php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Joomla! Component AYS Quiz 1.0 – ‘id’ SQL Injection

# # # # #

2017-03-04 Ihsan Sencan webapps

Joomla! Component Monthly Archive 3.6.4 – ‘author_form’ SQL Injection

# # # # #

2017-03-04 Ihsan Sencan webapps

Joomla! Component JUX EventOn 1.0.1 – ‘id’ SQL Injection

# # # # #

2017-03-04 Ihsan Sencan webapps

Multiple WordPress Plugins – Arbitrary File Upload

import requests

2017-03-03 The Martian webapps

pfSense 2.3.2 – Cross-Site Scripting / Cross-Site Request Forgery

######################################################################

2017-03-03 Yann CAM webapps

Joomla! Component Coupon 3.5 – SQL Injection

# # # # #

2017-03-03 Ihsan Sencan webapps

WordPress Core < 4.7.1 - Username Enumeration

#!usr/bin/php

2017-03-03 Dctor webapps

Joomla! Component Recipe Manager 2.2 – ‘id’ SQL Injection

# # # # #

2017-03-02 Ihsan Sencan webapps

Joomla! Component Guesser 1.0.4 – ‘type’ SQL Injection

# # # # #

2017-03-02 Ihsan Sencan webapps

Joomla! Component StreetGuessr Game 1.0 – SQL Injection

# # # # #

2017-03-02 Ihsan Sencan webapps

Joomla! Component Abstract 2.1 – SQL Injection

# # # # #

2017-03-02 Ihsan Sencan webapps

Php Classified OLX Clone Script – ‘category’ SQL Injection

# # # # #

2017-03-02 Ihsan Sencan webapps

Meme Maker Script 2.1 – ‘user’ SQL Injection

# # # # #

2017-03-01 Ihsan Sencan webapps

Rage Faces Script 1.3 – SQL Injection

# # # # #

2017-03-01 Ihsan Sencan webapps

SchoolDir – SQL Injection

# # # # #

2017-03-01 Ihsan Sencan webapps

WordPress Plugin File Manager 3.0.1 – Cross-Site Request Forgery

POST /wp-admin/admin-ajax.php HTTP/1.1

2017-03-01 David Vaartjes webapps

WordPress Plugin Global Content Blocks 2.1.5 – Cross-Site Request Forgery

2017-03-01 Yorick Koster webapps

WordPress Plugin NewStatPress 1.2.4 – Cross-Site Scripting

Source: https://sumofpwn.nl/advisory/2016/persistent_cross_site_scripting_in_the_wordpress_newstatpress_plugin.html

2017-03-01 Han Sahin webapps

WordPress Plugin Popup by Supsystic 1.7.6 – Cross-Site Request Forgery

2017-03-01 Radjnies Bhansingh webapps

WordPress Plugin User Login Log 2.2.1 – Cross-Site Scripting

Source: https://sumofpwn.nl/advisory/2016/stored_cross_site_scripting_vulnerability_in_user_login_log_wordpress_plugi...

2017-03-01 Axel Koolhaas webapps

WordPress Plugin Contact Form Manager – Cross-Site Request Forgery / Cross-Site Scripting

xyz_cfm_SmtpAuthentication

2017-03-01 Edwin Molenaar webapps

Sophos Web Appliance 4.3.1.1 – Session Fixation

# Exploit Title: [Sophos Secure Web Appliance Session Fixation Vulnerability]

2017-02-28 SlidingWindow webapps

Joomla! Component OneVote! 1.0 – SQL Injection

# # # # #

2017-02-27 Ihsan Sencan webapps

Joomla! Component JomSocial – SQL Injection

# # # # #

2017-02-25 Ihsan Sencan webapps

Joomla! Component Spinner 360 1.3.0 – SQL Injection

# # # # #

2017-02-25 Ihsan Sencan webapps

Joomla! Component Appointments for JomSocial 3.8.1 – SQL Injection

# # # # #

2017-02-25 Ihsan Sencan webapps

Joomla! Component Gnosis 1.1.2 – ‘id’ SQL Injection

# # # # #

2017-02-25 Ihsan Sencan webapps

Joomla! Component Intranet Attendance Track 2.6.5 – SQL Injection

# # # # #

2017-02-25 Ihsan Sencan webapps

Joomla! Component My MSG 3.2.1 – SQL Injection

# # # # #

2017-02-25 Ihsan Sencan webapps

memcache-viewer – Cross-Site Scripting

# Exploit Title: memcache-viewer - Stored XSS

2017-02-24 HaHwul webapps