php

日期	标题	类别	作者
2016-03-11	WordPress Theme Beauty & Clean 1.0.8 – Arbitrary File Upload	webapps	Colette Chamberland
2016-03-10	WordPress Plugin WP Advanced Comment 0.10 – Persistent Cross-Site Scripting	webapps	Mohammad Khaleghi
2016-03-10	WordPress Plugin Best Web Soft Captcha 4.1.5 – Multiple Vulnerabilities	webapps	Colette Chamberland
2016-03-09	WordPress Theme SiteMile Project 2.0.9.5 – Multiple Vulnerabilities	webapps	LSE Leading Security Experts GmbH
2016-03-09	Bluethrust Clan Scripts v4 R17 – Multiple Vulnerabilities	webapps	Brandon Murphy
2016-03-07	Cerberus Helpdesk (Cerb5) 5 < 6.7 - Password Hash Disclosure	webapps	asdizzle_
2016-03-07	ATutor LMS – ‘/install_modules.php’ Cross-Site Request Forgery / Remote Code Execution	webapps	mr_me
2016-03-05	PHPLib < 7.4 - SQL Injection	webapps	GulfTech Security
2016-03-03	WordPress Plugin Bulk Delete 5.5.3 – Privilege Escalation	webapps	Panagiotis Vagenas
2016-03-02	Gallery 2 < 2.0.2 - Multiple Vulnerabilities	webapps	GulfTech Security
2016-03-01	ATutor 2.2.1 – SQL Injection / Remote Code Execution (Metasploit)	remote	Metasploit
2016-03-01	WordPress Plugin CP Polls 1.0.8 – Multiple Vulnerabilities	webapps	i0akiN SEC-LABORATORY
2016-02-29	WordPress Plugin More Fields 2.1 – Cross-Site Request Forgery	webapps	Aatif Shahdad
2016-02-26	phpRPC < 0.7 - Remote Code Execution	webapps	GulfTech Security
2016-02-26	Joomla! Component com_poweradmin 2.3.0 – Multiple Vulnerabilities	webapps	RatioSec Research
2016-02-26	Centreon 2.5.3 – Remote Command Execution	webapps	Sysdream
2016-02-26	WordPress Plugin Ocim MP3 – SQL Injection	webapps	xevil & Blankon33
2016-02-24	Mambo < 4.5.3h - Multiple Vulnerabilities	webapps	GulfTech Security
2016-02-24	WordPress Plugin Extra User Details 0.4.2 – Privilege Escalation	webapps	Panagiotis Vagenas
2016-02-21	PEAR LiveUser < 0.16.8 - Arbitrary File Access	webapps	GulfTech Security
2016-02-20	SOLIDserver < 5.0.4 - Local File Inclusion	webapps	Saeed reza Zamanian
2016-02-19	Geeklog < 1.4.0 - Multiple Vulnerabilities	webapps	GulfTech Security
2016-02-19	Chamilo LMS – Persistent Cross-Site Scripting	webapps	Vulnerability-Lab
2016-02-19	Chamilo LMS IDOR – ‘messageId’ Delete POST Injection	webapps	Vulnerability-Lab