php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
MassMirror Uploader – Multiple Remote File Inclusions
========================================
Uiga Proxy – Remote File Inclusion
coded by ahmadbady
ttCMS 5.0 – Remote File Inclusion
coded by ahmadbady
nodesforum 1.033 – Remote File Inclusion
coded by ahmadbady
MunkyScripts Simple Gallery – SQL Injection
coded by ahmadbady
Prediction League 0.3.8 – Cross-Site Request Forgery (Add Admin)
========================================================================================
x10 mirco blogging 121 – SQL Injection
===========================================
Solutive CMS – SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Advanced Management For Services Sites – Bypass Create And Download SQL Backup
========================================================================================
Joomla! Component JP Jobs 1.4.1 – SQL Injection
:: General information
Flatpress 0.909.1 – Persistent Cross-Site Scripting
##############################################################################
Advanced Management For Services Sites – Remote Add Admin
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
PHP-fusion dsmsf Mod Downloads – SQL Injection
========================================================
phpscripte24 Vor und Rückwärts Auktions System – Blind SQL Injection
----------------------------Information------------------------------------------------
68KB Knowledge Base 1.0.0rc3 – Cross-Site Request Forgery (Edit Main Settings)
Exploit Title: 68kb Knowledge Base v1.0.0rc3 edit main settings CSRF
68kb 68KB Base 1.0.0rc3 – Cross-Site Request Forgery (Admin)
Exploit Title: 68kb Knowledge Base v1.0.0rc3 create administrator account CSRF
Velhost Uploader Script 1.2 – Local File Inclusion
===============================================================
DynPG CMS 4.1.0 – ‘popup.php’ / ‘counter.php’ Multiple Vulnerabilities
########################################################
Joomla! Component com_football – SQL Injection
# Title : Joomla Component com_football SQL Injection Vulnerability
Joomla! Component com_ops – SQL Injection
# Title : Joomla Component com_ops SQL Injection Vulnerability
Joomla! Component com_menu – SQL Injection
# Title : Joomla Component com_menu SQL Injection Vulnerability
CMS Made Simple 1.7 – Cross-Site Request Forgery
=======================================================================
Zabbix 1.8.1 – SQL Injection
=============================================
SimpNews 2.16.2 – Multiple SQL Injections
==============================================================================================================
Simple Calculator by Peter Rekdal Sunde – Arbitrary File Upload
========================================================================================
Profi Einzelgebots Auktions System – Blind SQL Injection
----------------------------Information------------------------------------------------
PHP Jokesite 2.0 – exec Command
========================================================================================
onepound Shop / CMS – Cross-Site Scripting / SQL Injection
:: General information
MusicBox 3.3 – Arbitrary File Upload
========================================================================================
Joomla! Component webERPcustomer – Local File Inclusion
---------------------------------------------------------------------------------
Joomla! Component User Status – Local File Inclusion
---------------------------------------------------------------------------------
Joomla! Component Jvehicles – Local File Inclusion
---------------------------------------------------------------------------------
Joomla! Component EContent – Local File Inclusion
---------------------------------------------------------------------------------
ALPHA CMS – Local File Inclusion
########################################################
DynPG CMS 4.1.0 – Multiple Vulnerabilities
########################################################
Simply Sites RGV – Local File Inclusion
# Title : Simply Sites RGV Local File Inclusion
Joomla! Component com_trading – Blind SQL Injection
# Title : Joomla Component com_trading Blind SQL Injection Vulnerability
Joomla! Component com_tour – SQL Injection
# Title : Joomla Component com_tour SQL Injection Vulnerability
Joomla! Component com_network – SQL Injection
# Title : Joomla Component com_network SQL Injection Vulnerability
Easy-Clanpage 2.2 – Multiple SQL Injections /
----------------------------Information------------------------------------------------
Centreon IT & Network Monitoring 2.1.5 – SQL Injection
#!/usr/bin/perl
Joomla! Component DW Graph – Local File Inclusion
---------------------------------------------------------------------------------
OSSIM 2.2.1 – ‘$_SERVER[‘PHP_SELF’]’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39145/info
Piwik 0.5.5 – ‘form_url’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39144/info
HuronCMS – ‘index.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/39685/info
Faweb_2 – Multiple Vulnerabilities
========================================================================================
Hosting-PHP-dynamic – Authentication Bypass
========================================================================================
Snipe Photo Gallery – Bypass Arbitrary File Upload
========================================================================================
kora – Reinstall Admin Information
========================================================================================