php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Supernews 2.6.1 – SQL Injection

2012-05-21 WhiteCollarGroup webapps

Vanilla FirstLastNames 1.3.2 Plugin – Persistent Cross-Site Scripting

# Title: Vanilla FirstLastNames 1.3.2 Plugin Persistant XSS Vulnerability

2012-05-21 Henry Hoggard webapps

Vanilla Forums About Me Plugin – Persistent Cross-Site Scripting

# Title: Vanilla About Me Plugin Persistant XSS Vulnerability

2012-05-21 Henry Hoggard webapps

PHP 5.4.3 – ‘com_event_sink’ Denial of Service

2012-05-21 condis dos

PHP 5.4.3 – wddx_serialize_* / stream_bucket_* Variant Object Null Ptr Dereference

2012-05-21 condis dos

AZ Photo Album – Cross-Site Scripting / Arbitrary File Upload

source: https://www.securityfocus.com/bid/53641/info

2012-05-20 Eyup CELIK webapps

Concrete5 CMS FlashUploader – Arbitrary ‘.SWF’ File Upload

source: https://www.securityfocus.com/bid/53640/info

2012-05-20 AkaStep webapps

Concrete CMS < 5.5.21 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/53640/info

2012-05-20 AkaStep webapps

FreeNAC 3.02 – SQL Injection / Cross-Site Scripting

FreeNAC version 3.02 SQL Injection and XSS Vulnerabilties

2012-05-19 blake webapps

PHP Address Book 7.0.0 – Multiple Vulnerabilities

##################################################################################

2012-05-19 Stefan Schurtz webapps

Active Collab ‘chat module’ < 2.3.8 - Remote PHP Code Injection (Metasploit)

##

2012-05-19 Metasploit remote

Vanilla Forums LatestComment 1.1 Plugin – Persistent Cross-Site Scripting

# Title: Vanilla LatestComment 1.1 Plugin Persistant XSS Vulnerability

2012-05-18 Henry Hoggard webapps

PHP Address Book 7.0 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53598/info

2012-05-17 Stefan Schurtz webapps

ArtiPHP 5.5.0 Neo – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53586/info

2012-05-17 Gjoko Krstic webapps

Unijimpe Captcha – ‘captchademo.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53585/info

2012-05-16 Daniel Godoy webapps

backupDB() 1.2.7a – ‘onlyDB’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53575/info

2012-05-16 LiquidWorm webapps

SiliSoftware PHPThumb() 1.7.11-201108081537 – ‘/demo/PHPThumb.demo.random.php?dir’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53572/info

2012-05-16 Gjoko Krstic webapps

SiliSoftware PHPThumb() 1.7.11-201108081537 – ‘/demo/PHPThumb.demo.showpic.php?title’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53572/info

2012-05-16 Gjoko Krstic webapps

LongTail JW Player – ‘debug’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53554/info

2012-05-16 gainover webapps

Artiphp CMS 5.5.0 – Database Backup Disclosure

2012-05-16 LiquidWorm webapps

Axous 1.1.1 – Cross-Site Request Forgery / Persistent Cross-Site Scripting

+-----------------------------------------------------------------------------------------------------------+

2012-05-16 Ivano Binetti webapps