php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

glFusion 1.x – SQL Injection

source: https://www.securityfocus.com/bid/51650/info

2012-01-24 KedAns-Dz webapps

WordPress Plugin YouSayToo auto-publishing 1.0 – ‘submit’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51649/info

2012-01-24 H4ckCity Security Team webapps

Joomla! Component com_xball – ‘team_id’ SQL Injection

source: https://www.securityfocus.com/bid/51618/info

2012-01-23 CoBRa_21 webapps

Joomla! Component com_br – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/51613/info

2012-01-23 the_cyber_nuxbie webapps

SpamTitan Application 5.08x – SQL Injection

Title:

2012-01-23 Vulnerability-Lab webapps

WordPress Plugin Kish Guest Posting 1.0 – Arbitrary File Upload

2012-01-23 EgiX webapps

MiniCMS 1.0/2.0 – PHP Code Injection

########################################################################

2012-01-22 Or4nG.M4N webapps

WordPress Plugin AllWebMenus < 1.1.9 Menu Plugin - Arbitrary File Upload

#Exploit Title: AllWebMenus WordPress Menu Plugin Arbitrary file upload

2012-01-22 6Scan webapps

Lead Capture – ‘login.php’ Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/51785/info

2012-01-21 HashoR webapps

Joomla! Component com_kp – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/51623/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component com_bulkenquery – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/51622/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component com_some – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/51621/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component com_car – Multiple SQL Injections

source: https://www.securityfocus.com/bid/51620/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component com_boss – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/51619/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component Vik Real Estate 1.0 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/51617/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component Full – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/51616/info

2012-01-21 the_cyber_nuxbie webapps

Tribiq CMS – ‘index.php’ SQL Injection

source: https://www.securityfocus.com/bid/51614/info

2012-01-21 Skote Vahshat webapps

iSupport 1.x – Cross-Site Request Forgery / HTML Code Injection (Add Admin)

#!/usr/bin/perl

2012-01-21 Or4nG.M4N webapps

Nova CMS – Directory Traversal

#

2012-01-21 Red Security TEAM webapps

PHP iReport 1.0 – Remote Html Code Injection

#!/usr/bin/perl

2012-01-21 Or4nG.M4N webapps

Syneto Unified Threat Management 1.3.3/1.4.2 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/51597/info

2012-01-20 Alexander Fuchs webapps

WhatsApp – Remote Change Status

#!/bin/bash

2012-01-20 emgent webapps

Vastal EzineShop – ‘view_mags.php’ SQL Injection

source: https://www.securityfocus.com/bid/51571/info

2012-01-19 Lazmania61 webapps

PostNuke pnAddressbook Module – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/51566/info

2012-01-19 Robert Cooper webapps

appRain CMF 0.1.5 – ‘Uploadify.php’ Unrestricted Arbitrary File Upload

2012-01-19 EgiX webapps

WordPress Plugin ucan post 1.0.09 – Persistent Cross-Site Scripting

# Exploit Title: Wordpress uCan Post plugin

2012-01-19 Gianluca Brindisi webapps

Drupal Module CKEditor 3.0 < 3.6.2 - Persistent EventHandler Cross-Site Scripting

# Exploit Title: Drupal CKEditor 3.0 - 3.6.2 - Persistent EventHandler XSS

2012-01-19 MaXe webapps

OneOrZero AIMS – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51549/info

2012-01-18 High-Tech Bridge SA webapps

Freelance Zone – ‘show_code.php’ SQL Injection

source: https://www.securityfocus.com/bid/51533/info

2012-01-18 Lazmania61 webapps

MMORPG Zone – ‘view_news.php’ SQL Injection

source: https://www.securityfocus.com/bid/51532/info

2012-01-18 Lazmania61 webapps

Toner Cart – ‘show_series_ink.php’ SQL Injection

source: https://www.securityfocus.com/bid/51530/info

2012-01-18 Lazmania61 webapps

DZCP (deV!L`z Clanportal) 1.5.5 Moviebase Addon – Blind SQL Injection

========================================================================================

2012-01-18 Easy Laster webapps

DZCP (deV!L`z Clanportal) Gamebase Addon – SQL Injection

========================================================================================

2012-01-18 Easy Laster webapps

PHPBridges Blog System – ‘members.php’ SQL Injection

# Exploit Title: PhpBridges Blog System SQL Injection Vulnerability

2012-01-18 3spi0n webapps

pGB 2.12 – ‘kommentar.php’ SQL Injection

# Exploit Title: pGB 2.12 SQL Injection Vulnerability

2012-01-18 3spi0n webapps

Joomla! Component com_discussions – SQL Injection

#

2012-01-17 Red Security TEAM webapps

Annuaire PHP – ‘sites_inscription.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51434/info

2012-01-16 Atmon3r webapps

Giveaway Manager – ‘members.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51431/info

2012-01-16 Am!r webapps

phpVideoPro 0.8.x/0.9.7 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51428/info

2012-01-16 Stefan Schurtz webapps

Beehive Forum 101 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51424/info

2012-01-16 Stefan Schurtz webapps

ATutor 2.0.3 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51423/info

2012-01-16 Stefan Schurtz webapps

BoltWire 3.4.16 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51422/info

2012-01-16 Stefan Schurtz webapps

PHP Membership Site Manager Script 2.1 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51416/info

2012-01-16 Atmon3r webapps

PHPDomainRegister 0.4a-RC2-dev – Multiple Vulnerabilities

Title = PHPDomainRegister v0.4a-RC2-dev => [SQL Auth][SQL Inject][XSS]

2012-01-16 Or4nG.M4N webapps

PHP Ringtone Website – ‘ringtones.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51418/info

2012-01-15 Atmon3r webapps

WordPress Plugin Evarisk – ‘uploadPhotoApres.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/53994/info

2012-01-14 Sammy FORGIT webapps

phpMyAdmin 3.3.x/3.4.x – Local File Inclusion via XML External Entity Injection (Metasploit)

# Exploit Title: poc-phpmyadmin-local-file-inclusion-via-xxe-injection

2012-01-14 Marco Batista webapps

Pragyan CMS 2.6.1 – Arbitrary File Upload

==========================================

2012-01-13 Dr.KroOoZ webapps

Tine 2.0 – Maischa Multiple Cross-Site Scripting Vulnerabilities

Title:

2012-01-13 Vulnerability-Lab webapps

Joomla! Component com_contushdvideoshare 1.3 – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/51411/info

2012-01-12 Lazmania61 webapps