php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

FS Groupon Clone – ‘category’ SQL Injection

# Exploit Title: FS Groupon Clone - SQL Injection

2017-10-23 8bitsec webapps

FS Freelancer Clone – ‘sk’ SQL Injection

# Exploit Title: FS Freelancer Clone - SQL Injection

2017-10-23 8bitsec webapps

FS Expedia Clone – ‘hid’ SQL Injection

# Exploit Title: FS Expedia Clone - SQL Injection

2017-10-23 8bitsec webapps

FS Food Delivery Script – ‘keywords’ SQL Injection

# Exploit Title: FS Food Delivery Script - SQL Injection

2017-10-23 8bitsec webapps

FS Ebay Clone – ‘pd_maincat_id’ SQL Injection

# Exploit Title: FS Ebay Clone - SQL Injection

2017-10-23 8bitsec webapps

FS Book Store Script – ‘category’ SQL Injection

# Exploit Title: FS Book Store Script - SQL Injection

2017-10-23 8bitsec webapps

FS Amazon Clone – ‘category_id’ SQL Injection

# Exploit Title: FS Amazon Clone - SQL Injection

2017-10-23 8bitsec webapps

FS Car Rental Script – ‘pickup_location’ SQL Injection

# Exploit Title: FS Car Rental Script - SQL Injection

2017-10-23 8bitsec webapps

Kaltura < 13.2.0 - Remote Code Execution

#!/usr/bin/env python

2017-10-23 Robin Verton webapps

WordPress Plugin Polls 1.2.4 – SQL Injection (PoC)

Exploit Title :WordPress Polls plugin(1.2.4) SQL Injection vulnerability

2017-10-22 Manish Tanwar remote

CometChat < 6.2.0 BETA 1 - Local File Inclusion

# Exploit Title: CometChat < v6.2.0 BETA 1 - Local File Inclusion

2017-10-22 Paradoxis webapps

Afian AB FileRun 2017.03.18 – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20171018-0 >

2017-10-18 SEC Consult webapps

WordPress Plugin Car Park Booking – SQL Injection

# Exploit Title: Wordpress Plugin Car Park Booking - SQL Injection

2017-10-17 8bitsec webapps

Career Portal 1.0 – SQL Injection

# Exploit Title: Career Portal v1.0 - SQL Injection

2017-10-17 8bitsec webapps

Squid Analysis Report Generator 2.3.10 – Remote Code Execution

# Exploit Title: RCE/Arbitrary file write in Squid Analysis Report Generator (SARG)

2017-10-17 Pavel Suprunyuk webapps

AlienVault Unified Security Management (USM) 5.4.2 – Cross-Site Request Forgery

1. ADVISORY INFORMATION

2017-10-13 Julien Ahrens webapps

phpMyFAQ 2.9.8 – Cross-Site Scripting (2)

# Exploit Title: phpMyFAQ 2.9.8 Stored XSS

2017-10-13 Ishaq Mohammed webapps

TYPO3 Extension Restler 1.7.0 – Local File Disclosure

# Exploit Title: Typo3 Restler Extension - Local File Disclosure

2017-10-13 CrashBandicot webapps

E-Sic Software livre CMS – Cross Site Scripting

# Exploit Title: E-Sic Software livre CMS - Cross Site Scripting#

2017-10-12 Elber Tavares webapps

E-Sic Software livre CMS – ‘f’ SQL Injection

# Exploit Title: E-Sic Software livre CMS - Sql Injection

2017-10-12 Elber Tavares webapps

E-Sic Software livre CMS – ‘cpfcnpj’ SQL Injection

# Exploit Title: E-Sic Software livre CMS - Sql Injection

2017-10-12 Elber Tavares webapps

E-Sic Software livre CMS – Autentication Bypass

# Exploit Title: E-Sic Software livre CMS - Autentication Bypass#

2017-10-12 Elber Tavares webapps

E-Sic Software livre CMS – ‘q’ SQL Injection

# Exploit Title: E-Sic Software livre CMS - Blind SQL Injection

2017-10-12 Guilherme Assmann webapps

OctoberCMS 1.0.425 (Build 425) – Cross-Site Scripting

# Exploit Title: OctoberCMS 1.0.425 (aka Build 425) Stored XSS

2017-10-12 Ishaq Mohammed webapps

Trend Micro InterScan Messaging Security (Virtual Appliance) – ‘Proxy.php’ Remote Code Execution (Metasploit)

##

2017-10-11 Mehmet Ince webapps

Trend Micro OfficeScan 11.0/XG (12.0) – Remote Code Execution (Metasploit)

##

2017-10-11 Mehmet Ince webapps

Complain Management System – Hard-Coded Credentials / Blind SQL injection

# Exploit Title : Complain Management System Blind SQL Injection

2017-10-10 havysec webapps

QNAP HelpDesk < 1.1.12 - SQL Injection

## Vulnerability Summary

2017-10-09 SecuriTeam webapps

PHP Melody 2.7.3 – Multiple Vulnerabilities

## Vulnerabilities Summary

2017-10-09 SecuriTeam webapps

ClipShare 7.0 – SQL Injection

# Exploit Title: ClipShare v7.0 - SQL Injection

2017-10-09 8bitsec webapps

ClipBucket 2.8.3 – Remote Code Execution

# Exploit Title: ClipBucket PHP Script Remote Code Execution (RCE)

2017-10-04 Meisam Monsef webapps

EPESI 1.8.2 rev20170830 – Cross-Site Scripting

# Exploit Title: Multiple Stored XSS in EPESI

2017-10-03 Zeeshan Shaikh webapps

phpCollab 2.5.1 – SQL Injection

# [CVE-2017-6089] PhpCollab 2.5.1 Multiple SQL Injections (unauthenticated)

2017-10-02 Sysdream webapps

phpCollab 2.5.1 – Arbitrary File Upload

# [CVE-2017-6090] PhpCollab 2.5.1 Arbitrary File Upload (unauthenticated)

2017-10-02 Sysdream webapps

ConverTo Video Downloader & Converter 1.4.1 – Arbitrary File Download

# # # # #

2017-09-29 Ihsan Sencan webapps

WordPress Plugin WPHRM – SQL Injection

# # # # #

2017-09-29 Ihsan Sencan webapps

FileRun < 2017.09.18 - SQL Injection

#!/usr/bin/env python

2017-09-29 SPARC webapps

Real Estate MLM plan script 1.0 – ‘srch’ SQL Injection

# Exploit Title: Real Estate MLM plan script v1.0 - 'srch' Parameter SQL Injection

2017-09-28 8bitsec webapps

PHP Multi Vendor Script 1.02 – ‘sid’ SQL Injection

# Exploit Title: PHP Multi Vendor Script v1.02 - 'sid' Parameter SQL Injection

2017-09-28 8bitsec webapps

Easy Blog PHP Script 1.3a – ‘id’ SQL Injection

# Exploit Title: Easy Blog PHP Script v1.3a - SQL Injection

2017-09-28 8bitsec webapps

Trend Micro OfficeScan 11.0/XG (12.0) – ‘Host’ Header Injection

[+] Credits: John Page (aka hyp3rlinx)

2017-09-28 hyp3rlinx webapps

Trend Micro OfficeScan 11.0/XG (12.0) – Server Side Request Forgery

[+] Credits: John Page (aka hyp3rlinx)

2017-09-28 hyp3rlinx webapps

Trend Micro OfficeScan 11.0/XG (12.0) – Information Disclosure

[+] Credits: John Page (aka hyp3rlinx)

2017-09-28 hyp3rlinx webapps

Trend Micro OfficeScan 11.0/XG (12.0) – Private Key Disclosure

[+] Credits: John Page (aka hyp3rlinx)

2017-09-28 hyp3rlinx webapps