php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

CandidATS 2.1.0 – Cross-Site Request Forgery (Add Admin)

# Title: CandidATS 2.1.0 - Cross-Site Request Forgery (Add Admin)

2020-02-24 J3rryBl4nks webapps

AMSS++ v 4.31 – ‘id’ SQL Injection

# Title : AMSS++ v 4.31 - 'id' SQL Injection

2020-02-24 indoushka webapps

GUnet OpenEclass E-learning platform 1.7.3 – ‘uname’ SQL Injection

# Exploit Title: GUnet OpenEclass E-learning platform 1.7.3 - 'uname' SQL Injection

2020-02-24 emaragkos webapps

Easy2Pilot 7 – Cross-Site Request Forgery (Add User)

# Exploit Title: Easy2Pilot 7 - Cross-Site Request Forgery (Add User)

2020-02-20 indoushka webapps

Virtual Freer 1.58 – Remote Command Execution

# Exploit title : Virtual Freer 1.58 - Remote Command Execution

2020-02-19 SajjadBnd webapps

WordPress Plugin WP Sitemap Page 1.6.2 – Persistent Cross-Site Scripting

# Exploit Title: WordPress Plugin WP Sitemap Page 1.6.2 - Persistent Cross-Site Scripting

2020-02-18 Ultra Security Team webapps

SOPlanning 1.45 – ‘users’ SQL Injection

# Exploit Title: SOPlanning 1.45 - 'users' SQL Injection

2020-02-17 J3rryBl4nks webapps

WordPress Plugin WOOF Products Filter for WooCommerce 1.2.3 – Persistent Cross-Site Scripting

# Exploit Title: Wordpress Plugin WOOF Products Filter for WooCommerce 1.2.3 - Persistent Cross-Site Scripting

2020-02-17 Shahab.ra.9 webapps

SOPlanning 1.45 – Cross-Site Request Forgery (Add User)

# Exploit Title: SOPlanning 1.45 - Cross-Site Request Forgery (Add User)

2020-02-17 J3rryBl4nks webapps

WordPress Theme Fruitful 3.8 – Persistent Cross-Site Scripting

# Exploit Title: WordPress Theme Fruitful 3.8 - Persistent Cross-Site Scripting

2020-02-17 Ultra Security Team webapps

Ice HRM 26.2.0 – Cross-Site Request Forgery (Add User)

# Exploit Title: Ice HRM 26.2.0 - Cross-Site Request Forgery (Add User)

2020-02-17 J3rryBl4nks webapps

WordPress Plugin Strong Testimonials 2.40.1 – Persistent Cross-Site Scripting

# Exploit Title: Wordpress Plugin Strong Testimonials 2.40.0 - Persistent Cross-Site Scripting

2020-02-17 Jinson Varghese Behanan webapps

SOPlanning 1.45 – ‘by’ SQL Injection

# Exploit Title: SOPlanning 1.45 - 'by' SQL Injection

2020-02-17 J3rryBl4nks webapps

phpMyChat Plus 1.98 – ‘pmc_username’ SQL Injection

# Title: phpMyChat Plus 1.98 - 'pmc_username' SQL Injection

2020-02-14 J3rryBl4nks webapps

WordPress Plugin ultimate-member 2.1.3 – Local File Inclusion

# Title : WordPress Plugin ultimate-member 2.1.3 - Local File Inclusion

2020-02-13 Mehran Feizi webapps

PANDORAFMS 7.0 – Authenticated Remote Code Execution

# Exploit Title: PANDORAFMS 7.0 - Authenticated Remote Code Execution

2020-02-13 Engin Demirbilek webapps

WordPress Plugin contact-form-7 5.1.6 – Remote File Upload

# Tile: Wordpress Plugin contact-form-7 5.1.6 - Remote File Upload

2020-02-13 Mehran Feizi webapps

WordPress Plugin Wordfence.7.4.5 – Local File Disclosure

# Tile: Wordpress Plugin wordfence.7.4.5 - Local File Disclosure

2020-02-13 Mehran Feizi webapps

WordPress Plugin tutor.1.5.3 – Persistent Cross-Site Scripting

# Tile: Wordpress Plugin tutor.1.5.3 - Persistent Cross-Site Scripting

2020-02-13 Mehran Feizi webapps

WordPress Plugin Tutor.1.5.3 – Local File Inclusion

# Tile: Wordpress Plugin tutor.1.5.3 - Local File Inclusion

2020-02-13 Mehran Feizi webapps

WordPress Plugin InfiniteWP – Client Authentication Bypass (Metasploit)

##

2020-02-11 Metasploit webapps

Vanilla Forums 2.6.3 – Persistent Cross-Site Scripting

# Exploit Title: Vanilla Forums 2.6.3 - Persistent Cross-Site Scripting

2020-02-11 Sayak Naskar webapps

WordPress Plugin LearnDash LMS 3.1.2 – Reflective Cross-Site Scripting

# Exploit Title: LearnDash WordPress LMS Plugin 3.1.2 - Reflective Cross-Site Scripting

2020-02-10 Jinson Varghese Behanan webapps

EyesOfNetwork 5.3 – Remote Code Execution

# Exploit Title: EyesOfNetwork 5.3 - Remote Code Execution

2020-02-07 Clément Billac webapps

PackWeb Formap E-learning 1.0 – ‘NumCours’ SQL Injection

# Exploit Title: PackWeb Formap E-learning 1.0 - 'NumCours' SQL Injection

2020-02-07 Amel BOUZIANE-LEBLOND webapps

VehicleWorkshop 1.0 – ‘bookingid’ SQL Injection

# Exploit Title: VehicleWorkshop 1.0 - 'bookingid' SQL Injection

2020-02-07 Mehran Feizi webapps

QuickDate 1.3.2 – SQL Injection

# Exploit Title: QuickDate 1.3.2 - SQL Injection

2020-02-07 Ihsan Sencan webapps

Ecommerce Systempay 1.0 – Production KEY Brute Force

# Exploit Title: Ecommerce Systempay 1.0 - Production KEY Brute Force

2020-02-06 live3 webapps

Online Job Portal 1.0 – Cross Site Request Forgery (Add User)

# Exploit Title: Online Job Portal 1.0 - Cross Site Request Forgery (Add User)

2020-02-06 Ihsan Sencan webapps

Online Job Portal 1.0 – Remote Code Execution

# Exploit Title: Online Job Portal 1.0 - Remote Code Execution

2020-02-06 Ihsan Sencan webapps

Online Job Portal 1.0 – ‘user_email’ SQL Injection

# Exploit Title: Online Job Portal 1.0 - 'user_email' SQL Injection

2020-02-06 Ihsan Sencan webapps

Centreon 19.10.5 – ‘Pollers’ Remote Command Execution (Metasploit)

##

2020-02-04 mekhalleh webapps

School ERP System 1.0 – Cross Site Request Forgery (Add Admin)

# Title: School ERP System 1.0 - Cross Site Request Forgery (Add Admin)

2020-02-03 J3rryBl4nks webapps

phpList 3.5.0 – Authentication Bypass

# Exploit Title: phpList 3.5.0 - Authentication Bypass

2020-02-03 Suvadip Kar webapps

IceWarp WebMail 11.4.4.1 – Reflective Cross-Site Scripting

# Title: IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting

2020-02-03 Lutfu Mert Ceylan webapps

FlexNet Publisher 11.12.1 – Cross-Site Request Forgery (Add Local Admin)

# Exploit Title: FlexNet Publisher 11.12.1 - Cross-Site Request Forgery (Add Local Admin)

2020-01-31 Ismail Tasdelen webapps

Lotus Core CMS 1.0.1 – Local File Inclusion

# Exploit Title: Lotus Core CMS 1.0.1 - Local File Inclusion

2020-01-31 Daniel Monzón webapps

PHP 7.0 < 7.4 (Unix) - 'debug_backtrace' disable_functions Bypass

2020-01-30 mm0r1 local

rConfig 3.9.3 – Authenticated Remote Code Execution

# Exploit Title: rConfig 3.9.3 - Authenticated Remote Code Execution

2020-01-30 vikingfr webapps

Centreon 19.10.5 – ‘centreontrapd’ Remote Command Execution

# Exploit Title: Centreon 19.10.5 - 'centreontrapd' Remote Command Execution

2020-01-29 Fabien AUNAY webapps

Centreon 19.10.5 – ‘Pollers’ Remote Command Execution

# Exploit Title: Centreon 19.10.5 - 'Pollers' Remote Command Execution

2020-01-29 Omri Baso webapps

Cups Easy 1.0 – Cross Site Request Forgery (Password Reset)

# Title: Cups Easy 1.0 - Cross Site Request Forgery (Password Reset)

2020-01-29 J3rryBl4nks webapps

Centreon 19.10.5 – Remote Command Execution

# Exploit Title: Centreon 19.10.5 - Remote Command Execution

2020-01-28 Fabien AUNAY webapps

Centreon 19.10.5 – Database Credentials Disclosure

# Exploit Title: Centreon 19.10.5 - Database Credentials Disclosure

2020-01-28 Fabien AUNAY webapps

Octeth Oempro 4.8 – ‘CampaignID’ SQL Injection

# Exploit Title: Octeth Oempro 4.8 - 'CampaignID' SQL Injection

2020-01-28 Bruno de Barros Bulle webapps

Adive Framework 2.0.8 – Cross-Site Request Forgery (Change Admin Password)

# Exploit Title: Adive Framework 2.0.8 - Cross-Site Request Forgery (Change Admin Password)

2020-01-28 Sarthak Saini webapps

Webtareas 2.0 – ‘id’ SQL Injection

# Exploit Title: Webtareas 2.0 - 'id' SQL Injection

2020-01-24 Greg.Priest webapps

qdPM 9.1 – Remote Code Execution

# Exploit Title: qdPM 9.1 - Remote Code Execution

2020-01-23 Rishal Dwivedi webapps

Centreon 19.04 – Authenticated Remote Code Execution (Metasploit)

####################################################################

2020-01-20 TheCyberGeek webapps

Adive Framework 2.0.8 – Persistent Cross-Site Scripting

# Exploit Title: Adive Framework 2.0.8 - Persistent Cross-Site Scripting

2020-01-20 Sarthak Saini webapps