 – Unrestricted Arbitrary File Upload

_______________________________________________________________________________________

2012-07-14 D4NB4R webapps

Shopware 3.5 – SQL Injection

#!/usr/bin/php

2012-07-14 Kataklysmos webapps

WordPress Plugin Generic – Arbitrary File Upload

source: https://www.securityfocus.com/bid/54440/info

2012-07-13 KedAns-Dz webapps

Magento eCommerce – Local File Disclosure

SEC Consult Vulnerability Lab Security Advisory < 20120712-0 >

2012-07-13 SEC Consult webapps

Joomla! Component com_ksadvertiser – Remote File / Bypass Upload

############################################################################

2012-07-13 D4NB4R webapps

WordPress Plugin Resume Submissions & Job Postings 2.5.1 – Unrestricted Arbitrary File Upload

# Exploit Title: WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload

2012-07-13 Chris Kellum webapps

webpagetest 2.6 – Multiple Vulnerabilities

:::::::-. ... ::::::. :::.

2012-07-13 dun webapps

Phonalisa – Multiple HTML Injection / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54401/info

2012-07-12 Benjamin Kunz Mejri webapps

Reserve Logic 1.2 Booking CMS – Multiple Vulnerabilities

Title:

2012-07-12 Vulnerability-Lab webapps

Lc Flickr Carousel 1.0 – Local File Disclosure

# Exploit Title: Lc Flickr Carousel V1.0 => Local File Disclosure Vulnerability

2012-07-12 GoLd_M webapps

eCan 0.1 – Local File Disclosure

# Exploit Title: eCan v0.1 => Local File Disclosure Vulnerability

2012-07-12 GoLd_M webapps

House Style 0.1.2 – ‘readfile()’ Local File Disclosure

# Exploit Title: House Style 0.1.2 => readfile() Local File Disclosure Vulnerability

2012-07-12 GoLd_M webapps

Hastymail 2.1.1 RC1 – Command Injection (Metasploit)

##

2012-07-12 Metasploit webapps

Kajona – ‘getAllPassedParams()’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54391/info

2012-07-11 High-Tech Bridge SA webapps

WordPress Plugin WP-Predict 1.0 – Blind SQL Injection

# Exploit Title: WordPress WP-Predict v1.0 Blind SQL Injection

2012-07-10 Chris Kellum webapps

Flogr – ‘tag’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54354/info

2012-07-09 Nafsh webapps

MGB – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/54348/info

2012-07-09 Stefan Schurtz webapps

Basilic 1.5.14 – ‘diff.php’ Arbitrary Command Execution (Metasploit)

##

2012-07-09 Metasploit webapps

Tiki Wiki CMS Groupware 8.3 – ‘Unserialize()’ PHP Code Execution (Metasploit)

##

2012-07-09 Metasploit webapps

sflog! – ‘section’ Local File Inclusion

source: https://www.securityfocus.com/bid/54334/info

2012-07-06 dun webapps

WordPress Plugin Knews Multilingual Newsletters – Cross-Site Scripting

source: https://www.securityfocus.com/bid/54330/info

2012-07-06 Sammy FORGIT webapps

WordPress Plugin church_admin – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54329/info

2012-07-06 Sammy FORGIT webapps

WordPress Plugin SocialFit – ‘msg’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54320/info

2012-07-06 Sammy FORGIT webapps

Webmatic 3.1.1 – Blind SQL Injection

Advisory ID: HTB23096

2012-07-06 High-Tech Bridge SA webapps

Event Script PHP 1.1 CMS – Multiple Vulnerabilities

Title:

2012-07-06 Vulnerability-Lab webapps

sflog! 1.00 – Multiple Vulnerabilities

:::::::-. ... ::::::. :::.

2012-07-06 dun webapps

WordPress Plugin PHPFreeChat – ‘url’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54332/info

2012-07-05 Sammy FORGIT webapps