php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

WordPress Plugin Count Per Day – Multiple Vulnerabilities

#Exploit Title: Count-per-day Wordpress plugin Arbitrary file download and XSS

2012-01-12 6Scan webapps

WordPress Plugin wp-autoyoutube – Blind SQL Injection

######################################################

2012-01-12 longrifle0x webapps

Advanced Image Hosting Script – SQL Injection

# Exploit Title: AIHS (Advanced Image Hosting Script) SQL Injection Vulnerability

2012-01-12 Robert Cooper webapps

Kayako SupportSuite 3.x – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/51377/info

2012-01-11 Yuri Goltsev webapps

KnowledgeTree 3.x – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51373/info

2012-01-11 High-Tech Bridge SA webapps

PHP-Fusion 7.2.4 – ‘downloads.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51365/info

2012-01-10 Am!r webapps

WordPress Plugin Age Verification 0.4 – ‘redirect_to’ Open Redirection

source: https://www.securityfocus.com/bid/51357/info

2012-01-10 Gianluca Brindisi webapps

WordPress Plugin Age Verification 0.4 – Open Redirect

# Exploit Title: Wordpress Age Verification plugin

2012-01-10 Gianluca Brindisi webapps

w-CMS 2.01 – Multiple Vulnerabilities

# Exploit Title: W-Cms Multiple Vulnerability

2012-01-10 th3.g4m3_0v3r webapps

Pragyan CMS 3.0 – Remote File Disclosure

Title

2012-01-10 Or4nG.M4N webapps

RazorCMS 1.2 – Directory Traversal

# Exploit Title: razorCMS 1.2 Path Traversal

2012-01-10 chap0 webapps

Advanced File Management 1.4 – ‘users.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51339/info

2012-01-09 Am!r webapps

Gregarius 0.6.1 – Multiple SQL Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/51338/info

2012-01-09 sonyy webapps

Marinet CMS – ‘gallery.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/51336/info

2012-01-09 H4ckCity Security Team webapps

Marinet CMS – ‘galleryphoto.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/51336/info

2012-01-09 H4ckCity Security Team webapps

Marinet CMS – ‘room2.php?roomid’ SQL Injection

source: https://www.securityfocus.com/bid/51336/info

2012-01-09 H4ckCity Security Team webapps

Clipbucket 2.6 – ‘channels.php?time’ SQL Injection

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

Clipbucket 2.6 – ‘videos.php?time’ SQL Injection

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

Clipbucket 2.6 – ‘view_item.php?type’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

Clipbucket 2.6 – ‘view_collection.php?type’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

Clipbucket 2.6 – ‘videos.php?cat’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

Clipbucket 2.6 – ‘search_result.php?query’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

Clipbucket 2.6 – ‘groups.php?cat’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

Clipbucket 2.6 – ‘collections.php?cat’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

Clipbucket 2.6 – ‘channels.php?cat’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

SAPID 1.2.3 Stable – Remote File Inclusion

# Exploit Title: SAPID Stable (RFI)

2012-01-09 Opa Yong webapps

Clipbucket 2.6 – Multiple Vulnerabilities

# Exploit : Multiple Vulnerability on ClipBucket 2.6

2012-01-09 YaDoY666 webapps

Paddelberg Topsite Script – Authentication Bypass

# Exploit Title: Paddelberg's topsite-script admin auth bypass.

2012-01-09 Christian Inci webapps

phpMyDirectory.com 1.3.3 – SQL Injection

# Exploit Title: phpMyDirectory.com (v. 1.3.3) SQL Injection

2012-01-08 Serseri webapps

MangosWeb – SQL Injection

EXPLOIT TITLE: MangosWeb SQL Vulnerability

2012-01-08 Hood3dRob1n webapps

Atar2b CMS 4.0.1 – ‘pageE.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/51317/info

2012-01-07 BHG Security Center webapps

Atar2b CMS 4.0.1 – ‘pageH.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/51317/info

2012-01-07 BHG Security Center webapps

Atar2b CMS 4.0.1 – ‘gallery_e.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/51317/info

2012-01-07 BHG Security Center webapps

SenseSites CommonSense CMS – ‘article.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/55893/info

2012-01-06 H4ckCity Security Team webapps

SenseSites CommonSense CMS – ‘special.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/55893/info

2012-01-06 H4ckCity Security Team webapps

SenseSites CommonSense CMS – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/55893/info

2012-01-06 H4ckCity Security Team webapps

eFront 3.6.10 – ‘download’ Directory Traversal

source: https://www.securityfocus.com/bid/51302/info

2012-01-06 Chokri B.A webapps

WordPress Plugin Pay with Tweet 1.1 – Multiple Vulnerabilities

# Exploit Title: Wordpress Pay With Tweet plugin [XSS]

2012-01-06 Gianluca Brindisi webapps

TinyWebGallery 1.8.3 – Remote Command Execution

[»] TinyWebGallery 1.8.3 Remote Command Execution

2012-01-06 Expl0!Ts webapps

SQLiteManager 1.2.4 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51294/info

2012-01-05 Stefan Schurtz webapps

SQLiteManager 1.2.4 – ‘main.php?dbsel’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51294/info

2012-01-05 Stefan Schurtz webapps

VertrigoServ 2.25 – ‘extensions.php’ Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/51293/info

2012-01-05 Stefan Schurtz webapps

Yaws-Wiki 1.88 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/51276/info

2012-01-05 SiteWatch webapps

StatIt 4 – ‘statistik.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51280/info

2012-01-04 sonyy webapps

UBBCentral UBB.Threads 7.5.6 – ‘Username’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51275/info

2012-01-04 sonyy webapps

Limny 3.0.1 – ‘login.php’ Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/51261/info

2012-01-04 Gjoko Krstic webapps

Orchard 1.3.9 – ‘ReturnUrl’ Open Redirection

source: https://www.securityfocus.com/bid/51260/info

2012-01-04 Mesut Timur webapps

GraphicsClone Script – ‘term’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51258/info

2012-01-04 Mr.PaPaRoSSe webapps

TextPattern 4.4.1 – ‘ddb’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51254/info

2012-01-04 Jonathan Claudius webapps

Posse Softball Director CMS – ‘team.php’ Blind SQL Injection

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-=--=-=--=-.

2012-01-04 Easy Laster webapps