php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Online Subtitles Workshop – Cross-Site Scripting

===================================================================================

2011-10-26 M.Jock3R webapps

Alsbtain Bulletin 1.5/1.6 – Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/50350/info

2011-10-25 Null H4ck3r webapps

Joomla! Component com_yjcontactus – Local File Inclusion

================================================================================

2011-10-25 MeGo webapps

phpLDAPadmin 1.2.1.1 – Remote PHP Code Injection (Metasploit) (2)

##

2011-10-25 Metasploit webapps

InverseFlow 2.4 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50344/info

2011-10-24 Amir Expl0its webapps

e107 0.7.24 – ‘cmd’ Remote Command Execution

source: https://www.securityfocus.com/bid/50339/info

2011-10-24 Matt Bergin webapps

phpLDAPadmin 0.9.4b – Denial of Service

import java.io.PrintStream;

2011-10-23 Alguien dos

InverseFlow 2.4 – Cross-Site Request Forgery (Add Admin)

#(+) Exploit Title: InverseFlow v2.4 CSRF Vulnerabilities (Add Admin User)

2011-10-23 EjRaM HaCkEr webapps

phpLDAPadmin 1.2.1.1 – Remote PHP Code Injection (1)

2011-10-23 EgiX webapps

Jara 1.6 – SQL Injection

jara 1.6 sql injection vulnerability

2011-10-23 muuratsalo webapps

SportsPHool 1.0 – Remote File Inclusion

2011-10-21 cr4wl3r webapps

Tine 2.0 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50307/info

2011-10-20 High-Tech Bridge SA webapps

osCommerce – Arbitrary File Upload / File Disclosure

source: https://www.securityfocus.com/bid/50301/info

2011-10-20 indoushka webapps

Innovate Portal 2.0 – ‘cat’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50295/info

2011-10-20 Eyup CELIK webapps

Simple Free PHP Forum Script – SQL Injection

# Exploit Title: Simple Free PHP Forum Script Set("cat_id",$get_id);

2011-10-20 Skraps webapps

fims File Management System 1.2.1a – Multiple Vulnerabilities

# Exploit Title: fims - File Management System execute("select * from fims_user where email='$email' and password=md5...

2011-10-20 Skraps webapps

Uiga Personal Portal – Multiple Vulnerabilities

# Exploit Title: Uiga Personal Portal Multiple Vulnerability

2011-10-20 Eyup CELIK webapps

CMS mini 0.2.2 – Local File Inclusion

# Exploit Title: [CMSmini 0.2.2 Local File Inclusion]

2011-10-20 BeopSeong/I2Sec webapps

Boonex Dolphin 6.1 – ‘get_list.php’ SQL Injection

source: https://www.securityfocus.com/bid/50286/info

2011-10-19 Yuri Goltsev webapps

1024 CMS 1.1.0 Beta – ‘force_download.php’ Local File Inclusion

# Exploit Title: [1024 CMS Version 1.1.0 beta(/complete-modules/modules/forcedownload/force_download.php) Local File ...

2011-10-19 Sangyun YOO webapps

WHMCompleteSolution (WHMCS) 3.x < 4.0.x - 'cart.php' Local File Disclosure

# Title : WHMCompleteSolution (cart.php) Local File Disclosure

2011-10-19 Lagripe-Dz & Mca-Crb webapps

Openemr-4.1.0 – SQL Injection

# Exploit Title: [Openemr-4.1.0 SQL injection Vulnerability]

2011-10-19 I2sec-dae jin Oh webapps

Yet Another CMS 1.0 – SQL Injection / Cross-Site Scripting

Advisory: Yet Another CMS 1.0 SQL Injection & XSS vulnerabilities

2011-10-19 Stefan Schurtz webapps

Site@School 2.4.10 – ‘/index.php’ Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/50195/info

2011-10-18 Stefan Schurtz webapps

Joomla! Plugin NoNumber Framework – Multiple Vulnerabilities

# Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities

2011-10-18 jdc webapps

Dolphin 7.0.7 – ‘member_menu_queries.php’ Remote PHP Code Injection

2011-10-18 EgiX webapps

asgbookPHP 1.9 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50167/info

2011-10-17 indoushka webapps

GNUBoard 4.33.02 – ‘tp.php?PATH_INFO’ SQL Injection

# Exploit Title: Gnuboard

2011-10-17 flyh4t webapps

Dominant Creature BBG/RPG Browser Game – Persistent Cross-Site Scripting

===================================================================================

2011-10-17 M.Jock3R webapps

WordPress Plugin BackWPUp 2.1.4 – Code Execution

Sense of Security - Security Advisory - SOS-11-012

2011-10-17 Sense of Security webapps

Ruubikcms 1.1.0 – ‘/extra/image.php’ Local File Inclusion

# Exploit Title: [Ruubikcms v 1.1.0 (/extra/image.php) Local File Inclusion Vulnerability]

2011-10-16 Sangyun YOO webapps

vTiger CRM 5.2 – ‘onlyforuser’ SQL Injection

source: https://www.securityfocus.com/bid/49948/info

2011-10-15 Aung Khant webapps

WordPress Plugin Photo Album Plus 4.1.1 – SQL Injection

# Exploit Title: WP Photo Album Plus 1,BENCHMARK(500000000,MD5(CHAR(115,113,108,109,97,112))),0)&wppa-cover=0&wppa-oc...

2011-10-15 Skraps webapps

Xenon – ‘id’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/50141/info

2011-10-14 m3rciL3Ss webapps

WordPress Plugin Contact Form 2.7.5 – SQL Injection

# Exploit Title: WordPress Contact Form plugin 1,BENCHMARK(500000000,MD5(CHAR(115,113,108,109,97,112))),0)

2011-10-14 Skraps webapps

WordPress Plugin Pretty Link 1.4.56 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50096/info

2011-10-13 High-Tech Bridge SA webapps

BugFree 2.1.3 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50083/info

2011-10-12 High-Tech Bridge SA webapps

Joomla! Component com_sgicatalog 1.0 – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/50072/info

2011-10-12 BHG Security Center webapps

WordPress Plugin GD Star Rating 1.9.10 – SQL Injection

# Exploit Title: WordPress GD Star Rating plugin

2011-10-12 Miroslav Stampar webapps

MyBB MyStatus 3.1 – SQL Injection

---------------------------------------------------------------------

2011-10-12 Mario_Vs webapps

SilverStripe CMS 2.4.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50063/info

2011-10-11 Stefan Schurtz webapps

2Moons 1.4 – Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/50046/info

2011-10-11 indoushka webapps

Joomla! Component com_shop – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/50043/info

2011-10-11 CoBRa_21 webapps

Joomla! Component com_br – ‘state_id’ SQL Injection

source: https://www.securityfocus.com/bid/50042/info

2011-10-11 CoBRa_21 webapps

Joomla! Component com_tree – ‘key’ SQL Injection

source: https://www.securityfocus.com/bid/50041/info

2011-10-11 CoBRa_21 webapps

WordPress Plugin WP-SpamFree Spam Plugin – SQL Injection

#Exploit Title:[ WordPress wpsf-js plugin, SQL Injection]

2011-10-11 cheki webapps

6KBBS 8.0 build 20101201 – Cross-Site Scripting / Information Disclosure

source: https://www.securityfocus.com/bid/50050/info

2011-10-10 labs insight webapps

Jaws 0.8.14 – Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/50022/info

2011-10-10 indoushka webapps

MyBB Forum Userbar Plugin (Userbar 2.2) – SQL Injection

---------------------------------------------------------------------

2011-10-10 Mario_Vs webapps

MyBB Advanced Forum Signatures – ‘afsignatures-2.0.4’ SQL Injection

---------------------------------------------------------------------

2011-10-10 Mario_Vs webapps