php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

SweetRice < 0.6.4 - 'FCKeditor' Arbitrary File Upload

##############################################################################

2010-07-03 ITSecTeam webapps

Joomla! Component com_seyret – Local File Inclusion

# Exploit Title: Joomla Component Seyret (com_seyret)

2010-07-03 Cooler_ unix webapps

FuseTalk 3.2/4.0 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/42157/info

2010-07-03 Juan Manuel Garcia webapps

cPanel 11.25 – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/41391/info

2010-07-03 G0D-F4Th3r webapps

Dogfood CRM – ‘spell.php’ Remote Command Execution (Metasploit)

##

2010-07-03 Metasploit webapps

phpMyAdmin – Config File Code Injection (Metasploit)

##

2010-07-03 Metasploit webapps

Coppermine Photo Gallery 1.4.14 – ‘picEditor.php’ Command Execution (Metasploit)

##

2010-07-03 Metasploit webapps

osCommerce 2.2 – Arbitrary PHP Code Execution (Metasploit)

##

2010-07-03 Metasploit webapps

WordPress Core 1.5.1.3 – ‘cache_lastpostdate’ Arbitrary Code Execution (Metasploit)

##

2010-07-03 Metasploit webapps

TWiki – Search Function Arbitrary Command Execution (Metasploit)

##

2010-07-03 Metasploit webapps

TWiki History TWikiUsers – ‘rev’ Command Execution (Metasploit)

##

2010-07-03 Metasploit webapps

phpBB – ‘viewtopic.php’ Arbitrary Code Execution (Metasploit)

##

2010-07-03 Metasploit webapps

Cacti – ‘graph_view.php’ Remote Command Execution (Metasploit)

##

2010-07-03 Metasploit webapps

iScripts Socialware 2.2.x – Arbitrary File Upload

Name iScripts SocialWare

2010-07-02 Salvatore Fresta webapps

Joomla! Component com_seyret – Blind SQL Injection

1 ########################################### 1

2010-07-02 RoAd_KiLlEr webapps

Iphone Pointter Social Network – Local File Inclusion

1 ########################################## 1

2010-07-02 Sid3^effects webapps

Pointter Social Network – Local File Inclusion

1 ########################################## 1

2010-07-02 Sid3^effects webapps

Bit Weaver 2.7 – Local File Inclusion

------------------------------------------------------------------------

2010-07-02 John Leitch webapps

iScripts EasyBiller – Cross-Site Scripting

$-------------------------------------------------------------------------------------------------------------------

2010-07-02 Sangteamtham webapps

iScripts CyberMatch 1.0 – Blind SQL Injection

iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability

2010-07-02 Salvatore Fresta webapps

iScripts ReserveLogic 1.0 – SQL Injection

iScripts ReserveLogic 1.0 SQL Injection Vulnerability

2010-07-01 Salvatore Fresta webapps

iScripts EasySnaps 2.0 – Multiple SQL Injections

iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities

2010-07-01 Salvatore Fresta webapps

Interscan Web Security 5.0 – Persistent Cross-Site Scripting

####################################################################################

2010-07-01 Ivan Huertas webapps

Joomla! Component com_dateconverter 0.1 – SQL Injection

-----------------------------------------------------------------------------------------

2010-07-01 RoAd_KiLlEr webapps

Oxygen2PHP 1.1.3 – ‘forumdisplay.php’ Blind SQL Injection

#!/usr/bin/perl

2010-07-01 Dante90 webapps

Oxygen2PHP 1.1.3 – ‘post.php’ Blind SQL Injection

#!/usr/bin/perl

2010-07-01 Dante90 webapps

NinkoBB – Cross-Site Request Forgery

# Title: NinkoBB CSRF Vulnerability

2010-07-01 ADEO Security webapps

ReCMS – ‘users_lang’ Directory Traversal

source: https://www.securityfocus.com/bid/41310/info

2010-07-01 Locu webapps

Wiki Web Help 0.2.7 – Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/41306/info

2010-07-01 John Leitch webapps

Flatnux 2010-06.09 – ‘find’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41282/info

2010-07-01 ITSecTeam webapps

DPScms – ‘q’ SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/41273/info

2010-07-01 Ariko-Security webapps

System CMS Contentia – ‘news.php’ SQL Injection

source: https://www.securityfocus.com/bid/41248/info

2010-06-30 GlaDiaT0R webapps

Golf Club Site – SQL Injection

# Exploit Title: Golf Club SQL injection Vulnerability

2010-06-30 JaMbA webapps

Specialist Bed and Breakfast Website – SQL Injection

# Exploit Title: Specialist Bed and Breakfast website SQL injection

2010-06-30 JaMbA webapps

Oxygen2PHP 1.1.3 – ‘member.php’ SQL Injection

#!/usr/bin/perl

2010-06-30 Dante90 webapps

webERP 3.11.4 – Multiple Vulnerabilities

# Title: webERP Multiple Vulnerabilities

2010-06-30 ADEO Security webapps

Joomla! Component com_wmtpic 1.0 – SQL Injection

1 ########################################### 1

2010-06-30 RoAd_KiLlEr webapps

Joomla! Component Joomanager – SQL Injection

Note from the vendor received 10Mar11:

2010-06-30 Sid3^effects webapps

Joomla! Component Gamesbox 1.0.2 – ‘id’ SQL Injection

) ) ) ( ( ( ( ( ) )

2010-06-30 v3n0m webapps

ShopCartDx 4.30 – ‘products.php’ Blind SQL Injection

#!/usr/bin/perl

2010-06-30 Dante90 webapps

PHP-Nuke 8.0 – SQL Injection

#!/usr/bin/perl

2010-06-30 Dante90 webapps

WebDM CMS – SQL Injection

WebDM CMS SQL Injection Vulnerability

2010-06-29 Dr.0rYX & Cr3W-DZ webapps

PageDirector CMS – ‘result.php’ SQL Injection

) ) ) ( ( ( ( ( ) )

2010-06-29 v3n0m webapps

Allomani Super MultiMedia 2.5 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: Allomani - Super Multimedia v2.5 - [CSRF] Add Admin Account

2010-06-29 G0D-F4Th3r webapps

Allomani E-Store 1.0 – Cross-Site Request Forgery (Add Admin) (1)

# Exploit Title: Allomani - E-Store v1.0 - [CSRF] Add Admin Account

2010-06-29 G0D-F4Th3r webapps

YPNinc PHP Realty Script – ‘docID’ SQL Injection

) ) ) ( ( ( ( ( ) )

2010-06-29 v3n0m webapps

YPNinc JokeScript – ‘ypncat_id’ SQL Injection

) ) ) ( ( ( ( ( ) )

2010-06-29 v3n0m webapps

PHPDirector 0.30 – ‘videos.php’ SQL Injection

======================================================================

2010-06-29 Mr-AbdoX webapps

ArcademSX 2.904 – ‘cat’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41252/info

2010-06-29 Th3 RDX webapps

TornadoStore 1.4.3 – SQL Injection / HTML Injection

source: https://www.securityfocus.com/bid/41233/info

2010-06-29 Lucas Apa webapps