php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

PHP Classifieds Rental Script – Blind SQL Injection

[x]==================================================================================================================...

2016-10-06 OoN_Boy webapps

Advance MLM Script – SQL Injection

[x]==================================================================================================================...

2016-10-06 OoN_Boy webapps

Picosafe Web GUI – Multiple Vulnerabilities

[-] Title : Picosafe Web Gui - Multiple Vulnerabilities

2016-10-05 Shahab Shamsi webapps

Mambo < 4.5.4 - SQL Injection

Mambo SQL Injection

2016-10-04 GulfTech Security webapps

FreePBX < 13.0.188 - Remote Command Execution (Metasploit)

#Title : Freepbx < 13.0.188 , Remote root exploit

2016-09-27 0x4148 remote

Joomla! Component Event Booking 2.10.1 – SQL Injection

######################

2016-09-26 Persian Hack Team webapps

Matrimonial Website Script 1.0.2 – SQL Injection

######################

2016-09-22 N4TuraL webapps

Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 – Multiple Vulnerabilities

SEC Consult has also released a blog post describing the attack scenarios

2016-09-22 SEC Consult webapps

Joomla! Component com_videogallerylite 1.0.9 – SQL Injection

Title: Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla

2016-09-22 Larry W. Cashdollar webapps

Exponent CMS 2.3.9 – Blind SQL Injection

=============================================

2016-09-22 Manuel García Cárdenas webapps

Kaltura 11.1.0-2 – Remote Code Execution (Metasploit)

##

2016-09-21 Mehmet Ince remote

Dolphin 7.3.0 – Error-Based SQL Injection

# Exploit Title: Dolphin 7.3.0 Error Based SQL Injection

2016-09-20 Kacper Szurek webapps

VegaDNS 0.13.2 – Remote Command Injection

#!/usr/bin/perl

2016-09-20 Wireghoul webapps

ShoreTel Connect ONSITE – Blind SQL Injection

# Exploit Title: ShoreTel Connect ONSITE Blind SQL Injection Vulnerability

2016-09-19 Iraklis Mathiopoulos webapps

ZineBasic 1.1 – Arbitrary File Disclosure

# Title: ZineBasic 1.1 Remote File Disclosure Exploit

2016-09-19 bd0rk webapps

MyBB 1.8.6 – SQL Injection

Security Advisory - Curesec Research Team

2016-09-19 Curesec Research Team webapps

Kajona 4.7 – Cross-Site Scripting / Directory Traversal

Security Advisory - Curesec Research Team

2016-09-19 Curesec Research Team webapps

WordPress Plugin Order Export Import for WooCommerce – Order Information Disclosure

# Exploit Title: WordPress Plugin Order Export Import for WooCommerce

2016-09-19 david-peltier webapps

BuilderEngine 3.5.0 – Arbitrary File Upload

2016-09-19 metanubix webapps

Joomla! Component Portfolio Gallery 1.0.6 – SQL Injection

Title: Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Joomla extension v1.0.6

2016-09-16 Larry W. Cashdollar webapps

Joomla! Component Catalog 1.0.7 – SQL Injection

Title: Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla

2016-09-16 Larry W. Cashdollar webapps

AnoBBS 1.0.1 – Remote File Inclusion

AnoBBS 1.0.1 Remote File Inclusion Exploit

2016-09-16 bd0rk webapps

Contrexx CMS egov Module 1.0.0 – SQL Injection

# Exploit Title: Contrexx CMS:egov moudle SQL injection

2016-09-13 hamidreza borghei webapps

wdCalendar 2 – SQL Injection

# Exploit Title: wdcalendar version 2 sql injection vulnerability

2016-09-13 Alfonso Castillo Angel webapps

Cherry Music 0.35.1 – Arbitrary File Disclosure

# Exploit Title: Cherry Music v0.35.1 directory traversal vulnerability allows authenticated users to download arbitr...

2016-09-13 feedersec webapps

Zabbix 2.0 < 3.0.3 - SQL Injection

# Exploit Title: 2.0 < Zabbix < 3.0.4 SQL Injection Python PoC

2016-09-08 Zzzians webapps

Jobberbase 2.0 – Multiple Vulnerabilities

Jobberbase: http://www.jobberbase.com/

2016-09-08 Ross Marks webapps

FreePBX 13.0.x < 13.0.154 - Remote Command Execution

Vulnerable software : Freepbx

2016-09-07 i-Hmx webapps

SugarCRM 6.5.23 – REST PHP Object Injection (Metasploit)

##

2016-09-07 Egidio Romano remote

CumulusClips 2.4.1 – Multiple Vulnerabilities

# Exploit Title: CumulusClips Session fixation

2016-09-07 kor3k webapps

PHPIPAM 1.2.1 – Multiple Vulnerabilities

PHPIPAM 1.2.1 Multiple Vulnerabilities

2016-09-06 Saeed reza Zamanian webapps

WordPress Plugin RB Agency 2.4.7 – Local File Disclosure

######################

2016-09-05 Persian Hack Team webapps

PHP 7.0 – JsonSerializable::jsonSerialize json_encode Local Denial of Service

2016-08-31 Yakir Wizman dos

PHP 7.0 – ‘AppendIterator::append’ Local Denial of Service

2016-08-31 Yakir Wizman dos

PHP 5.0.0 – ‘snmpset()’ Local Denial of Service

2016-08-31 Yakir Wizman dos

PHP 5.0.0 – ‘snmprealwalk()’ Local Denial of Service

2016-08-31 Yakir Wizman dos

PHP 5.0.0 – ‘snmpwalk()’ Local Denial of Service

2016-08-31 Yakir Wizman dos

PHP 5.0.0 – ‘fbird_[p]connect()’ Local Denial of Service

2016-08-31 Yakir Wizman dos

PHP 5.0.0 – ‘snmpwalkoid()’ Local Denial of Service

2016-08-31 Yakir Wizman dos

RSS News AutoPilot Script 1.0.1/3.0.3 – Cross-Site Request Forgery

# Exploit Title: RSS News AutoPilot Script 1.0.1 / 3.0.3 - CSRF to

2016-08-30 Arbin Godar webapps

PHP 5.0.0 – ‘html_doc_file()’ Local Denial of Service

2016-08-30 Yakir Wizman dos

PHP 5.0.0 – ‘hw_docbyanchor()’ Local Denial of Service

2016-08-30 Yakir Wizman dos

PHP 5.0.0 – ‘imap_mail()’ Local Denial of Service

2016-08-30 Yakir Wizman dos

FreePBX 13.0.35 – SQL Injection

Vulnerable software : Freepbx

2016-08-29 i-Hmx webapps

PHP 5.0.0 – ‘xmldocfile()’ Local Denial of Service

2016-08-29 Yakir Wizman dos

PHP 5.0.0 – ‘simplexml_load_file()’ Local Denial of Service

2016-08-29 Yakir Wizman dos

PHP 7.0 – Object Cloning Local Denial of Service

2016-08-29 Yakir Wizman dos

PHP 5.0.0 – ‘domxml_open_file()’ Local Denial of Service

2016-08-29 Yakir Wizman dos

HelpDeskZ 1.0.2 – Arbitrary File Upload

'''

2016-08-29 Lars Morgenroth webapps

FreePBX 13.0.35 – Remote Command Execution

Vulnerable software : Freepbx

2016-08-29 0x4148 webapps