DFLabs PTK 1.0.5 – Steal Authentication Credentials
+--------------------------------------------------------------------------------------------------------------------...
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
LimeSurvey (PHPSurveyor 1.91+ stable) – Blind SQL Injection
# Exploit Title: LimeSurvey Blind SQL injection
Brim < 2.0.0 - SQL Injection
BRIM < 2.0.0 SQL InjectionExploit information
CPG Dragonfly CMS 9.3.3.0 – Multiple Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52100/info
Dolphin 7.0.x – ‘explanation.php?explain’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52088/info
Dolphin 7.0.x – ‘viewFriends.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52088/info
Fork CMS 3.2.5 – Multiple Vulnerabilities
+--------------------------------------------------------------------------------------------------------------------...
Joomla! Component Machine – Multiple SQL Injections
source: https://www.securityfocus.com/bid/52095/info
TestLink – Multiple SQL Injections
source: https://www.securityfocus.com/bid/52086/info
F*EX 20100208/20111129-2 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52085/info
VOXTRONIC Voxlog Professional 3.7.x – ‘userlogdetail.php?idclient’ SQL Injection
source: https://www.securityfocus.com/bid/52081/info
VOXTRONIC Voxlog Professional 3.7.x – ‘get.php?v’ Arbitrary File Access
source: https://www.securityfocus.com/bid/52081/info
Plume CMS 1.2.4 – Cross-Site Request Forgery
+--------------------------------------------------------------------------------------------------------------------...
SyndeoCMS 3.0 – Cross-Site Request Forgery
+--------------------------------------------------------------------------------------------------------------------...
4PSA CMS – SQL Injection
#################################################################################
Joomla! Component com_xvs – ‘Controller’ Local File Inclusion
source: https://www.securityfocus.com/bid/52091/info
Tiki Wiki CMS Groupware – ‘url’ Open Redirection
source: https://www.securityfocus.com/bid/52079/info
Joomla! Component com_xcomp – Local File Inclusion
source: https://www.securityfocus.com/bid/52078/info
Joomla! Component com_x-shop – ‘idd’ SQL Injection
source: https://www.securityfocus.com/bid/52077/info
almnzm 2.4 – Cross-Site Request Forgery (Add Admin)
# Title: almnzm 2.4 >
ButorWiki 3.0 – ‘service’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52059/info
Pandora FMS 4.0.1 – ‘sec2’ Local File Inclusion
source: https://www.securityfocus.com/bid/52058/info
Impulsio CMS – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/52063/info
CMS Faethon 1.3.4 – ‘articles.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/52053/info
Tube Ace – ‘q’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52046/info
SocialCMS 1.0.2 – Cross-Site Request Forgery
+-------------------------------------------------------------------------+
LEPTON 1.1.3 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/52026/info
11in1 CMS 1.2.1 – Cross-Site Request Forgery (Admin Password)
source: https://www.securityfocus.com/bid/52025/info
11in1 CMS 1.2.1 – ‘/admin/index.php?class’ Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/52025/info
11in1 CMS 1.2.1 – ‘index.php?class’ Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/52025/info
STHS v2 Web Portal – ‘team.php?team’ SQL Injection
source: https://www.securityfocus.com/bid/51991/info
STHS v2 Web Portal – ‘prospect.php?team’ SQL Injection
source: https://www.securityfocus.com/bid/51991/info
STHS v2 Web Portal – ‘prospects.php?team’ SQL Injection
source: https://www.securityfocus.com/bid/51991/info
Powie pFile 1.02 – ‘/pfile/file.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/51982/info
Powie pFile 1.02 – ‘/pfile/kommentar.php?filecat’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/51982/info
SMW+ 1.5.6 – ‘target’ HTML Injection
source: https://www.securityfocus.com/bid/51980/info
Zimbra – ‘view’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/51974/info
eFront Community++ 3.6.10 – SQL Injection / Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/51973/info
Fork CMS 3.2.4 – Local File Inclusion / Cross-Site Scripting
#####################################################################################################################...
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_ag_main.php’ Crafted Arbitrary File Upload / Arbitrary Code Execution
source: https://www.securityfocus.com/bid/51979/info
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/admin/index.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/admin/base_useradmin.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘index.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_user.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_stat_uaddr.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_stat_time.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_stat_sensor.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_stat_ports.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info
Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_stat_iplink.php?base_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info