php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Chevereto 1.91 – ‘/Upload/engine.php?v’ Traversal Arbitrary File Enumeration

source: https://www.securityfocus.com/bid/53448/info

2012-05-10 AkaStep webapps

Chevereto 1.91 – ‘/Upload/engine.php?v’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53448/info

2012-05-10 AkaStep webapps

eLearning server 4g – Multiple Vulnerabilities

# Exploit Title: eLearning Server Multiple Remote Vulnerabilities

2012-05-10 Andrey Komarov webapps

Kerio WinRoute Firewall Web Server < 6 - Source Code Disclosure

# Exploit Title: Kerio WinRoute Firewall Embedded Web ServerVersion: Source

2012-05-10 Andrey Komarov webapps

PivotX 2.3.2 – ‘ajaxhelper.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53434/info

2012-05-09 High-Tech Bridge SA webapps

OrangeHRM 2.7 RC – ‘index.php?URI’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53433/info

2012-05-09 High-Tech Bridge SA webapps

OrangeHRM 2.7 RC – ‘/templates/hrfunct/emppop.php?sortOrder1’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53433/info

2012-05-09 High-Tech Bridge SA webapps

OrangeHRM 2.7 RC – ‘/plugins/ajaxCalls/haltResumeHsp.php?newHspStatus’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53433/info

2012-05-09 High-Tech Bridge SA webapps

OrangeHRM 2.7 RC – ‘/plugins/ajaxCalls/haltResumeHsp.php?hspSummaryId’ SQL Injection

source: https://www.securityfocus.com/bid/53433/info

2012-05-09 High-Tech Bridge SA webapps

X7 Chat 2.0.5.1 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit

2012-05-09 DennSpec webapps

PHP Enter 4.1.2 – ‘banners.php’ PHP Code Injection

source: https://www.securityfocus.com/bid/53426/info

2012-05-08 L3b-r1'z webapps

S9Y Serendipity 1.6 – ‘Backend’ Cross-Site Scripting / SQL Injection

Advisory: Serendipity 1.6 Backend Cross-Site Scripting and SQL-Injection vulnerability

2012-05-08 Stefan Schurtz webapps

JibberBook 2.3 – ‘Login_form.php’ Authentication Bypass

source: https://www.securityfocus.com/bid/53413/info

2012-05-07 L3b-r1'z webapps

Ramui Forum Script – ‘query’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53411/info

2012-05-07 3spi0n webapps

Trombinoscope 3.x – ‘photo.php’ Server SQL Injection

source: https://www.securityfocus.com/bid/53398/info

2012-05-07 Ramdan Yantu webapps

PHP Agenda 2.2.8 – SQL Injection

# Title:Simple PHP Agenda 2.2.8 SQLi Vulnerability

2012-05-07 loneferret webapps

myCare2x CMS – Multiple Vulnerabilities

Title:

2012-05-07 Vulnerability-Lab webapps

Myre Real Estate Mobile 2012/2 – Multiple Vulnerabilities

Title:

2012-05-07 Vulnerability-Lab webapps

Genium CMS 2012/Q2 – Multiple Vulnerabilities

Title:

2012-05-07 Vulnerability-Lab webapps

Schneider Electric Telecontrol Kerweb 3.0.0/6.0.0 – ‘kw.dll’ HTML Injection

source: https://www.securityfocus.com/bid/53409/info

2012-05-06 phocean webapps

PHP < 5.3.12 / < 5.4.2 - CGI Argument Injection

######################################################################################

2012-05-05 rayh4c remote

PHP 5.3.12/5.4.2 – CGI Argument Injection (Metasploit)

##

2012-05-04 Metasploit remote

Symantec Web Gateway – Cross-Site Scripting

# Exploit Title: Symantec Web Gateway Cross Site Scripting

2012-05-04 B00y@ webapps

PluXml 5.1.5 – Local File Inclusion

Advisory ID: HTB23086

2012-05-03 High-Tech Bridge SA webapps

Baby Gekko CMS 1.1.5c – Multiple Persistent Cross-Site Scripting Vulnerabilities

Baby Gekko CMS v1.1.5c Multiple Stored Cross-Site Scripting Vulnerabilities

2012-05-03 LiquidWorm webapps

PHP-decoda – ‘Video Tag’ Cross-Site Scripting

Advisory: php-decoda: Cross-Site Scripting in Video Tags

2012-05-02 RedTeam Pentesting webapps

OpenConf 4.11 – ‘/author/edit.php’ Blind SQL Injection

2012-05-02 EgiX webapps

STRATO NewsLetter Manager – Directory Traversal

STRATO Newsletter Manager is vulnerable against Directory Traversal

2012-05-01 Zero X webapps

MyClientBase 0.12 – Multiple Vulnerabilities

Title:

2012-05-01 Vulnerability-Lab webapps

opencart 1.5.2.1 – Multiple Vulnerabilities

Author: Janek Vind "waraxe"

2012-05-01 waraxe webapps

GENU CMS 2012.3 – Multiple SQL Injections

Title:

2012-05-01 Vulnerability-Lab webapps

WordPress Plugin Zingiri Web Shop 2.4.2 – Persistent Cross-Site Scripting

##############################################################################

2012-05-01 Mehmet Ince webapps

WordPress Plugin WPsc MijnPress – ‘rwflush’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53302/info

2012-04-30 Am!r webapps

DIY CMS 1.0 Poll – Multiple Vulnerabilities

Title:

2012-04-30 Vulnerability-Lab webapps

Opial CMS 2.0 – Multiple Vulnerabilities

Title:

2012-04-30 Vulnerability-Lab webapps

Car Portal CMS 3.0 – Multiple Vulnerabilities

Title:

2012-04-30 Vulnerability-Lab webapps

Alienvault Open Source SIEM (OSSIM) 3.1 – Multiple Vulnerabilities

#####################################################################################

2012-04-29 Stefan Schurtz webapps

Soco CMS – Local File Inclusion

#######################################################################################

2012-04-29 BHG Security Center webapps

Shawn Bradley PHP Volunteer Management 1.0.2 – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/53301/info

2012-04-28 eidelweiss webapps