php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Alstrasoft AskMe Pro 2.1 – ‘profile.php’ SQL Injection

########################################################################################

2010-09-12 CoBRa_21 webapps

System Shop – ‘Module aktka’ SQL Injection

_____ ______ _____ _____ ______ _______

2010-09-12 secret webapps

MyHobbySite 1.01 – SQL Injection / Authentication Bypass

#########################################################################################

2010-09-12 YuGj VN webapps

piwigo-2.1.2 – Multiple Vulnerabilities

--=Sql injection=--

2010-09-11 Sweet webapps

symphony 2.0.7 – Multiple Vulnerabilities

Symphony 2.0.7 Multiple Vulnerabilities

2010-09-10 JosS webapps

fcms 2.2.3 – Remote File Inclusion

[x] Exploit Title: [FCMS_2.2.3 Remote File Inclusion ]

2010-09-10 LoSt.HaCkEr webapps

Joomla! Component Jphone 1.0 Alpha 3 – Local File Inclusion

JPhone 1.0 Alpha 3 Component Joomla Local File Inclusion

2010-09-10 Chip d3 bi0s webapps

Datetopia Buy Dating Site – Cross-Site Scripting

source: https://www.securityfocus.com/bid/42973/info

2010-09-10 Moudi webapps

ES Simple Download 1.0. – Local File Inclusion

----------------------------Information------------------------------------------------

2010-09-09 Kazza webapps

Visitors Google Map Lite 1.0.1 Free mod_visitorsgooglemap Module – SQL Injection

Visitors Google Map Lite 1.0.1 (FREE) (module mod_visitorsgooglemap Remote Sql Injection)

2010-09-09 Chip d3 bi0s webapps

festos CMS 2.3b – Multiple Vulnerabilities

'''

2010-09-09 Abysssec webapps

1024 CMS 2.1.1 – Blind SQL Injection

# Exploit Title: 1024cms 2.1.1 Blind SQL Injection Vulnerability

2010-09-07 Stephan Sattler webapps

java Bridge 5.5 – Directory Traversal

Date : Sep 6, 2010

2010-09-07 Saxtor webapps

dynpage 1.0 – Multiple Vulnerabilities

'''

2010-09-07 Abysssec webapps

ZenPhoto 1.3 – ‘/zp-core/admin.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43021/info

2010-09-07 Bogdan Calin webapps

ZenPhoto 1.3 – ‘/zp-core/full-image.php?a’ SQL Injection

source: https://www.securityfocus.com/bid/43021/info

2010-09-07 Bogdan Calin webapps

Santafox 2.0.2 – ‘search’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43237/info

2010-09-06 High-Tech Bridge SA webapps

MySource Matrix – ‘char_map.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43020/info

2010-09-06 Gjoko Krstic webapps

HeffnerCMS 1.22 – ‘index.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/43006/info

2010-09-06 MiND C0re webapps

Horde Application Framework 3.3.8 – ‘icon_browser.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43001/info

2010-09-06 Moritz Naumann webapps

BlueCMS 1.6 – ‘x-forwarded-for’ Header SQL Injection

source: https://www.securityfocus.com/bid/42999/info

2010-09-06 cnryan webapps

WordPress Plugin Events Manager Extended – Persistent Cross-Site Scripting

# Author: Craw

2010-09-06 Craw webapps

Joomla! Component Aardvertiser 2.1 – Blind SQL Injection

# Exploit Title: Joomla Component Aardvertiser 2.1 free Blind SQL Injection Vulnerability

2010-09-06 Stephan Sattler webapps

InterPhoto Gallery – Multiple Vulnerabilities

'''

2010-09-06 Abysssec webapps

Joomla! Component Gantry 3.0.10 – Blind SQL Injection

#!/bin/bash

2010-09-05 jdc webapps

Softbiz Article Directory Script – ‘sbiz_id’ Blind SQL Injection

===========================================================

2010-09-05 h4ck3r webapps

Joomla! Component Clantools 1.2.3 – Multiple Blind SQL Injections

# Exploit Title: Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerability

2010-09-05 Solidmedia webapps

Joomla! Component Clantools 1.5 – Blind SQL Injection

# Exploit Title: Joomla Component Clantools version 1.5 Blind SQL Injection Vulnerability

2010-09-05 Solidmedia webapps

Joomla! Component iJoomla! Magazine 3.0.1 – Remote File Inclusion

# Exploit Title: [iJoomla.Magazine.v.3.0.1 Remote File Inclusion ]

2010-09-05 LoSt.HaCkEr webapps

A-Blog 2.0 – ‘/sources/search.php’ SQL Injection

#!/usr/bin/python

2010-09-05 Ptrace Security webapps

ChillyCMS 1.1.3 – Multiple Vulnerabilities

##########################www.BugReport.ir########################################

2010-09-05 AmnPardaz webapps

PHP Classifieds 7.3 – Remote File Inclusion

==================================

2010-09-04 alsa7r webapps

PHP Classifieds ADS – ‘sid’ Blind SQL Injection

[~] Title: PHP CLASSIFIEDS ADS

2010-09-04 h4ck3r webapps

mBlogger 1.0.04 – ‘addcomment.php’ Persistent Cross-Site Scripting

#!/usr/bin/python

2010-09-04 Ptrace Security webapps

SyndeoCMS 2.8.02 – Multiple Vulnerabilities (1)

'''

2010-09-04 Abysssec webapps

smbind 0.4.7 – SQL Injection

##############################################################################################

2010-09-03 r00t webapps

Pligg CMS 1.0.4 – SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/42967/info

2010-09-03 Bogdan Calin webapps

NuSOAP 0.9.5 – ‘nusoap.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/42959/info

2010-09-03 Bogdan Calin webapps

TBDev 2.0 – Remote File Inclusion / SQL Injection

source: https://www.securityfocus.com/bid/43004/info

2010-09-02 Inj3ct0r webapps

CMS WebManager-Pro – ‘c.php’ SQL Injection

source: https://www.securityfocus.com/bid/42951/info

2010-09-02 MustLive webapps

OneCMS 2.6.1 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/42949/info

2010-09-02 anT!-Tr0J4n webapps

Shop a la Cart – Multiple Vulnerabilities

# Exploit Title: [Multiple vulnerabilities in SHOP A LA CART]

2010-09-02 Ariko-Security webapps

vbShout 5.2.2 – Local/Remote File Inclusion

#################################################

2010-09-02 fred777 webapps

PHP Joke Site Software – ‘sbjoke_id’ SQL Injection

[#] Title: PHP Joke Site Software (sbjoke_id) SQL Injection Vuln

2010-09-01 h4ck3r webapps

Cpanel PHP – Restriction Bypass

'''

2010-09-01 Abysssec webapps

dompdf 0.6.0 beta1 – Remote File Inclusion

==================================

2010-09-01 Andre_Corleone webapps

ArtGK CMS – Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/42923/info

2010-09-01 High-Tech Bridge SA webapps

Rumba XML 2.4 – ‘index.php’ Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42914/info

2010-09-01 High-Tech Bridge SA webapps

Amiro.CMS 5.8.4.0 – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42908/info

2010-09-01 High-Tech Bridge SA webapps

HP Insight Diagnostics Online Edition 8.4 – ‘custom.php?testmode’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/42888/info

2010-08-31 Mr Teatime webapps