php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Photopad 1.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46385/info

2011-02-15 High-Tech Bridge SA webapps

Wikipad 1.6.0 – Cross-Site Scripting / HTML Injection / Information Disclosure

source: https://www.securityfocus.com/bid/46383/info

2011-02-15 High-Tech Bridge SA webapps

Gollos 2.8 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46379/info

2011-02-15 High-Tech Bridge SA webapps

MG2 0.5.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46378/info

2011-02-15 LiquidWorm webapps

Seo Panel 2.2.0 – SQL Injection

Vulnerability ID: HTB22824

2011-02-15 High-Tech Bridge SA webapps

omegabill 1.0 build 6 – Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98480/OmegaBillv1.0Build6-php.txt

2011-02-15 AutoSec Tools webapps

phpMyBitTorrent 2.0.4 – SQL Injection

# Exploit Title: phpMyBitTorrent 2.0.4 SQL injection

2011-02-15 #forkbombers webapps

RunCMS 2.2.2 – Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98472/runcms-sqlxss.txt

2011-02-14 High-Tech Bridge SA webapps

jSchool Advanced – SQL Injection

-----------------------------------------------------------------------

2011-02-14 eXa.DisC webapps

AWCM 2.2 Final – Persistent Cross-Site Scripting

# Exploit Title: AWCM v2.2 final Persistent Cross Site Script

2011-02-14 _84kur10_ webapps

Dokeos 1.8.6 2 – ‘style’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46370/info

2011-02-12 AutoSec Tools webapps

TaskFreak! 0.6.4 – ‘rss.php’ HTTP Referer Header Cross-Site Scripting

source: https://www.securityfocus.com/bid/46350/info

2011-02-12 LiquidWorm webapps

TaskFreak! 0.6.4 – ‘print_list.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46350/info

2011-02-12 LiquidWorm webapps

TaskFreak! 0.6.4 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46350/info

2011-02-12 LiquidWorm webapps

PixelPost 1.7.3 – Multiple POST SQL Injections

--------------------------------------------------------------------

2011-02-12 LiquidWorm webapps

Escort Agency CMS – Blind SQL Injection

# Exploit Title: Escort Agency CMS Blind SQL Injection Vunerability

2011-02-12 NoNameMT webapps

TaskFreak! 0.6.4 – Multiple Cross-Site Scripting Vulnerabilities

################################################################

2011-02-12 LiquidWorm webapps

Drupal Module CAPTCHA – Security Bypass

source: https://www.securityfocus.com/bid/46344/info

2011-02-11 anonymous webapps

Kunena < 1.5.13 / < 1.6.3 - SQL Injection

Vendor/Product: Kunena

2011-02-11 Red Matter webapps

Geomi CMS 1.2/3.0 – SQL Injection

#########################################################################

2011-02-11 ThunDEr HeaD webapps

Horde – Horde_Image::factory driver Argument Local File Inclusion

# Exploit Title: Horde Horde_Image::factory driver Argument Local File

2011-02-11 skysbsb webapps

RunCMS 2.2.2 – ‘register.php’ SQL Injection

source: https://www.securityfocus.com/bid/46342/info

2011-02-10 High-Tech Bridge SA webapps

webERP 4.0.1 – ‘InputSerialItemsFile.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/46341/info

2011-02-10 AutoSec Tools webapps

Dolphin 7.0.4 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46337/info

2011-02-10 AutoSec Tools webapps

ManageEngine ADSelfService Plus 4.4 – ‘EmployeeSearch.cc’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46331/info

2011-02-10 Core Security webapps

ManageEngine ADSelfService Plus 4.4 – POST Manipulation Security Question

source: https://www.securityfocus.com/bid/46331/info

2011-02-10 Core Security webapps

Smarty Template Engine 2.6.9 – ‘$smarty.template’ PHP Code Injection

source: https://www.securityfocus.com/bid/46366/info

2011-02-09 jonieske webapps

PHPXref 0.7 – ‘nav.html’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46302/info

2011-02-09 MustLive webapps

SourceBans 1.4.7 – Cross-Site Scripting

# Exploit Title: SourceBans Version 1.4.7 XSS

2011-02-09 Sw1tCh webapps

WordPress Plugin Enable Media Replace – Multiple Vulnerabilities

PRODUCT NAME: Enable Media Replace WordPress Plugin

2011-02-09 Ulf Harnhammar webapps

MihanTools Script 1.3.3 – SQL Injection

# Exploit Title: MihanTools Script SQL Injection Vunerability

2011-02-09 WHITE_DEVIL webapps

Web 2.0 Social Network Freunde Community – SQL Injection

# Exploit Title: Web 2.0 Social Network Freunde Community SQL Injection

2011-02-09 NoNameMT webapps

Auto Database System 1.0 Infusion Addon – SQL Injection

# Exploit Title: PHP-Fusion Auto Database System 1.0 Infusion SQL injection

2011-02-09 Saif webapps

UMI CMS 2.8.1.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46280/info

2011-02-08 High-Tech Bridge SA webapps

CiviCRM 3.3.3 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46275/info

2011-02-08 AutoSec Tools webapps

ViArt Shop 4.0.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46256/info

2011-02-08 High-Tech Bridge SA webapps

WebAsyst Shop-Script – Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/46250/info

2011-02-08 High-Tech Bridge SA webapps

AIOCP 1.4.001 – Cross-Site Request Forgery

Source: http://packetstormsecurity.org/files/view/98247/AIOCP-1.4.001-xsrf.txt

2011-02-08 AutoSec Tools webapps

dotProject 2.1.5 – Cross-Site Request Forgery

Source: http://packetstormsecurity.org/files/view/98245/dotProject2.1.5-xsrf.txt

2011-02-08 AutoSec Tools webapps

Model Agentur Script – SQL Injection

# Exploit Title: Model Agentur Script SQL Injection Vunerability

2011-02-08 NoNameMT webapps

Escortservice 1.0 – ‘custid’ SQL Injection

source: https://www.securityfocus.com/bid/46171/info

2011-02-07 NoNameMT webapps

SWFupload 2.5.0 Beta 3 – Arbitrary File Upload

# Exploit Title: SWFUpload v2.5.0 Beta 3 File Arbitrary Upload

2011-02-07 Daniel Godoy webapps

MyMarket 1.71 – ‘index.php’ SQL Injection

# Exploit Title: MyMarket version 1.71(index.php) sql Injection

2011-02-07 ahmadso webapps

jakcms 2.0 pro rc5 – Persistent Cross-Site Scripting via useragent http header Injection

# Exploit Title: JAKCMS 2.0 PRO RC5 stored XSS via useragent HTTP header

2011-02-07 Saif El-Sherei webapps

T-Content Managment System – Multiple Vulnerabilities

# Exploit Title: T-Content Managment Multiple Vulnerability

2011-02-07 Daniel Godoy webapps

Dew-NewPHPLinks 2.1b – ‘index.php’ SQL Injection

Dew-NewPHPLinks v.2.1b (index.php) Sql Injection Vulnerability

2011-02-06 AtT4CKxT3rR0r1ST webapps

Escort und Begleitservice Agentur Script – SQL Injection

# Exploit Title: Escort und Begleitservice Agentur Script SQL Injection

2011-02-05 NoNameMT webapps

Qcodo Development Framework 0.3.3 – Full Information Disclosure

# Exploit Title: Qcodo Development Framework 0.3.3 Full Info

2011-02-05 Daniel Godoy webapps

Chamilo 1.8.7 / Dokeos 1.8.6 – Remote File Disclosure

# Title: Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure

2011-02-05 beford webapps

osCommerce – Authentication Bypass

This is a bug on old oscommerce / creloaded i just didn't find it in the

2011-02-04 Nicolas Krassas webapps