php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Joomla! Component Kubik-Rubik Simple Image Gallery Extended (SIGE) 3.2.3 – Cross-Site Scripting
# Exploit Title: Joomla! Component SIGE version
Twig < 2.4.4 - Server Side Template Injection
Vulnerability details:
UserSpice 4.3 – Blind SQL Injection
#!/usr/env/python
TV – Video Subscription – Authentication Bypass SQL Injection
# Exploit Title: TV - Video Subscription - Authentication Bypass
userSpice 4.3 – Cross-Site Scripting
Application UserSpice PHP user management
SOA School Management – ‘access_login’ SQL Injection
# Exploit Title: SOA - School Management Software with Integrated
Social Oauth Login PHP – Authentication Bypass
# Exploit Title: Social Oauth Login PHP - Authentication Bypass
News Website Script 2.0.4 – ‘search’ SQL Injection
##################################################################
TypeSetter CMS 5.1 – Cross-Site Request Forgery
# Exploit Title: TypeSetter CMS 5.1 Cross Site Request Forgery
TypeSetter CMS 5.1 – ‘Host’ Header Injection
# Exploit Title: TypeSetter CMS 5.1 Host Header Injection
Readymade Video Sharing Script 3.2 – ‘search’ SQL Injection
##################################################################
Paypal Clone Script 1.0.9 – ‘id’ / ‘acctype’ SQL Injection
# Exploit Title: Paypal / Money Transfer Clone Script 1.0.9 - SQL Injection
Multi Language Olx Clone Script – Cross-Site Scripting
######################################################################################
Naukri Clone Script 3.0.3 – ‘indus’ SQL Injection
# Exploit Title: Naukri Clone Script 3.0.3 - 'indus' SQL Injection
Entrepreneur Dating Script 2.0.2 – Authentication Bypass
# Exploit Title: Entrepreneur Dating Script 2.0.2 - Authentication Bypass
Online Test Script 2.0.7 – ‘cid’ SQL Injection
# Exploit Title: Online Test Script 2.0.7 - 'cid' SQL Injection
Student Profile Management System Script 2.0.6 – Authentication Bypass
# Exploit title: Student Profile Management System Script 2.0.6 - Admin
WordPress Core – ‘load-scripts.php’ Denial of Service
# EDB Note: python doser.py -g 'http://localhost/wp-admin/load-scripts.php?c=1&load%5B%5D=eutil,common,wp-a11y,sack,q...
Online Voting System – Authentication Bypass
# Exploit Title: Online Voting System - Authentication Bypass
Matrimonial Website Script 2.1.6 – ‘uid’ SQL Injection
# Exploit Title: Matrimonial Website Script 2.1.6 - 'uid' SQL Injection
Wonder CMS 2.3.1 – ‘Host’ Header Injection
# Exploit Title: Wonder CMS 2.3.1 Host Header Injection
Wonder CMS 2.3.1 – Unrestricted File Upload
Affected Code: