php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

cChatBox for vBulletin 3.6.8/3.7.x – SQL Injection

#!/usr/bin/perl

2011-03-02 DSecurity webapps

Bitweaver 2.8.0 – Multiple Vulnerabilities

# exploit title: Path Disclosure bitweaver 2.8

2011-03-02 lemlajt webapps

Quicktech – SQL Injection

#########################################################################

2011-03-02 eXeSoul webapps

Readmore Systems Script – SQL Injection

# Exploit Title: [Sql injextion]

2011-03-02 vBzone & Zooka & El3arby webapps

SnapProof – ‘retPageID’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46622/info

2011-02-28 difficult 511 webapps

WordPress Plugin BackWPup 1.4 – Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/46610/info

2011-02-28 Danilo Massa webapps

SnapProof – ‘page.php’ SQL Injection

SnapProof (page.php) Sql Injection Vulnerability

2011-02-28 AtT4CKxT3rR0r1ST webapps

DO-CMS – Multiple SQL Injections

DO-CMS Multiple Sql Injection Vulnerability

2011-02-28 AtT4CKxT3rR0r1ST webapps

WordPress Plugin OPS Old Post Spinner 2.2.1 – Local File Inclusion

Source: http://packetstormsecurity.org/files/view/98751/WordPressOPSOldPostSpinner2.2-lfi.txt

2011-02-26 AutoSec Tools webapps

WordPress Plugin jQuery Mega Menu 1.0 – Local File Inclusion

Source: http://packetstormsecurity.org/files/view/98753/WordPressjQueryMegaMenu1.0-lfi.txt

2011-02-26 AutoSec Tools webapps

phreebooks r30rc4 – Multiple Vulnerabilities

------------------------------------------------------------------------

2011-02-26 AutoSec Tools webapps

glFusion 1.1.x/1.2.1 – ‘users.php’ SQL Injection

source: https://www.securityfocus.com/bid/46575/info

2011-02-25 H3X webapps

phpShop 0.8.1 – ‘page’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46561/info

2011-02-25 Aung Khant webapps

Pragyan CMS 3.0 – Multiple Vulnerabilities

#Pragyan CMS v 3.0 mutiple Vulnerabilities

2011-02-25 Villy & Abhishek Lyall webapps

Joomla! Component com_xcloner-backupandrestore – Remote Command Execution

#!/usr/bin/python

2011-02-25 mr_me webapps

WordPress Plugin IWantOneButton 3.0.1 – Multiple Vulnerabilities

Vulnerability ID: HTB22846

2011-02-24 High-Tech Bridge SA webapps

WordPress Plugin Forum Server 1.6.5 – SQL Injection

Vulnerability ID: HTB22851

2011-02-24 High-Tech Bridge SA webapps

WordPress Plugin Relevanssi 2.7.2 – Persistent Cross-Site Scripting

# Exploit Title: Relevanssi User Searches WordPress plugin Stored XSS

2011-02-24 Saif El-Sherei webapps

WordPress Plugin GigPress 2.1.10 – Persistent Cross-Site Scripting

# Exploit Title: GigPress 2.1.10 wordpress plugin Stored XSS

2011-02-24 Saif El-Sherei webapps

Drupal Module Cumulus 5.x-1.1/6.x-1.4 – ‘tagcloud’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46594/info

2011-02-23 MustLive webapps

WordPress Plugin YT-Audio 1.7 – ‘v’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46591/info

2011-02-23 AutoSec Tools webapps

WordPress Plugin ComicPress Manager 1.4.9 – ‘lang’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46590/info

2011-02-23 AutoSec Tools webapps

WordPress Plugin IGIT Posts Slider Widget 1.0 – ‘src’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46589/info

2011-02-23 AutoSec Tools webapps

VidiScript – SQL Injection

======================================

2011-02-23 ThEtA.Nu webapps

course registration management system 2.1 – Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98650/CourseMS2.1-LFI.txt

2011-02-23 AutoSec Tools webapps

WordPress Plugin Comment Rating 2.9.23 – Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98660/commentrating-sqldisclose.txt

2011-02-23 High-Tech Bridge SA webapps

ProQuiz 2.0.0b – Arbitrary File Upload

Source: http://packetstormsecurity.org/files/view/98669/ProQuiz-Shell.py.txt

2011-02-23 AutoSec Tools webapps

WordPress Plugin Z-Vote 1.1 – SQL Injection

Source: http://packetstormsecurity.org/files/view/98671/zvote-sql.txt

2011-02-23 High-Tech Bridge SA webapps

Bitweaver 2.8.1 – Persistent Cross-Site Scripting

# exploit title: persistant xss in bitweaver2.8.1

2011-02-23 lemlajt webapps

tplSoccerStats – ‘player.php’ SQL Injection

tplSoccerStats (player.php) Sql Injection Vulnerability

2011-02-23 AtT4CKxT3rR0r1ST webapps

Hyena Cart – ‘index.php’ SQL Injection

Hyena Cart (index.php) Sql Injection Vulnerability

2011-02-23 AtT4CKxT3rR0r1ST webapps

Vanilla Forums 2.0.17.x – ‘p’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46486/info

2011-02-22 Aung Khant webapps

IBM Lotus Sametime Server 8.0 – ‘stcenter.nsf’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46481/info

2011-02-22 andrew webapps

WordPress Plugin GD Star Rating 1.9.7 – ‘wpfn’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46480/info

2011-02-22 High-Tech Bridge SA webapps

dotProject 2.1.5 – Multiple Vulnerabilities

# exploit title: sql injection in dotproject 2.1.5

2011-02-22 lemlajt webapps

Galilery 1.0 – Local File Inclusion

$ cat 15_lfi_galilery.1.0.txt

2011-02-22 lemlajt webapps

Batavi 1.0 – Multiple Local File Inclusion / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46467/info

2011-02-21 AutoSec Tools webapps

Woltlab Burning Board 2.3.6 Addon – ‘hilfsmittel.php’ SQL Injection

#####################################################################################

2011-02-21 Crazyball webapps

JAKCMS 2.01 RC1 – Blind SQL Injection

#!/usr/bin/python

2011-02-20 mr_me webapps

JAKCMS 2.01 – Code Execution

#!/usr/bin/python

2011-02-20 mr_me webapps

Icy Phoenix 1.3.0.53a – HTTP Referer Persistent Cross-Site Scripting

# Exploit Title: Icy Phoenix 1.3.0.53a http referer stored XSS

2011-02-20 Saif El-Sherei webapps

Independent Escort CMS – Blind SQL Injection

# Exploit Title: Independent Escort CMS Blind SQL Injection Vunerability

2011-02-19 NoNameMT webapps

Escort Directory CMS – SQL Injection

# Exploit Title: Escort Directory CMS SQL Injection Vunerability

2011-02-19 NoNameMT webapps

eventum issue tracking system 2.3.1 – Persistent Cross-Site Scripting

# Exploit Title: Eventum 2.3.1 stored XSS

2011-02-19 Saif El-Sherei webapps

WSN Guest 1.24 – ‘wsnuser’ Cookie SQL Injection

source: https://www.securityfocus.com/bid/46444/info

2011-02-18 Aliaksandr Hartsuyeu webapps

PHP 5.3.5 – ‘grapheme_extract()’ Null Pointer Dereference Denial of Service

source: https://www.securityfocus.com/bid/46429/info

2011-02-17 Maksymilian Arciemowicz dos

GAzie 5.10 – ‘Login’ Multiple Vulnerabilities

GAzie 5.10 (Login parameter) Multiple Remote Vulnerabilities

2011-02-17 LiquidWorm webapps

WordPress Plugin User Photo Component – Arbitrary File Upload

# Exploit Title: WordPress User Photo Component Remote File Upload Vulnerability

2011-02-17 ADVtools webapps

mySeatXT 0.164 – ‘lang’ Local File Inclusion

source: https://www.securityfocus.com/bid/46507/info

2011-02-16 AutoSec Tools webapps

Getsimple CMS 2.03 – ‘upload-ajax.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/46427/info

2011-02-15 s3rg3770 & Chuzz webapps