php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Wolfcms 0.75 – Cross-Site Request Forgery / Cross-Site Scripting
+--------------------------------------------------------------------------------------------------------------------...
FreePBX 2.10.0 / Elastix 2.2.0 – Remote Code Execution
#!/usr/bin/python
FreePBX 2.9.0/2.10.0 – Multiple Vulnerabilities
Product: FreePBX
phpMoneyBooks 1.0.2 – Local File Inclusion
'phpMoneyBooks' Local File Inclusion (CVE-2012-1669)
PHP Grade Book 1.9.4 – SQL Database Export
'PHP Grade Book' Unauthenticated SQL Database Export (CVE-2012-1670)
vBShout – Persistent Cross-Site Scripting
# Exploit Title: vBShout persistent XSS 0day
Open Journal Systems (OJS) 2.3.6 – ‘rfiles.php’ Traversal Arbitrary File Manipulation
source: https://www.securityfocus.com/bid/52666/info
Open Journal Systems (OJS) 2.3.6 – Multiple Script Arbitrary File Upload
source: https://www.securityfocus.com/bid/52666/info
Open Journal Systems (OJS) 2.3.6 – ‘/lib/pkp/classes/core/String.inc.php?String::stripUnsafeHtml()’ Method Cross-Site Scripting
source: https://www.securityfocus.com/bid/52666/info
Open Journal Systems (OJS) 2.3.6 – ‘index.php?authors[][url]’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52666/info
CMSimple 3.3 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52661/info
phpList 2.10.17 – SQL Injection / Cross-Site Scripting
phpList 2.10.17 Remote SQL Injection and XSS Vulnerability
GNUBoard 4.34.20 – ‘download.php’ HTML Injection
source: https://www.securityfocus.com/bid/52622/info
OneFileCMS – Failure to Restrict URL Access
# Exploit Title: OneFileCMS - Failure to Restrict URL Access
ClassifiedsGeek.com Vacation Packages – ‘listing_search’ SQL Injection
source: https://www.securityfocus.com/bid/52637/info
Joomla! 2.5.0 < 2.5.1 - Blind SQL Injection
#!/usr/bin/perl
Pre Printing Press – ‘product_desc.php?pid’ SQL Injection
========================================================================================
PRE PRINTING STUDIO – SQL Injection
# Exploit Title: PRE PRINTING STUDIO Sql Injection
ASP Classifieds – SQL Injection
# Exploit Title: ASP Classifieds Sql Injection
JPM Article Script 6 – ‘page2’ SQL Injection
source: https://www.securityfocus.com/bid/52528/info
FlexCMS 3.2.1 – Multiple Cross-Site Request Forgery Vulnerabilities
+--------------------------------------------------------------------------------------------------------------------...
FlexCMS 3.2.1 – Persistent Cross-Site Scripting
#Persistent XSS in FLEXCMS 3.2.1
OneFileCMS 1.1.5 – Local File Inclusion
# Exploit Title: OneFileCMS v.1.1.5 Local File Inclusion Vulnerability
Max’s PHP Photo Album 1.0 – ‘id’ Local File Inclusion
source: https://www.securityfocus.com/bid/52474/info
Max’s Guestbook 1.0 – Multiple Remote Vulnerabilities
source: https://www.securityfocus.com/bid/52471/info
asaanCart – Cross-Site Scripting / Local File Inclusion
______________________________________________________________________________________
Encaps PHP Gallery – SQL Injection
# Exploit Title: Encaps PHP Gallery SQL Injection
Max Guestbook 1.0 – Multiple Vulnerabilities
# Exploit Title: Maxs Guestbook
Simple Posting System – Multiple Vulnerabilities
# Exploit Title: Simple Posting System [Multple]
ModX 2.2.0 – Multiple Vulnerabilities
# Exploit Title: Modx 2.2.0 LFI and Full Path Disclosure
Omnistar Live – Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/52438/info
4Images Image Gallery Management System – Cross-Site Request Forgery
########################################################################################################
Cycade Gallery – SQL Injection
# Exploit Title: Cycade Gallery SQL Injection Exploit
PBLang Bulletin Board System – Local File Inclusion
||\\ || || || |-\\ //-| ____ ________ __________
Wikidforum 2.10 – Advanced Search Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52425/info
Wikidforum 2.10 – Search Field Cross-Site Scripting
source: https://www.securityfocus.com/bid/52425/info
Wikidforum 2.10 – Advanced Search Multiple Field SQL Injections
source: https://www.securityfocus.com/bid/52425/info
Synology Photo Station 5 DSM 3.2 – ‘photo_one.php’ Script Cross-Site Scripting
source: https://www.securityfocus.com/bid/52416/info
Acal Calendar 2.2.6 – Cross-Site Request Forgery
# Exploit Title: [Acal calendar 2.2.6 CSRF Vulnerability]
Saman Portal – Local File Inclusion
===========================================================
CreateVision CMS – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/52648/info
Singapore 0.10.1 – ‘gallery’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52399/info
PHP Address Book 6.2.12 – Multiple Vulnerabilities
Advisory: PHP Address Book 6.2.12 Multiple security vulnerabilities
PHPMyVisites 2.4 – ‘PHPmv2/index.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52377/info
ToendaCMS 1.6.2 – ‘/setup/index.php?site’ Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/52350/info
LeKommerce – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/52347/info
RazorCMS 1.2.1 Stable – Cross-Site Request Forgery (Delete Web Pages)
+--------------------------------------------------------------------------------------------------------------------...