php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

ab Web CMS 1.35 – Multiple Vulnerabilities

[!] AB WEB CMS V.1.35 Multiple Remote Vulnerabilities

2011-01-25 Dr.0rYX & Cr3W-DZ webapps

WordPress Plugin oQey-Gallery 0.2 – ‘tbpv_domain’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46007/info

2011-01-24 AutoSec Tools webapps

WordPress Plugin Powerhouse Museum Collection Image Grid 0.9.1.1 – ‘tbpv_username’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46006/info

2011-01-24 AutoSec Tools webapps

WordPress Plugin Feature Slideshow 1.0.6 – ‘src’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46004/info

2011-01-24 AutoSec Tools webapps

WordPress Plugin Uploader 1.0 – ‘num’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45984/info

2011-01-24 AutoSec Tools webapps

Joomla! Component com_b2portfolio 1.0.0 – Multiple SQL Injections

B2 Portfolio Joomla Component 1.0.0 Multiple SQL Injection Vulnerability

2011-01-24 Salvatore Fresta webapps

WordPress Plugin WP Publication Archive 2.0.1 – ‘file’ Information Disclosure

source: https://www.securityfocus.com/bid/46000/info

2011-01-23 AutoSec Tools webapps

WordPress Plugin WP Featured Post with Thumbnail 3.0 – ‘src’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45998/info

2011-01-23 AutoSec Tools webapps

WordPress Plugin RSS Feed Reader 0.1 – ‘rss_url’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45997/info

2011-01-23 AutoSec Tools webapps

WordPress Plugin Audio 0.5.1 – ‘showfile’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45991/info

2011-01-23 AutoSec Tools webapps

PHP Link Directory 4.1.0 – Cross-Site Request Forgery (Add Admin)

PHP Link Directory v4.1.0 CSRF Vulnerability (Add Admin)

2011-01-23 AtT4CKxT3rR0r1ST webapps

PHP Coupon Script 6.0 – ‘bus’ Blind SQL Injection

==

2011-01-23 h4ck3r webapps

cultbooking 2.0.4 – Multiple Vulnerabilities

CultBooking 2.0.4 (lang) Local File Inclusion Vulnerability

2011-01-22 LiquidWorm webapps

phpCMS 9.0 – Blind SQL Injection

=================================================================

2011-01-22 eidelweiss webapps

Pixie CMS 1.0.4 – ‘/admin/index.php’ SQL Injection

source: https://www.securityfocus.com/bid/45937/info

2011-01-20 High-Tech Bridge SA webapps

PHP Lowbids – ‘viewfaqs.php’ Blind SQL Injection

==

2011-01-20 h4ck3r webapps

phpCMS 2008 – SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-{In The Name Of Allah The Mercifull}-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

2011-01-20 R3d-D3V!L webapps

PHPAuctions – ‘viewfaqs.php’ SQL Injection

source: https://www.securityfocus.com/bid/45928/info

2011-01-19 h4ck3r webapps

PHP auctions – ‘viewfaqs.php’ Blind SQL Injection

==

2011-01-19 h4ck3r webapps

Simploo CMS 1.7.1 – PHP Code Execution

Simploo CMS Community Edition - Remote PHP Code Execution Issue

2011-01-19 David Vieira-Kurz webapps

N-13 News 3.4 – Cross-Site Request Forgery (Admin Add)

========================================================

2011-01-18 anT!-Tr0J4n webapps

CakePHP 1.3.5/1.2.8 – ‘Unserialize()’ File Inclusion

Source: http://securityreason.com/securityalert/8026

2011-01-18 felix webapps

Joomla! Component allCineVid 1.0.0 – Blind SQL Injection

http://adv.salvatorefresta.net/allCineVid_Joomla_Component_1.0.0_Blind_SQL_Injection_Vulnerability-18012011.txt

2011-01-18 Salvatore Fresta webapps

phpCMS 2008 V2 – ‘data.php’ SQL Injection

source: https://www.securityfocus.com/bid/45913/info

2011-01-17 R3d-D3V!L webapps

AneCMS 1.3 – Persistent Cross-Site Scripting

# Exploit Title: AneCMS 1.3 Persistant XSS

2011-01-17 Penguin webapps

PHP-Fusion Teams Structure Infusion Addon – SQL Injection

# Exploit Title: PHP-fusion Team Structure Infusion (All versions) SQL

2011-01-17 Saif webapps

Advanced Webhost Billing System (AWBS) 2.9.2 – ‘oid’ SQL Injection

source: https://www.securityfocus.com/bid/45827/info

2011-01-16 ShivX webapps

AWBS 2.9.2 – ‘cart.php’ Blind SQL Injection

AWBS 2.9.2 Blind SQL Injection 0day

2011-01-16 ShivX webapps

Joomla! Component com_people 1.0.0 – Local File Inclusion

####################################################################

2011-01-16 ALTBTA webapps

Seo Panel 2.2.0 – Cookie-Rendered Persistent Cross-Site Scripting

'Seo Panel' Cookie-Rendered Persistent XSS Vulnerability (CVE-2010-4331)

2011-01-16 Mark Stanislav webapps

BetMore Site Suite 4 – ‘bid’ Blind SQL Injection

==

2011-01-16 h4ck3r webapps

CompactCMS 1.4.1 – Multiple Cross-Site Scripting Vulnerabilities (2)

source: https://www.securityfocus.com/bid/45819/info

2011-01-15 Patrick de Brouwer webapps

CompactCMS 1.4.1 – Multiple Vulnerabilities

# Exploit Title: CompactCMS 1.4.1 Multiple Vulnerabilities

2011-01-15 Patrick de Brouwer webapps

glfusion CMS 1.2.1 – ‘img’ Persistent Cross-Site Scripting

# Exploit Title: glfusion CMS 1.2.1 stored XSS via img tag

2011-01-15 Saif webapps

ViArt Shop 4.0.5 – Cross-Site Request Forgery

+-------------------------------------------------------------------------+

2011-01-15 Or4nG.M4N webapps

Alguest 1.1c-patched – ‘elimina’ SQL Injection

source: https://www.securityfocus.com/bid/45812/info

2011-01-14 Aliaksandr Hartsuyeu webapps

CakePHP 1.3.5/1.2.8 – Cache Corruption (Metasploit)

##

2011-01-14 Metasploit webapps

Joomla! Component People 1.0.0 – SQL Injection

People Joomla Component 1.0.0 SQL Injection Vulnerability

2011-01-14 Salvatore Fresta webapps

LifeType 1.2.10 – HTTP Referer Persistent Cross-Site Scripting

# Exploit Title: lifetype 1.2.10 http referer XSS

2011-01-12 Saif El-Sherei webapps

Joomla! 1.5.22 / 1.6.0 – ‘com_mailto’ Spam Mail Relay

# Exploit Title: Joomla! Spam Mail Relay

2011-01-12 Jeff Channell webapps

CMS Tovar – ‘tovar.php’ SQL Injection

source: https://www.securityfocus.com/bid/45772/info

2011-01-11 jos_ali_joe webapps