php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

PHP 5.4.0RC6 (x64) – Denial of Service

2012-02-04 Stefan Esser dos

PHP-Fusion 7.2.4 – ‘weblink_id’ SQL Injection

source: https://www.securityfocus.com/bid/51865/info

2012-02-03 Am!r webapps

project-open 3.4.x – ‘account-closed.tcl’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51842/info

2012-02-03 Michail Poultsakis webapps

PHP 5.4SVN-2012-02-03 – htmlspecialchars/entities Buffer Overflow

From: cataphract

2012-02-03 cataphract dos

Joomla! Component Currency Converter 1.0.0 – ‘from’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51804/info

2012-02-02 BHG Security Center webapps

iknSupport ‘search’ Module – Cross-Site Scripting

source: https://www.securityfocus.com/bid/51803/info

2012-02-02 Red Security TEAM webapps

Joomla! Component com_bnf – ‘seccion_id’ SQL Injection

source: https://www.securityfocus.com/bid/51802/info

2012-02-02 Daniel Godoy webapps

GForge 5.7.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51799/info

2012-02-02 sonyy webapps

Achievo 1.4.3 – Multiple Web Vulnerabilities

Title:

2012-02-02 Vulnerability-Lab webapps

osCommerce 3.0.2 – Persistent Cross-Site Scripting

Title:

2012-02-02 Vulnerability-Lab webapps

phpLDAPadmin 1.2.0.5-2 – ‘server_id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51794/info

2012-02-01 andsarmiento webapps

phpLDAPadmin 1.2.2 – ‘base’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51793/info

2012-02-01 andsarmiento webapps

OpenEMR 4.1 – ‘/Interface/fax/fax_dispatch.php?File’ ‘exec()’ Call Arbitrary Shell Command Execution

source: https://www.securityfocus.com/bid/51788/info

2012-02-01 High-Tech Bridge SA webapps

OpenEMR 4.1 – ‘/contrib/acog/print_form.php?formname’ Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/51788/info

2012-02-01 High-Tech Bridge SA webapps

OpenEMR 4.1 – ‘/Interface/patient_file/encounter/load_form.php?formname’ Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/51788/info

2012-02-01 High-Tech Bridge SA webapps

OpenEMR 4.1 – ‘/Interface/patient_file/encounter/trend_form.php?formname’ Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/51788/info

2012-02-01 High-Tech Bridge SA webapps

sit! support incident tracker 3.64 – Multiple Vulnerabilities

Advisory Details:

2012-02-01 High-Tech Bridge SA webapps

swDesk – Multiple Vulnerabilities

#

2012-02-01 Red Security TEAM webapps

4Images 1.7.10 – ‘/admin/index.php?redirect’ Arbitrary Site Redirect

source: https://www.securityfocus.com/bid/51774/info

2012-01-31 RandomStorm webapps

4Images 1.7.10 – ‘/admin/categories.php?cat_parent_id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51774/info

2012-01-31 RandomStorm webapps

4Images 1.7.10 – ‘/admin/categories.php?cat_parent_id’ SQL Injection

source: https://www.securityfocus.com/bid/51774/info

2012-01-31 RandomStorm webapps

Joomla! Component com_crhotels – ‘catid’ SQL Injection

source: https://www.securityfocus.com/bid/51728/info

2012-01-31 the_cyber_nuxbie webapps

Vastal I-Tech Agent Zone – ‘search.php’ Blind SQL Injection

Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability

2012-01-31 Cagri Tepebasili webapps

PragmaMX 1.2.10 – Persistent Cross-Site Scripting

# TITLE ... # Persistent XSS in PragmaMX 1.12.0 for logged in users #

2012-01-31 HauntIT webapps

Ez Album – Blind SQL Injection

#

2012-01-31 Red Security TEAM webapps

phpShowtime – Directory Traversal

#

2012-01-31 Red Security TEAM webapps

Snort Report 1.3.2 – SQL Injection

# Exploit Title: Snort Report

2012-01-31 a.kadir altan webapps

Joomla! Component com_bbs – Multiple SQL Injections

source: https://www.securityfocus.com/bid/51730/info

2012-01-30 the_cyber_nuxbie webapps

Joomla! Component com_propertylab – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/51729/info

2012-01-30 the_cyber_nuxbie webapps

Joomla! Component com_firmy – ‘Id’ SQL Injection

source: https://www.securityfocus.com/bid/51727/info

2012-01-30 the_cyber_nuxbie webapps

phux Download Manager – Blind SQL Injection

#

2012-01-30 Red Security TEAM webapps

4Images 1.7.6-9 – Cross-Site Request Forgery / PHP Code Injection

#!/usr/bin/perl

2012-01-30 Or4nG.M4N webapps

HostBill App 2.3 – Remote Code Injection

=-=-=-=-=-=-=-=-=-=-=-=-=-=-{In The Name Of Allah, The Most Beneficent, The Most Merciful}-=-=-=-=-=-=-=-=-=-=-=-=-=-...

2012-01-30 Dr.DaShEr webapps

Joomla! Component com_cmotour – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/51779/info

2012-01-28 the_cyber_nuxbie webapps

Joomla! Component com_visa – Local File Inclusion / SQL Injection

source: https://www.securityfocus.com/bid/51726/info

2012-01-28 the_cyber_nuxbie webapps

vBSEO 3.6.0 – ‘proc_deutf()’ Remote PHP Code Injection (Metasploit)

require 'msf/core'

2012-01-27 EgiX webapps

xClick Cart 1.0.x – ‘shopping_url’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51699/info

2012-01-26 sonyy webapps

WordPress Plugin Slideshow Gallery 1.1.x – ‘border’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51678/info

2012-01-26 Bret Hawk webapps

Joomla! Component com_products – Multiple SQL Injections

source: https://www.securityfocus.com/bid/51674/info

2012-01-26 the_cyber_nuxbie webapps

Joomla! Component com_motor – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/51673/info

2012-01-26 the_cyber_nuxbie webapps

Peel Shopping 2.8/ 2.9 – Cross-Site Scripting / SQL Injections

+-------------------------------------------------------------------------+

2012-01-26 Cyber-Crystal webapps

phpList 2.10.9 – Cross-Site Request Forgery / Cross-Site Scripting

+-------------------------------------------------------------------------+

2012-01-26 Cyber-Crystal webapps

VR GPub 4.0 – Cross-Site Request Forgery

+-------------------------------------------------------------------------+

2012-01-26 Cyber-Crystal webapps

vBadvanced CMPS 3.2.2 – ‘vba_cmps_include_bottom.php’ Remote File Inclusion

source: https://www.securityfocus.com/bid/51672/info

2012-01-25 PacketiK webapps

DClassifieds 0.1 final – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/51671/info

2012-01-25 High-Tech Bridge SA webapps

OSClass 2.3.3 – ‘index.php?getParam()’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51662/info

2012-01-25 High-Tech Bridge SA webapps

OSClass 2.3.3 – ‘index.php?sCategory’ SQL Injection

source: https://www.securityfocus.com/bid/51662/info

2012-01-25 High-Tech Bridge SA webapps

WordPress Core 3.3.1 – Multiple Vulnerabilities

Trustwave's SpiderLabs Security Advisory TWSL2012-002:

2012-01-25 Trustwave's SpiderLabs webapps

Joomla! Component JE Story Submit – ‘index.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/51657/info

2012-01-24 Robert Cooper webapps

Ultimate Locator – ‘radius’ SQL Injection

source: https://www.securityfocus.com/bid/51653/info

2012-01-24 Robert Cooper webapps