php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

LiveCRM 1.0 – SQL Injection

# # # # #

2017-08-18 Ihsan Sencan webapps

Matrimony Script 2.7 – SQL Injection

# # # # #

2017-08-18 Ihsan Sencan webapps

Food Ordering Script 1.0 – SQL Injection

# # # # #

2017-08-17 Ihsan Sencan webapps

Doctor Patient Project 1.0 – SQL Injection

# # # # #

2017-08-17 Ihsan Sencan webapps

Photogallery Project 1.0 – SQL Injection

# # # # #

2017-08-17 Ihsan Sencan webapps

Online Quiz Project 1.0 – SQL Injection

# # # # #

2017-08-17 Ihsan Sencan webapps

RPi Cam Control < 6.3.14 - Multiple Vulnerabilities

#####

2017-08-16 Alexander Korznikov webapps

AdvanDate iCupid Dating Software 12.2 – SQL Injection

# # # # #

2017-08-15 Ihsan Sencan webapps

ClipBucket 2.8.3 – Multiple Vulnerabilities

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

2017-08-15 bRpsd webapps

RPi Cam Control < 6.3.14 - Remote Command Execution

#####

2017-08-14 Alexander Korznikov webapps

De-Tutor 1.0 – SQL Injection

# # # # #

2017-08-11 Ihsan Sencan webapps

De-Journal 1.0 – SQL Injection

# # # # #

2017-08-11 Ihsan Sencan webapps

DeWorkshop 1.0 – SQL Injection

# # # # #

2017-08-11 Ihsan Sencan webapps

Piwigo Plugin User Tag 0.9.0 – Cross-Site Scripting

# Exploit Title: Piwigo plugin User Tag , Persistent XSS

2017-08-10 Touhid M.Shaikh webapps

GIF Collection 2.0 – SQL Injection

# # # # #

2017-08-10 Ihsan Sencan webapps

ImageBay 1.0 – SQL Injection

# # # # #

2017-08-10 Ihsan Sencan webapps

WebFile Explorer 1.0 – Arbitrary File Download

# # # # #

2017-08-09 Ihsan Sencan webapps

Unitrends UEB 9.1 – Privilege Escalation

# Exploit Title: Authenticated lowpriv RCE for Unitrends UEB 9.1

2017-08-08 Jared Arave webapps

WordPress Plugin Easy Modal 2.0.17 – SQL Injection

DefenseCode ThunderScan SAST Advisory

2017-08-07 defensecode webapps

Horde Groupware 5.2.21 – Unauthorized File Download

## Vulnerability Summary

2017-08-03 SecuriTeam webapps

Joomla! Component StreetGuessr Game 1.1.8 – SQL Injection

# # # # #

2017-08-03 Ihsan Sencan webapps

Muviko 1.0 – ‘q’ SQL Injection

Exploit Title: Muviko - Video CMS v1.0 – 'q' Parameter SQL Injection

2017-08-02 Kaan KAMIS webapps

EDUMOD Pro 1.3 – SQL Injection

Exploit Title: School Management System | EDUMOD Pro v1.3 – SQL Injection

2017-08-02 Kaan KAMIS webapps

Premium Servers List Tracker 1.0 – SQL Injection

Exploit Title: Premium Servers List Tracker v1.0 – SQL Injection

2017-08-02 Kaan KAMIS webapps

Joomla! Component Ultimate Property Listing 1.0.2 – SQL Injection

# # # # #

2017-08-02 Ihsan Sencan webapps

Joomla! Component Event Registration Pro Calendar 4.1.3 – SQL Injection

# # # # #

2017-08-02 Ihsan Sencan webapps

Joomla! Component LMS King Professional 3.2.4.0 – SQL Injection

# # # # #

2017-08-02 Ihsan Sencan webapps

Joomla! Component PHP-Bridge 1.2.3 – SQL Injection

# # # # #

2017-08-02 Ihsan Sencan webapps

Joomla! Component SIMGenealogy 2.1.5 – SQL Injection

# # # # #

2017-08-02 Ihsan Sencan webapps

Entrepreneur B2B Script – ‘pid’ SQL Injection

# Exploit Title: Entrepreneur B2B Script - 'pid' Parameter SQL Injection

2017-08-02 Meisam Monsef webapps

JoySale 2.2.1 – Arbitrary File Upload

JoySale Arbitrary File Upload

2017-08-01 Mutlu Benmutlu webapps

VehicleWorkshop – Arbitrary File Upload

# Exploit Title: VehicleWorkshop Unrestricted File Upload or Shell Upload

2017-08-01 Touhid M.Shaikh webapps

VehicleWorkshop – Authentication Bypass

[*] Type: Admin or Customer login bypass via SQL injection

2017-08-01 Touhid M.Shaikh webapps

VehicleWorkshop – SQL Injection

# Exploit Title: VehicleWorkshop SQL Injection

2017-07-28 Shahab Shamsi webapps

Joomla! Component CCNewsLetter 2.1.9 – ‘sbid’ SQL Injection

"Joomla Component ccnewsletter 2.1.9 - 'sbid' Parameter SQL Injection"

2017-07-27 Shahab Shamsi webapps

Friends in War Make or Break 1.7 – Cross-Site Request Forgery (Change Admin Password)

Friends in War Make or Break 1.7 - Unauthenticated admin password change

2017-07-26 shinnai webapps

Friends in War Make or Break 1.7 – SQL Injection

# # # # #

2017-07-26 Ihsan Sencan webapps

WordPress Plugin Ads Pro < 3.4 - Cross-Site Scripting / SQL Injection

# Exploit Title: Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager = 5.0.12 AND time-based blind

2017-07-25 8bitsec webapps

Friends in War Make or Break 1.7 – Authentication Bypass

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

2017-07-25 Adam webapps

PaulShop – SQL Injection / Cross-Site Scripting

# Exploit Title: PaulShop CMS - Sql Injection and stored XSS

2017-07-24 BTIS Team webapps

vBulletin 5.1.2 < 5.1.9 - Unserialize Code Execution (Metasploit)

##

2017-07-24 Metasploit webapps

NEC UNIVERGE UM4730 < 11.8 - SQL Injection

# Exploit Title: NEC UNIVERGE UM4730 < 11.8 SQL injection

2017-07-21 b0x41s webapps

WordPress Plugin IBPS Online Exam 1.0 – SQL Injection / Cross-Site Scripting

# Exploit Title: IBPS Online Exam Plugin for WordPress v1.0 - XSS SQLi

2017-07-20 8bitsec webapps

Tilde CMS 1.01 – Multiple Vulnerabilities

# Exploit Title: Tilde CMS 1.01 Multiple Vulnerabilities

2017-07-20 Raffaele Forte webapps

Joomla! Component JoomRecipe 1.0.4 – ‘search_author’ SQL Injection

# Exploit Title: Joomla JoomRecipe 1.0.4 Component - Blind SQL Injection Vulnerability

2017-07-20 Teng webapps

Orangescrum 1.6.1 – Multiple Vulnerabilities

# Exploit Title: [Orangescrum 1.6.1 Multiple Vulnerabilities]

2017-07-16 tomplixsee webapps

WordPress Plugin Sabai Discuss – Cross-Site Scripting

# Exploit Title: Sabai Discuss Wordpress Plugin Stored XSS vulnerability

2017-07-12 Hesam Bazvand webapps

Lepide Auditor Suite – ‘createdb()’ Web Console Database Injection / Remote Code Execution

#!/usr/bin/python

2017-07-05 mr_me remote

Joomla! 3.7 – SQL Injection

--==[[ code for India ]]==--

2017-07-04 Manish Tanwar remote

WordPress Plugin WatuPRO 5.5.1 – SQL Injection

#####################################

2017-07-03 Manich Koomsusi webapps