php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Maximus CMS 1.1.2 – ‘FCKeditor’ Arbitrary File Upload

| |

2011-01-10 eidelweiss webapps

Joomla! Plugin Captcha 4.5.1 – Local File Disclosure

:::::::-. ... ::::::. :::.

2011-01-09 dun webapps

Joostina 1.3 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45732/info

2011-01-08 MustLive webapps

Fonality trixbox CE 2.6.1 – ‘langChoice’ Local File Inclusion (Metasploit)

##

2011-01-08 Metasploit webapps

Zwii 2.1.1 – Remote File Inclusion

# Exploit Title: Zwii v 2.1.1 Remote file include vulnerbility

2011-01-08 Abdi Mohamed webapps

WordPress Plugin mingle forum 1.0.26 – Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

2011-01-08 Charles Hooper webapps

sahana agasti 0.6.5 – Multiple Vulnerabilities

:::::::-. ... ::::::. :::.

2011-01-08 dun webapps

Elxis CMS 2009.2 – Remote File Inclusion

###############################################

2011-01-08 n0n0x webapps

axdcms-0.1.1 – Local File Inclusion

###############################################

2011-01-08 n0n0x webapps

openSite 0.2.2 Beta – Local File Inclusion

#######################################################

2011-01-07 n0n0x webapps

PHP MicroCMS 1.0.1 – ‘page_text’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45702/info

2011-01-06 High-Tech Bridge SA webapps

Joomla! 1.0.x – ‘ordering’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45679/info

2011-01-06 Aung Khant webapps

PHP MicroCMS 1.0.1 – Cross-Site Request Forgery / Cross-Site Scripting

Vulnerability ID: HTB22765

2011-01-06 High-Tech Bridge SA webapps

Phenotype CMS 3.0 – SQL Injection

Vulnerability ID: HTB22769

2011-01-06 High-Tech Bridge SA webapps

phpMySport 1.4 – SQL Injection / Authentication Bypass / Full Path Disclosure

Vulnerability ID: HTB22770

2011-01-06 High-Tech Bridge SA webapps

F3Site 2011 alfa 1 – Cross-Site Scripting / Cross-Site Request Forgery

Vulnerability ID: HTB22757

2011-01-06 High-Tech Bridge SA webapps

Ignition 1.3 – ‘comment.php’ Local File Inclusion

#######################################################

2011-01-06 n0n0x webapps

Concrete CMS 5.4.1.1 – Cross-Site Scripting / Remote Code Execution

#!/usr/bin/python

2011-01-05 mr_me webapps

PhpGedView 4.2.3 – Local File Inclusion

#!/usr/bin/perl -w

2011-01-05 dun webapps

Nucleus 3.61 – Multiple Remote File Inclusions

#######################################################

2011-01-05 n0n0x webapps

WikLink 0.1.3 – ‘getURL.php’ SQL Injection

source: https://www.securityfocus.com/bid/45673/info

2011-01-05 Aliaksandr Hartsuyeu webapps

WonderCMS 0.3.3 – ‘editText.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45712/info

2011-01-04 High-Tech Bridge SA webapps

S40 CMS 0.4.1 – Cross-Site Request Forgery (Change Admin Password)

In The Name Of GOD

2011-01-04 pentesters.ir webapps

Sahana Agasti 0.6.4 – Multiple Remote File Inclusions

#Sahana Agasti

2011-01-03 n0n0x webapps

PHP 5.3.2 – ‘zend_strtod()’ Floating-Point Value Denial of Service

source: https://www.securityfocus.com/bid/45668/info

2011-01-03 Rick Regan dos

amoeba CMS 1.01 – Multiple Vulnerabilities

#!/usr/bin/python

2011-01-02 mr_me webapps

YourTube 1.0 – Cross-Site Request Forgery (Add User)

YourTube v1.0 CSRF Vulnerability (Add User)

2011-01-02 AtT4CKxT3rR0r1ST webapps

GALLARIFIC PHP Photo Gallery Script – ‘gallery.php’ SQL Injection

GALLARIFIC PHP Photo Gallery Script (gallery.php) Sql Injection Vulnerability

2011-01-02 AtT4CKxT3rR0r1ST webapps

Tech Shop Technote 7 – SQL Injection

# Exploit Title: Technote7(Commercial Version, Free Version)

2011-01-01 MaJ3stY webapps

Sahana Agasti 0.6.4 – SQL Injection

:::::::-. ... ::::::. :::.

2011-01-01 dun webapps

ChurchInfo 1.2.12 – SQL Injection

:::::::-. ... ::::::. :::.

2011-01-01 dun webapps

KLINK – SQL Injection

##########################[Andr�s G�mez]################################

2011-01-01 Mauro Rossi & Andres Gomez webapps

PHPB2B 4.1 – ‘q’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51221/info

2011-01-01 H4ckCity Security Team webapps

Ignition 1.3 – Remote Code Execution

2010-12-30 cOndemned webapps

Ignition 1.3 – ‘page.php’ Local File Inclusion

Ignition 1.3 (page) Local File Inclusion Vulnerability

2010-12-30 cOndemned webapps

LightNEasy 3.2.2 – Multiple Vulnerabilities

Vulnerability ID: HTB22750

2010-12-29 High-Tech Bridge SA webapps

WordPress Core 3.0.3 – Persistent Cross-Site Scripting (Internet Explorer 6/7 / NS8.1)

# Exploit Title: Wordpress 3.0.3 stored XSS IE7,6 NS8.1

2010-12-29 Saif webapps

Discovery TorrentTrader 2.6 – Multiple Vulnerabilities

# Exploit Title: TorrentTrader 2.6 Multiple vulnerabilities

2010-12-29 EsS4ndre webapps

TYPO3 – Arbitrary File Retrieval

2010-12-29 ikki webapps

DGNews 2.1 – SQL Injection

#Remote SQL Injection Vulnerability

2010-12-29 kalashnikov webapps

Siteframe CMS 3.2.3 – ‘user.php’ SQL Injection

# Exploit Title: Siteframe 'user.php' SQL Injection Vulnerability

2010-12-29 AnGrY BoY webapps

PiXie CMS 1.04 – Multiple Cross-Site Request Forgery Vulnerabilities

Add Super User:

2010-12-29 Ali Raheem webapps

LoveCMS 1.6.2 – Cross-Site Request Forgery / Code Injection

#Exploit Title : LoveCMS 1.6.2 - CSRF Code Injection Vulnerability

2010-12-29 hiphop webapps

PHP-AddressBook 6.2.4 – ‘group.php’ SQL Injection

#Exploit Title : PHP-AddressBook v6.2.4 SQL INJECTION VULNERABILITIES

2010-12-29 hiphop webapps

DzTube – SQL Injection

Title: DzTube SQL Injection Vulnerability

2010-12-29 errnick qwe webapps

kaibb 1.0.1 – Multiple Vulnerabilities

Vulnerability ID: HTB22749

2010-12-29 High-Tech Bridge SA webapps

News Script PHP Pro – ‘FCKeditor’ Arbitrary File Upload

==============================================================================

2010-12-29 Net.Edit0r webapps

ardeaCore 2.25 – PHP Framework Remote File Inclusion

[!] Discovered: n0n0x

2010-12-29 n0n0x webapps

OpenClassifieds 1.7.0.3 – Chained: Captcha Bypass / SQL Injection / Persistent Cross-Site Scripting on FrontPage

Author:Michael Brooks (Rook)

2010-12-28 Michael Brooks webapps

Coppermine Photo Gallery 1.5.10 – ‘searchnew.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45600/info

2010-12-28 waraxe webapps