php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

TinyCMS 1.3 – ‘/admin/admin.php?do’ Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/53761/info

2012-06-03 KedAns-Dz webapps

TinyCMS 1.3 – ‘index.php?page’ Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/53761/info

2012-06-03 KedAns-Dz webapps

TinyCMS 1.3 – Arbitrary File Upload / Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/53761/info

2012-06-03 KedAns-Dz webapps

Vanilla Forums 2.0.18.4 – Tagging Persistent Cross-Site Scripting

# Title: Vanilla Tagging Stored XSS

2012-06-03 Henry Hoggard webapps

vanilla forums poll plugin 0.9 – Persistent Cross-Site Scripting

# Title: Vanilla Poll 0.9 Stored XSS

2012-06-03 Henry Hoggard webapps

PHP 5.3.10 – ‘spl_autoload_call()’ Local Denial of Service

2012-06-03 Yakir Wizman dos

PHP 5.3.10 – ‘spl_autoload_register()’ Local Denial of Service

2012-06-03 Yakir Wizman dos

PHP 5.3.10 – ‘spl_autoload()’ Local Denial of Service

2012-06-03 Yakir Wizman dos

Log1 CMS – ‘writeInfo()’ PHP Code Injection (Metasploit)

##

2012-06-03 Metasploit webapps

Vanilla Forum Tagging Plugin Enchanced 1.0.1 – Persistent Cross-Site Scripting

# Title: Vanilla Tagging Enchanced 1.0.1 Stored XSS

2012-06-02 Henry Hoggard webapps

VoipNow Professional 2.5.3 – ‘nsextt’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53759/info

2012-06-01 Aboud-el webapps

Membris 2.0.1 – Multiple Vulnerabilities

###################################

2012-06-01 Dr.abolalh webapps

4PSA VoIPNow Professional 2.5.3 – Multiple Vulnerabilities

4PSA VoipNow Professional 2.5.3 Reflected XSS / CSRF (Add Reseller) Vulnerabilities

2012-06-01 Aboud-el webapps

PHP4dvd – ‘config.php’ PHP Code Injection

source: https://www.securityfocus.com/bid/60257/info

2012-05-31 CWH Underground webapps

WHMCompleteSolution (WHMCS) 5.0 – ‘KnowledgeBase.php?search’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53740/info

2012-05-31 Shadman Tanjim webapps

WHMCompleteSolution (WHMCS) 5.0 – Cross-Site Request Forgery (Multiple Application Function)

source: https://www.securityfocus.com/bid/53740/info

2012-05-31 Shadman Tanjim webapps

Supernews 2.6.1 – ‘noticias.php?cat’ SQL Injection

##########################################################################

2012-05-31 Yakir Wizman webapps

NewsAdd 1.0 – ‘lerNoticia.php?id’ SQL Injection

##########################################################################

2012-05-31 Yakir Wizman webapps

PHP Volunteer Management System 1.0.2 – Arbitrary File Upload (Metasploit)

##

2012-05-31 Metasploit webapps

Simple Web Content Management System 1.1 < 1.3 - Multiple SQL Injections

######################################################################################

2012-05-30 loneferret webapps

Ganesha Digital Library 4.0 – Multiple Vulnerabilities

=====================================================

2012-05-30 X-Cisadane webapps

NewsAdd 1.0 – Multiple SQL Injections

# Exploit Title: NewsAdd

2012-05-30 WhiteCollarGroup webapps

WHMCompleteSolution (WHMCS) – ‘boleto_bb.php’ SQL Injection

source: https://www.securityfocus.com/bid/53711/info

2012-05-29 dex webapps

PBBoard 2.1.4 – Multiple SQL Injections

# Title: PBBoard v2.1.4 multiple SQLi Vulnerabilities

2012-05-29 loneferret webapps

Yamamah Photo Gallery 1.1 – Database Information Disclosure

source: https://www.securityfocus.com/bid/53709/info

2012-05-28 L3b-r1'z webapps

PHP Volunteer Management System 1.0.2 – Multiple SQL Injections

# Title: PHP Volunteer Management System v 1.0.2 multiple SQLi Vulnerabilities

2012-05-28 loneferret webapps

PHP Volunteer Management System 1.0.2 – Multiple Vulnerabilities

# Exploit Title: PHP Volunteer Management System v 1.0.2 Multiple Vulnerabilities

2012-05-28 Ashoo webapps

PBBoard 2.1.4 – Local File Inclusion

################################################################################################

2012-05-28 n4ss1m webapps

Nilehoster Topics Viewer 2.3 – Multiple SQL Injections / Local File Inclusion

source: https://www.securityfocus.com/bid/53708/info

2012-05-27 n4ss1m webapps

AzDGDatingMedium 1.9.3 – Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/53692/info

2012-05-27 AkaStep webapps

b2ePms 1.0 – Multiple SQL Injection Vulnerabilities

# Title: b2ePMS 1.0 multiple SQLi Vulnerabilities

2012-05-27 loneferret webapps

WeBid – ‘converter.php’ Remote PHP Code Injection (Metasploit)

##

2012-05-27 Metasploit webapps

Small-Cms – ‘hostname’ Remote PHP Code Injection

source: https://www.securityfocus.com/bid/53703/info

2012-05-26 L3b-r1'z webapps

phpList 2.10.9 – ‘Sajax.php’ PHP Code Injection

source: https://www.securityfocus.com/bid/53693/info

2012-05-26 L3b-r1'z webapps

DynPage 1.0 – ‘ckfinder’ Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/53696/info

2012-05-25 KedAns-Dz webapps

SocialEngine 4.2.2 – Multiple Vulnerabilities

Social Engine 4.2.2 Multiples Vulnerabilities

2012-05-25 i4k webapps

appRain CMF – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2012-05-25 Metasploit webapps

phpCollab 2.5 – Direct Request Multiple Protected Page Access

source: https://www.securityfocus.com/bid/53675/info

2012-05-24 team ' & 1=1-- webapps

PHPCollab 2.5 – ‘uploadfile.php’ Crafted Request Arbitrary Non-PHP File Upload

source: https://www.securityfocus.com/bid/53675/info

2012-05-24 team ' & 1=1-- webapps

Jaow 2.4.5 – Blind SQL Injection

# Exploit Title: Jaow

2012-05-24 kallimero webapps

Yellow Duck Framework 2.0 Beta1 – Local File Disclosure

source: https://www.securityfocus.com/bid/53674/info

2012-05-23 L3b-r1'z webapps

pragmaMx 1.12.1 – ‘/includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php?img_url’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53669/info

2012-05-23 High-Tech Bridge SA webapps

pragmaMx 1.12.1 – ‘modules.php’ URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/53669/info

2012-05-23 High-Tech Bridge SA webapps

Pligg CMS 1.x – ‘module.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53662/info

2012-05-23 High-Tech Bridge SA webapps

Ajaxmint Gallery 1.0 – Local File Inclusion

source: https://www.securityfocus.com/bid/53659/info

2012-05-23 AkaStep webapps

phpCollab 2.5 – Database Backup Information Disclosure

source: https://www.securityfocus.com/bid/53656/info

2012-05-23 team ' & 1=1-- webapps

Ruubikcms 1.1.x – Cross-Site Scripting / Information Disclosure / Directory Traversal

source: https://www.securityfocus.com/bid/53655/info

2012-05-23 AkaStep webapps

Plogger Photo Gallery – SQL Injection

source: https://www.securityfocus.com/bid/53644/info

2012-05-22 Eyup CELIK webapps

PHPhq.Net phAlbum 1.5.1 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53648/info

2012-05-21 Eyup CELIK webapps

Yandex.Server 2010 9.0 – ‘text’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53622/info

2012-05-21 MustLive webapps