php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

NewsP Free News Script 1.4.7 – User Credentials Disclosure

# Exploit Title: Free News Script User Password Download File

2016-07-19 Meisam Monsef webapps

Joomla! Component Guru Pro – ‘Itemid’ SQL Injection

# Exploit Title: Joomla Guru Pro (com_guru) Component - SQL Injection

2016-07-14 s0nk3y webapps

Clinic Management System – Blind SQL Injection

####

2016-07-11 Yakir Wizman webapps

Beauty Parlour & SPA Saloon Management System – Blind SQL Injection

####

2016-07-11 Yakir Wizman webapps

Tiki Wiki 15.1 – File Upload (Metasploit)

##

2016-07-11 Mehmet Ince webapps

IPS Community Suite 4.1.12.3 – PHP Code Injection

---------------------------------------------------------------------------

2016-07-11 Egidio Romano webapps

WordPress Plugin Activity Log 2.3.1 – Persistent Cross-Site Scripting

Persistent Cross-Site Scripting in WordPress Activity Log plugin

2016-07-11 Han Sahin webapps

WordPress Plugin All in One SEO Pack 2.3.6.1 – Persistent Cross-Site Scripting

Persistent Cross-Site Scripting in All in One SEO Pack WordPress Plugin

2016-07-11 David Vaartjes webapps

Tiki Wiki CMS 15.0 – Arbitrary File Download

# Exploit Title: Tiki Wiki CMS 15.0 Arbitrary File Download

2016-07-11 Kacper Szurek webapps

Streamo Online Radio And TV Streaming CMS – SQL Injection

######################

2016-07-08 N4TuraL webapps

PHP Real Estate Script 3 – Arbitrary File Disclosure

# Exploit Title: php Real Estate Script Arbitrary File Disclosure

2016-07-08 Meisam Monsef webapps

WordPress Plugin Lazy Content Slider 3.4 – Cross-Site Request Forgery (Add Catetory)

######################

2016-07-08 Persian Hack Team webapps

OPAC KpwinSQL – Multiple Vulnerabilities

OPAC KpwinSQL LFI/XSS Vulnerabilities

2016-07-07 Yakir Wizman webapps

Tiki Wiki 15.1 – File Upload

#!/usr/bin/python

2016-07-07 Ivan Ivanovic webapps

Advanced Webhost Billing System (AWBS) 2.9.6 – Multiple Vulnerabilities

AWBS v2.9.6 Multiple Remote Vulnerabilities

2016-07-06 Bikramaditya Guha webapps

CIMA DocuClass ECM – Multiple Vulnerabilities

# Exploit Title: [CIMA DocuClass Enterprise Content Management - Multiple Vulnerabilities]

2016-07-06 Karn Ganeshen webapps

eCardMAX 10.5 – Multiple Vulnerabilities

Advisory ID: ZSL-2016-5336

2016-07-04 Bikramaditya Guha webapps

WebCalendar 1.2.7 – Multiple Vulnerabilities

[+] Credits: John Page aka HYP3RLINX

2016-07-04 hyp3rlinx webapps

WordPress Plugin Real3D FlipBook – Multiple Vulnerabilities

#########################################################################

2016-07-04 Mukarram Khalid webapps

Ktools Photostore 4.7.5 – Multiple Vulnerabilities

#-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-#

2016-07-04 Yakir Wizman webapps

Phoenix Exploit Kit – Remote Code Execution

# Exploit Title: Phoenix Exploit Kit - Remote Code Execution

2016-07-01 CrashBandicot webapps

Ktools Photostore 4.7.5 – Blind SQL Injection

Title : Ktools Photostore

2016-06-30 Gal Goldshtein & Viktor Minin webapps

Concrete5 CMS 5.7.3.1 – ‘Application::dispatch’ Method Local File Inclusion

-------------------------------------------------------------------------------

2016-06-29 Egidio Romano webapps

WordPress Plugin Ultimate Membership Pro 3.3 – SQL Injection

2016-06-29 wp0Day.com webapps

Symantec Endpoint Protection Manager 12.1 – Multiple Vulnerabilities

[+] Credits: John Page aka HYP3RLINX

2016-06-29 hyp3rlinx webapps

Riverbed SteelCentral NetProfiler & NetExpress 10.8.7 – Multiple Vulnerabilities

( , ) (,

2016-06-27 Security-Assessment.com webapps

SugarCRM 6.5.18 – PHP Code Injection

---------------------------------------------------------

2016-06-27 Egidio Romano webapps

BigTree CMS 4.2.11 – SQL Injection

1. ADVISORY INFORMATION

2016-06-27 Mehmet Ince webapps

My Little Forum 2.3.5 – PHP Command Injection

[+] Credits: hyp3rlinx

2016-06-27 hyp3rlinx webapps

Kagao 3.0 – Multiple Vulnerabilities

######################

2016-06-27 N4TuraL webapps

CodoForum 3.4 – Persistent Cross-Site Scripting

# Exploit Title: Codoforum v3.4 Stored Cross-Site Scripting (Stored XSS)

2016-06-27 Ahmed Sherif webapps

OPAC KpwinSQL – SQL Injection

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

2016-06-27 bRpsd webapps

WordPress Plugin Ultimate Product Catalog 3.8.6 – Arbitrary File Upload

# Exploit Title: Wordpress Ultimate-Product-Catalog v3.8.6 Arbitrary file (RCE)

2016-06-27 i0akiN SEC-LABORATORY webapps

iBilling 3.7.0 – Persistent Cross-Site Scripting / Reflected Cross-Site Scripting

iBilling v3.7.0 Multiple Stored and Reflected Cross Site Scripting Vulnerabilities

2016-06-27 Bikramaditya Guha webapps

FinderView – Multiple Vulnerabilities

# Exploit Title: FinderView - Multiple Vulnerability(Path Traversal/Reflected XSS)

2016-06-23 HaHwul webapps

XuezhuLi FileSharing – Cross-Site Request Forgery (Add User)

2016-06-23 HaHwul webapps

XuezhuLi FileSharing – Directory Traversal

# Exploit Title: XuezhuLi FileSharing - Path Traversal Vulnerability

2016-06-23 HaHwul webapps

Getsimple CMS 3.3.10 – Arbitrary File Upload

# Exploit Title: Getsimple CMS

2016-06-23 s0nk3y webapps

Alibaba Clone B2B Script – Arbitrary File Disclosure

# Exploit Title: Alibaba Clone B2B Script File Read Vulnerability

2016-06-23 Meisam Monsef webapps

Wolf CMS 0.8.2 – Arbitrary File Upload (Metasploit)

##

2016-06-22 s0nk3y remote

YetiForce CRM < 3.1 - Persistent Cross-Site Scripting

# Exploit Title: YetiForce CRM < 3.1 - Persistant XSS Vulnerability

2016-06-21 David Silveiro webapps

Joomla! Component com_publisher – SQL Injection

# Exploit Title: Joomla com_publisher component SQL Injection vulnerability

2016-06-21 s0nk3y webapps

Yona CMS – Cross-Site Request Forgery

2016-06-21 s0nk3y webapps

IonizeCMS 1.0.8 – Cross-Site Request Forgery (Add Admin)

2016-06-21 s0nk3y webapps

Symphony CMS 2.6.7 – Session Fixation

[+] Credits: John Page aka hyp3rlinx

2016-06-20 hyp3rlinx webapps

Airia – Arbitrary File Upload

# Exploit Title: Airia - Webshell Upload Vulnerability

2016-06-20 HaHwul webapps

Airia – Cross-Site Request Forgery (Add Content)

2016-06-20 HaHwul webapps

WordPress Plugin Premium SEO Pack 1.9.1.3 – wp_options Overwrite

2016-06-20 wp0Day.com webapps

Joomla! Component com_bt_media 1.0 – SQL Injection

######################

2016-06-20 Persian Hack Team webapps

sNews CMS 1.7.1 – Multiple Vulnerabilities

[+] Credits: hyp3rlinx

2016-06-20 hyp3rlinx webapps