php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Ollance Member Login Script – Multiple Vulnerabilities

# Exploit Title: Ollance login script Multiple Vulnerabilities

2011-07-01 $#4d0\/\/[r007k17] webapps

WordPress Core 3.1.3 – SQL Injection

SEC Consult Vulnerability Lab Security Advisory < 20110701-0 >

2011-07-01 SEC Consult webapps

Joomla! Component mDigg 2.2.8 – SQL Injection

=====================================================================

2011-07-01 Caddy Dz webapps

Flatpress 0.1010.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48482/info

2011-06-28 High-Tech Bridge SA webapps

Joomla! 1.6.3 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48471/info

2011-06-28 Aung Khant webapps

rgboard 4.2.1 – SQL Injection

http://[target]/list.php?bbs_code=notice[SQL]

2011-06-28 hamt0ry webapps

WordPress Plugin Pretty Link Lite 1.4.56 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/48469/info

2011-06-27 MaKyOtOx webapps

Mambo 4.6.x – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48455/info

2011-06-27 Aung Khant webapps

Joomla! Component com_morfeoshow – ‘idm’ SQL Injection

source: https://www.securityfocus.com/bid/48452/info

2011-06-27 Th3.xin0x webapps

WordPress Plugin Beer Recipes 1.0 – Cross-Site Scripting

# Exploit Title: Wordpress - Beer Recipes v.1.0 XSS

2011-06-26 TheUzuki.' webapps

Joomla! Component JoomlaXi – Persistent Cross-Site Scripting

1.JoomlaXi persistent XSS vulnerabilty

2011-06-26 Karthik R webapps

Nodesforum – ‘_nodesforum_node’ SQL Injection

source: https://www.securityfocus.com/bid/48451/info

2011-06-23 Andrea Bocchetti webapps

Sitemagic CMS – ‘SMTpl’ Directory Traversal

source: https://www.securityfocus.com/bid/48399/info

2011-06-23 Andrea Bocchetti webapps

nodesforum 1.059 – Remote File Inclusion

# Exploit Title: nodesforum 1.059 Remote File Inclusion Vulnerability

2011-06-23 bd0rk webapps

2Point Solutions – ‘cmspages.php’ SQL Injection

=============================================

2011-06-23 Newbie Campuz webapps

Webcat – Multiple Blind SQL Injections

# Exploit Title: Webcat - Two Blind SQL Injection Vulnerabilities

2011-06-23 w0rd webapps

iSupport 1.8 – SQL Injection

iSupport 1.8 SQL Injection Vulnerability

2011-06-23 Brendan Coles webapps

BrewBlogger 2.3.2 – Multiple Vulnerabilities

BrewBlogger 2.3.2 multiple security vulnerabilities

2011-06-23 Brendan Coles webapps

FanUpdate 3.0 – ‘pageTitle’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48392/info

2011-06-22 High-Tech Bridge SA webapps

Eshop Manager – Multiple SQL Injections

source: https://www.securityfocus.com/bid/48391/info

2011-06-22 Number 7 webapps

Same Team E-shop manager – SQL Injection

# Exploit Title: [Same Team E-shop manager SQL Injection exploit]

2011-06-22 Number 7 webapps

Cachelogic Expired Domains Script 1.0 – Multiple Vulnerabilities

Cachelogic Expired Domains Script 1.0 multiple security vulnerabilities

2011-06-22 Brendan Coles webapps

Sitemagic CMS 2010.04.17 – ‘SMExt’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48355/info

2011-06-21 Gjoko Krstic webapps

iGiveTest 2.1.0 – SQL Injection

iGiveTest 2.1.0 SQL Injection Vulnerability

2011-06-21 Brendan Coles webapps

WordPress Plugin WPtouch 1.9.27 – URL redirection

Hello , that's a 0day on the must downloaded WordPress plugin.

2011-06-21 MaKyOtOx webapps

IF-CMS 2.07 – Local File Inclusion (Metasploit) (2)

##

2011-06-20 TecR0c webapps

Nibbleblog 3 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/48339/info

2011-06-19 KedAns-Dz webapps

Joomla! Component com_calcbuilder – ‘id’ Blind SQL Injection

---------------------------------------------------------------------------------

2011-06-19 Chip d3 bi0s webapps

Burning Board 3.1.5 – Full Path Disclosure

---------------------------------------------------------------------

2011-06-19 linc0ln.dll webapps

Joomla! Component com_team – SQL Injection

Joomla Component (com_team) SQL Injection Vulnerability

2011-06-19 CoBRa_21 webapps

Taha Portal 3.2 – ‘sitemap.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48342/info

2011-06-18 Bl4ck.Viper webapps

Immophp 1.1.1 – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/48341/info

2011-06-18 KedAns-Dz webapps

Joomla! Component A Cool Debate 1.0.3 – Local File Inclusion

A Cool Debate 1.0.3 Component Joomla Local File Inclusion

2011-06-18 Chip d3 bi0s webapps

AiCart 2.0 – Multiple Vulnerabilities

=================================[ AiCart 2.0 Multiple Vulnerabilities ]===================================

2011-06-18 takeshix webapps

WeBid 1.0.2 – Persistent Cross-Site Scripting (via SQL Injection)

# Exploit Title: presistent XSS through SQLi WeBid 1.0.2

2011-06-17 Saif webapps

Catalog Builder eCommerce Software – Blind SQL Injection

+------------------------------------------------------------------------------------------+

2011-06-16 takeshix webapps

MyBloggie 2.1.6 – HTML Injection / SQL Injection

source: https://www.securityfocus.com/bid/48317/info

2011-06-15 Robin Verton webapps

miniblog 1.0 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48281/info

2011-06-15 High-Tech Bridge SA webapps

Free Simple CMS 1.0 – Multiple Vulnerabilities

Vulnerability ID: HTB23010

2011-06-15 High-Tech Bridge SA webapps

AMHSHOP 3.7.0 – SQL Injection

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

2011-06-15 Yassin Aboukir webapps

vBTube 1.2.9 – ‘vBTube.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48280/info

2011-06-14 Mr.ThieF webapps

PHP 5.3.6 – Security Bypass

source: https://www.securityfocus.com/bid/48259/info

2011-06-14 Krzysztof Kotowicz remote

cubecart 2.0.7 – Multiple Vulnerabilities

# Exploit Title: CubeCart 2.0.7 XSS && Remote SQL Injection => Multiple Vulnerabilities

2011-06-14 Shamus webapps

PHP-Nuke 8.3 – ‘upload.php’ Arbitrary File Upload (2)

source: https://www.securityfocus.com/bid/48257/info

2011-06-13 pentesters.ir webapps

PHP-Nuke 8.3 – ‘upload.php’ Arbitrary File Upload (1)

source: https://www.securityfocus.com/bid/48257/info

2011-06-13 pentesters.ir webapps

WebFileExplorer 3.6 – ‘user’ / ‘pass’ SQL Injection

source: https://www.securityfocus.com/bid/48233/info

2011-06-13 pentesters.ir webapps

Joomla! Component Minitek FAQ Book 1.3 – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/48223/info

2011-06-13 kaMtiEz webapps

Joomla! Component Scriptegrator 1.5 – Local File Inclusion

# Exploit Title: Scriptegrator plugin for Joomla! 1.5 0day File Inclusion

2011-06-13 jdc webapps

SUBRION CMS – Multiple Vulnerabilities

1.SUBRION CMS multiple vulnerabilties

2011-06-11 Karthik R webapps

Technote 7.2 – Blind SQL Injection

# Exploit Title: technote blind sql injection

2011-06-11 BlueH4G webapps