php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Joomla! Component com_alfcontact 1.9.3 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50637/info
AShop – Open Redirection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/50616/info
labwiki 1.1 – Multiple Vulnerabilities
------------------------------------------------------------------------
osCSS2 – ‘_ID’ Local file Inclusion
Advisory: osCSS2 "_ID" parameter Local file inclusion
PBCS Technology – ‘articlenav.php’ SQL Injection
source: https://www.securityfocus.com/bid/50577/info
11in1 CMS 1.0.1 – ‘do.php’ CRLF Injection
11in1 CMS v1.0.1 (do.php) CRLF Injection Vulnerability
Admin Bot – ‘news.php’ SQL Injection
source: https://www.securityfocus.com/bid/50562/info
SmartJobBoard – ‘keywords’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50552/info
OrderSys 1.6.4 – SQL Injection
------------------------------------------------------------------------
LabStoRe 1.5.4 – SQL Injection
------------------------------------------------------------------------
WHMCompleteSolution 3.x/4.x – Multiple Vulnerabilities
$b0x# WHMCS ( WHMCompleteSolution ) 3.x / 4.x Multiple Vulnerability !
Centreon 2.3.1 – ‘command_name’ Remote Command Execution
source: https://www.securityfocus.com/bid/50568/info
WordPress Theme Bonus 1.0 – ‘s’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50527/info
WHMCompleteSolution (WHMCS) 3.x – ‘clientarea.php’ Local File Disclosure
# Title : WHMCS (clientarea.php) Local File Disclosure
Advanced Poll 2.02 – SQL Injection
##############################################################################################################
Ajax File and Image Manager 1.0 Final – Remote Code Execution
--------------------------------------------------------------------------
S9Y Serendipity 1.5.5 – ‘serendipity[filter][bp.ALT]’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50502/info
Web File Browser 0.4b14 – File Download
Exploit Title: [Web File Browser 0.4b14 File Download Vulnerability]
Jara 1.6 – Multiple Vulnerabilities
#!/Mohammed/bin/YahYa
eFront 3.6.x – Multiple Cross-Site Scripting / SQL Injections
source: https://www.securityfocus.com/bid/50492/info
CaupoShop Pro (2.x < 3.70) Classic 3.01 - Local File Inclusion
CaupoShop Pro (2.x/
SetSeed CMS 5.8.20 – ‘loggedInUser’ SQL Injection
SetSeed CMS 5.8.20 (loggedInUser) Remote SQL Injection Vulnerability
BST (BestShopPro) – ‘nowosci.php’ Multiple Vulnerabilities
################################################################################################
Symphony 2.2.3 – ‘/symphony/publish/comments?filter’ SQL Injection
source: https://www.securityfocus.com/bid/50470/info
Symphony 2.2.3 – ‘/symphony/publish/images?filter’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50470/info
eFront 3.6.10 Build 11944 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50469/info
IBSng B1.34(T96) – ‘str’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50468/info
vBulletin 4.1.7 – Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/50455/info
Domain Shop – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50454/info
Joomla! Component Alameda 1.0 – SQL Injection
[~] Joomla Component Alameda (com_alameda) SQL Injection Vulnerability
jbShop e107 7 CMS Plugin – SQL Injection
# Exploit Title: jbShop - e107 v7 CMS plugin - SQL Injection vulnerability
WordPress Plugin Glossary – SQL Injection
######################################################
WordPress Theme classipress 3.1.4 – Persistent Cross-Site Scripting
# Exploit Title: WordPress Classipress Theme
Joomla! Component HM Community – Multiple Vulnerabilities
_00000__00000__00000__00000__0___0__00000____0___0___000___0___0_
Joomla! Component Vik Real Estate 1.0 – Multiple Vulnerabilities
###################################################################
Joomla! Component com_jeemasms 3.2 – Multiple Vulnerabilities
###################################################################
Joomla! Component Barter Sites 1.3 – Multiple Vulnerabilities
####################################################################################
PHP Photo Album 0.4.1.16 – Multiple Disclosure Vulnerabilities
----------------------------------------------------------------
Plici Search 2.0.0.Stable.r.1878 – ‘p48-search.html’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50428/info
SjXjV 2.3 – ‘post.php’ SQL Injection
source: https://www.securityfocus.com/bid/50426/info
eFront 3.6.10 – ‘professor.php’ Script Multiple SQL Injections
source: https://www.securityfocus.com/bid/50419/info
Joomla! Component Techfolio 1.0 – SQL Injection
###################################################################
WordPress Plugin wptouch – SQL Injection
# Exploit Title: WordPress wptouch plugin SQL Injection Vulnerability
eFront 3.6.10 (build 11944) – Multiple Vulnerabilities
----------------------------------------------------------------
vTiger CRM 5.2.1 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities (2)
source: https://www.securityfocus.com/bid/50364/info