php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Calendarix – ‘cal_cat.php’ SQL Injection

===============================================================================

2010-07-17 SixP4ck3r webapps

Kayako eSupport 3.70.02 – SQL Injection

Name :Kayako eSupport v3.70.02 SQL Injection Vulnerability

2010-07-17 Sid3^effects webapps

Subrion Auto Classifieds – Persistent Cross-Site Scripting

Name :Subrion Auto Classifieds Persistent Xss Vulnerability

2010-07-17 Sid3^effects webapps

Freelancer Marketplace Script – Arbitrary File Upload

Name : Freelancers Marketplace Script Upload Vulnerability

2010-07-17 Sid3^effects webapps

Freelancers Marketplace Script – Persistent Cross-Site Scripting

Name : Freelancers Marketplace Script Persistent XSS Vulnerability

2010-07-17 Sid3^effects webapps

Group Office – ‘comment_id’ SQL Injection

# Title

2010-07-16 Canberk BOLAT webapps

Group Office – Remote Command Execution

# Title

2010-07-16 ADEO Security webapps

Pre Podcast Portal – Authentication Bypass

#################################################################

2010-07-16 D4rk357 webapps

Pre SoftClones Marketing Management System – Authentication Bypass

#################################################################

2010-07-16 D4rk357 webapps

Pre E-Smart Cart – Authentication Bypass

#################################################################

2010-07-16 D4rk357 webapps

Pre Dynamic Institution – Web Authentication Bypass

#################################################################

2010-07-16 D4rk357 webapps

Pre Web Host System – Authentication Bypass

#################################################################

2010-07-16 D4rk357 webapps

BS Scripts Directory – ‘articlesdetails.php’ SQL Injection

#################################################################

2010-07-16 k4k4shi webapps

BS Scripts Directory – ‘info.php’ SQL Injection

#################################################################

2010-07-15 D4rk357 webapps

Joomla! Component redSHOP 1.0.23.1 – Blind SQL Injection

RedShop 1.0.23.1 Joomla Component Blind SQL Injection Vulnerability

2010-07-15 Salvatore Fresta webapps

Whizzy CMS 10.01 – Local File Inclusion

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

2010-07-15 Anarchy Angel webapps

Campsite CMS – Remote Persistent Cross-Site Scripting

#################################################################

2010-07-15 D4rk357 webapps

eXtreme Message Board 1.9.11 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Change Admin Password ]=-

2010-07-15 10n1z3d webapps

Sourcefabric Campsite Articles – HTML Injection

source: https://www.securityfocus.com/bid/41780/info

2010-07-15 D4rk357 webapps

Pligg CMS 1.0.4 – ‘search.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41729/info

2010-07-15 High-Tech Bridge SA webapps

Pixie 1.0.4 – HTML Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/41727/info

2010-07-15 High-Tech Bridge SA webapps

Gekko Web Builder 9.0 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41726/info

2010-07-15 High-Tech Bridge SA webapps

FestOS 2.3 – ‘contents’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41725/info

2010-07-15 High-Tech Bridge SA webapps

DSite CMS 4.81 – ‘modmenu.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41724/info

2010-07-15 High-Tech Bridge SA webapps

PHPWCMS 1.4.5 – ‘PHPwcms.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41720/info

2010-07-15 High-Tech Bridge SA webapps

Spitfire 1.0.381 – Cross-Site Scripting / Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/41701/info

2010-07-15 Nijel the Destroyer webapps

Ad Network Script – Persistent Cross-Site Scripting

1 ########################################## 1

2010-07-14 Sid3^effects webapps

CMSQLite – SQL Injection

# Vulnerability ID: HTB22462

2010-07-14 High-Tech Bridge SA webapps

ZenPhoto CMS 1.3 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Change Admin Password ]=-

2010-07-14 10n1z3d webapps

2DayBiz Businesscard Script – Authentication Bypass

# Exploit Title: 2daybiz Businesscard Script Authentication bypass

2010-07-14 D4rk357 webapps

CustomCMS – Persistent Cross-Site Scripting

1 ########################################## 1

2010-07-13 Sid3^effects webapps

AJ Article 3.0 – Cross-Site Scripting

1 ########################################## 1

2010-07-13 Sid3^effects webapps

Diferior CMS 8.03 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Change Admin Password ]=-

2010-07-13 10n1z3d webapps

I-net Enquiry Management Script – SQL Injection

Name : I-net Enquiry management Script SQL Injection Vulnerability

2010-07-13 D4rk357 webapps

Joomla! Component com_qcontacts – SQL Injection

# Exploit Title: Joomla Component QContacts (com_qcontacts) - SQL Injection Vulnerability

2010-07-13 _mlk_ webapps

Diem 5.1.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41587/info

2010-07-13 High-Tech Bridge SA webapps

Grafik CMS 1.1.2 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Change Admin Password ]=-

2010-07-12 10n1z3d webapps

Campsite CMS 3.4.0 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Create Admin User ]=-

2010-07-12 10n1z3d webapps

Getsimple CMS 2.01 – Multiple Vulnerabilities

-=[ CSRF PoC 1 - Change Admin Password ]=-

2010-07-12 10n1z3d webapps

TheHostingTool 1.2.2 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Create Staff Account ]=-

2010-07-12 10n1z3d webapps

Joomla! Component EasyBlog – Persistent Cross-Site Scripting

Name : Joomla EasyBlog Persistent XSS Vulnerability

2010-07-12 Sid3^effects webapps

Joomla! Component healthstats – Persistent Cross-Site Scripting

Name : Joomla Health & Fitness Stats Persistent XSS Vulnerability

2010-07-12 Sid3^effects webapps

Orbis CMS 1.0.2 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Change Admin Password ]=-

2010-07-11 10n1z3d webapps

TomatoCMS 2.0.5 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Change Administrator Password ]=-

2010-07-11 10n1z3d webapps

TomatoCart 1.0.1 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Create Admin User ]=-

2010-07-11 10n1z3d webapps

Frog CMS 0.9.5 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Create Admin User ]=-

2010-07-11 10n1z3d webapps

Macs CMS 1.1.4 – Cross-Site Scripting / Cross-Site Request Forgery

-=[ CSRF PoC 1 - Create Admin User ]=-

2010-07-11 10n1z3d webapps

CMS Made Simple Module Antz Toolkit 1.02 – Arbitrary File Upload

source: https://www.securityfocus.com/bid/41569/info

2010-07-11 John Leitch webapps

CMS Made Simple 1.8 – ‘default_cms_lang’ Local File Inclusion

source: https://www.securityfocus.com/bid/41565/info

2010-07-11 John Leitch webapps

CMS Made Simple Module Download Manager 1.4.1 – Arbitrary File Upload

source: https://www.securityfocus.com/bid/41564/info

2010-07-11 John Leitch webapps