php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
iTechscripts Freelancer Script 5.11 – ‘sk’ SQL Injection
#!/usr/bin/perl -w
Dating Script 3.25 – SQL Injection
# Vulnerability: Dating Script v3.25 - SQL Injection
My Link Trader 1.1 – ‘id’ SQL Injection
# Vulnerability: My link trader - SQL Injection
Starting Page 1.3 – ‘category’ SQL Injection
# Exploit Title: Starting Page 1.3 "Add a Link" - SQL Injection
WordPress Plugin WP Support Plus Responsive Ticket System 7.1.3 – Privilege Escalation
# Exploit Title: WP Support Plus Responsive Ticket System 7.1.3 Privilege Escalation
Starting Page 1.3 – ‘linkid’ SQL Injection
# Vulnerability: Starting Page- SQL Injection
Friends in War Make or Break 1.7 – ‘imgid’ SQL Injection
# Exploit : Make or Break 1.7 (imgid) SQL Injection Vulnerability
My PHP Dating 2.0 – ‘id’ SQL Injection
# Vulnerability: My Php Dating 2.0 - SQL Injection
My PHP Dating 2.0 – ‘path’ SQL Injection
# # # # #
DirectAdmin 1.50.1 – Denial of Service
#################################
Splunk 6.1.1 – ‘Referer’ Header Cross-Site Scripting
# Exploit Title: Splunk 'Referer' Header Cross Site Scripting Vulnerability
My Click Counter 1.0 – Authentication Bypass
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
b2evolution 6.8.2 – Arbitrary File Upload
# Exploit Title: b2evolution6.8.2stable – Upload
WordPress Plugin Slider Templatic Tevolution < 2.3.6 - Arbitrary File Upload
# Exploit Title: WordPress Templatic
Joomla! Component aWeb Cart Watching System for Virtuemart 2.6.0 – SQL Injection
# Exploit Title: Sqli Blind Timebased on Joomla + Viertuemart + aweb-cartwatching-system/aweb-cartwatching
WordPress Plugin Simply Poll 1.4.1 – SQL Injection
# Exploit Title: Simply Poll 1.4.1 Plugin for WordPress SQL Injection
PHPMailer < 5.2.20 - Remote Code Execution
#!/usr/bin/python
PHPMailer < 5.2.18 - Remote Code Execution
#!/bin/bash
Joomla! Component Blog Calendar – SQL Injection
==========================================================================================
Freepbx < 2.11.1.5 - Remote Code Execution
Exploit Title: Freepbx coockie recordings injection
WordPress Plugin 404 Redirection Manager 1.0 – SQL Injection
# Exploit Title: Unauthenticated SQL injeciton in 404 plugin for Wordpress v1.0
WordPress Plugin WP Private Messages 1.0.1 – SQL Injection (1)
# Exploit Title: WP Private Messages 1.0.1 – Plugin WordPress – Sql Injection
WordPress Plugin WP Support Plus Responsive Ticket System 7.1.3 – SQL Injection
# Exploit Title: WP Support Plus Responsive Ticket System 7.1.3 – WordPress Plugin – Sql Injection
WordPress Plugin Quiz And Survey Master 4.5.4/4.7.8 – Cross-Site Request Forgery
Click the submit button on the following page (in a real attack the form can be submitted without user interaction):
WHMCompleteSolution (WHMCS) Addon VMPanel 2.7.4 – SQL Injection
=====================================================
Joomla! Component DT Register – ‘cat’ SQL Injection
Title: SQL injection in Joomla extension DT Register
Sophos Web Appliance 4.2.1.3 – block/unblock Remote Command Injection (Metasploit)
# Exploit Title: Sophos Web Appliance UnBlock/Block-IP Remote Command Injection Vulnerablity
Roundcube 1.2.2 – Remote Code Execution
Roundcube 1.2.2: Command Execution via Email
Edge SkateShop – Authentication bypass
# Exploit Title: Edge SkateShop Authentication Bypass
AbanteCart 1.2.7 – Cross-Site Scripting
# Exploit Title: AbanteCart 1.2.7 Stored XSS
WordPress Plugin Single Personal Message 1.0.3 – SQL Injection
# Exploit Title: Single Personal Message 1.0.3 – Plugin WordPress – Sql Injection
Smart Guard Network Manager 6.3.2 – SQL Injection
# Exploit Title: SQL Injection In Smart Guard Network Manager Api
WordPress Plugin WP Vault 0.8.6.6 – Local File Inclusion
# Exploit Title: WP Vault 0.8.6.6 – Plugin WordPress – Local File Inclusion
osTicket 1.9.14 – ‘X-Forwarded-For’ Cross-Site Scripting
# Exploit Title: Osticket 1.9.14 and below (X-Forwarded-For) Stored XSS.
EasyPHP Devserver 16.1.1 – Cross-Site Request Forgery / Remote Command Execution
[+] Credits: John Page aka hyp3rlinx
WordPress Plugin Olimometer 2.56 – SQL Injection
# Exploit Title: Olimometer Plugin for WordPress – Sql Injection
FUDforum 3.0.6 – Local File Inclusion
Security Advisory - Curesec Research Team
FUDforum 3.0.6 – Cross-Site Scripting / Cross-Site Request Forgery
Security Advisory - Curesec Research Team
LEPTON 2.2.2 – Remote Code Execution
Security Advisory - Curesec Research Team