php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

E-Xoopport Samsara 3.1 (eCal Module) – Blind SQL Injection

#!/usr/bin/perl

2010-09-25 _mRkZ_ webapps

FreePBX 2.8.0 – Recordings Interface Allows Remote Code Execution

Trustwave's SpiderLabs Security Advisory TWSL2010-005:

2010-09-24 Trustwave's SpiderLabs webapps

Collaborative Passwords Manager 1.07 – Multiple Local File Inclusions

[~] Collaborative Passwords Manager 1.07 Multiple Local Include Exploit

2010-09-24 sh00t0ut webapps

OvBB 0.16a – Multiple Local File Inclusions

OvBB v0.16a Multiple Local File Inclusion Vulnerabilities

2010-09-23 cOndemned webapps

GeekLog 1.3.8 (filemgmt) – SQL Injection

GeekLog v1.3.8 (filemgmt) SQL Injection Vulnerability

2010-09-23 Gamoscu webapps

WAnewsletter 2.1.2 – SQL Injection

================================================

2010-09-23 BrOx-Dz webapps

Joomla! Component com_tax – ‘eid’ SQL Injection

source: https://www.securityfocus.com/bid/43461/info

2010-09-23 FL0RiX webapps

OpenText LiveLink 9.7.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43420/info

2010-09-23 Alejandro Ramos webapps

Joomla! Component Joostina – SQL Injection

#

2010-09-22 Gamoscu webapps

Joomla! Component TimeTrack 1.2.4 – Multiple SQL Injections

TimeTrack 1.2.4 Joomla Component Multiple SQL Injection Vulnerabilities

2010-09-22 Salvatore Fresta webapps

BSI Hotel Booking System Admin 1.4/2.0 – Authentication Bypass

-----------------------------------------------------------------------------------------

2010-09-22 K-159 webapps

Skybluecanvas 1.1-r248 – Cross-Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0

2010-09-22 Sweet webapps

wpQuiz 2.7 – Authentication Bypass

Powered by wpQuiz - Auth bypass Vulnerability

2010-09-21 KnocKout webapps

ibPhotohost 1.1.2 – SQL Injection

#################################################

2010-09-21 fred777 webapps

@Mail 6.1.9 – ‘MailType’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43377/info

2010-09-21 Vicente Aguilera Diaz webapps

Joomla! Component com_spain – ‘nv’ SQL Injection

source: https://www.securityfocus.com/bid/43354/info

2010-09-20 FL0RiX webapps

TikiWiki tiki-graph_formula – PHP Remote Code Execution (Metasploit)

##

2010-09-20 Metasploit webapps

OpenX – ‘banner-edit.php’ Arbitrary File Upload / PHP Code Execution (Metasploit)

##

2010-09-20 Metasploit remote

primitive CMS 1.0.9 – Multiple Vulnerabilities

# Exploit Title: Primitive CMS 1.0.9 Multiple Vulnerabilities

2010-09-20 Stephan Sattler webapps

LightNEasy CMS 3.2.1 – Blind SQL Injection

# Exploit Title: LightNEasy Cms 3.2.1 Blind SQL Injection Vulnerability

2010-09-20 Solidmedia webapps

Opencart 1.4.9.1 – Arbitrary File Upload

==========================================

2010-09-19 Net.Edit0r webapps

BoutikOne 1.0 – SQL Injection

________ _____________ / /_

2010-09-19 BrOx-Dz webapps

Fashione E-Commerce Webshop – Multiple SQL Injections

________ _____________ / /_

2010-09-19 secret webapps

Maian Gallery 2 – Local File Download

#!/usr/bin/python

2010-09-18 mr_me webapps

Joomla! Component Restaurant Guide 1.0.0 – Multiple Vulnerabilities

# Exploit Title: Joomla Component com_restaurantguide Multiple Vulnerabilities

2010-09-18 Valentin webapps

xt:Commerce Gambio 2008 < 2010 - 'reviews.php' Error-Based SQL Injection

________ _____________ / /_

2010-09-18 secret webapps

CMSimple – Cross-Site Request Forgery

'''

2010-09-18 Abysssec webapps

phpMyFamily – Multiple Vulnerabilities

'''

2010-09-17 Abysssec webapps

e107 0.7.23 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/43327/info

2010-09-17 High-Tech Bridge SA webapps

Netautor Professional 5.5 – ‘login2.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43290/info

2010-09-17 Gjoko Krstic webapps

ChillyCMS 2.3.4.3 – Arbitrary File Upload

source: https://www.securityfocus.com/bid/43263/info

2010-09-15 John Leitch webapps

Mollify 1.6 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43262/info

2010-09-15 John Leitch webapps

CMScout IBrowser TinyMCE Plugin 2.3.4.3 – Local File Inclusion

source: https://www.securityfocus.com/bid/43260/info

2010-09-15 John Leitch webapps

NWS-Classifieds – ‘cmd’ Local File Inclusion

source: https://www.securityfocus.com/bid/43259/info

2010-09-15 John Leitch webapps

Multple I-Escorts Products – ‘escorts_search.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43249/info

2010-09-15 599eme Man webapps

ATutor 1.0 – Multiple ‘cid’ Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43241/info

2010-09-15 High-Tech Bridge SA webapps

AChecker 1.0 – ‘URI’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43240/info

2010-09-15 High-Tech Bridge SA webapps

AContent 1.0 – Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/43238/info

2010-09-15 High-Tech Bridge SA webapps

PixelPost 1.7.3 – Multiple Vulnerabilities

1 [+]Exploit Title: pixelpost_v1.7.3 Multiple vulnerabilities 0

2010-09-15 Sweet webapps

PHP microcms 1.0.1 – Multiple Vulnerabilities

'''

2010-09-15 Abysssec webapps

eNdonesia 8.4 – SQL Injection

======================================================================/

2010-09-15 vYc0d webapps

E-Xoopport Samsara 3.1 (Sections Module) – Blind SQL Injection

#!/usr/bin/perl

2010-09-14 _mRkZ_ webapps

Joomla! Component JGen 0.9.33 – SQL Injection

[+]Title Joomla JGen Component (com_jgen) SQL-i Vulnerability

2010-09-14 **RoAd_KiLlEr** webapps

PaysiteReviewCMS – ‘image.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43213/info

2010-09-14 Valentin Hoebel webapps

PaysiteReviewCMS 1.1 – ‘search.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43213/info

2010-09-14 Valentin Hoebel webapps

UCenter Home 2.0 – SQL Injection

__--==UCenter Home 2.0 -(0day) Remote SQL Injection Vulnerability==--__

2010-09-13 KnocKout webapps

Storyteller CMS – ‘var’ Local File Inclusion

==

2010-09-13 h4ck3r webapps

Joomla! Component com_mtree 2.1.5 – Arbitrary File Upload

# Exploit Title: Joomla Component Mosets Tree 2.1.5 Shell Upload

2010-09-13 jdc webapps

osDate – ‘uploadvideos.php’ Arbitrary File Upload

====================================================

2010-09-13 Xa7m3d webapps

Group Office 3.5.9 – SQL Injection

=====================================================================================

2010-09-13 ViciOuS webapps