php

日期	标题	类别	作者
2019-03-01	WordPress Core 5.0 – Remote Code Execution	webapps	allyshka
2019-02-28	Feng Office 3.7.0.5 – Remote Command Execution (Metasploit)	webapps	AkkuS
2019-02-28	Joomla! Component J2Store < 3.3.7 - SQL Injection	webapps	Andrei Conache
2019-02-28	Simple Online Hotel Reservation System – Cross-Site Request Forgery (Delete Admin)	webapps	Mr Winst0n
2019-02-28	Simple Online Hotel Reservation System – Cross-Site Request Forgery (Add Admin)	webapps	Mr Winst0n
2019-02-28	Simple Online Hotel Reservation System – SQL Injection	webapps	Mr Winst0n
2019-02-27	PHP 7.2 – ‘imagecolormatch()’ Out of Band Heap Write	remote	cfreal
2019-02-25	Drupal < 8.6.9 - REST Module Remote Code Execution	webapps	leonjza
2019-02-25	Advance Gift Shop Pro Script 2.0.3 – SQL Injection	webapps	Mr Winst0n
2019-02-25	News Website Script 2.0.5 – SQL Injection	webapps	Mr Winst0n
2019-02-25	PHP Ecommerce Script 2.0.6 – Cross-Site Scripting / SQL Injection	webapps	Mr Winst0n
2019-02-25	zzzphp CMS 1.6.1 – Remote Code Execution	webapps	Yang Chenglong
2019-02-23	Drupal < 8.6.10 / < 8.5.11 - REST Module Remote Code Execution	webapps	Charles Fol
2019-02-21	EI-Tube 3 – SQL Injection	webapps	Meisam Monsef
2019-02-21	C4G Basic Laboratory Information System (BLIS) 3.4 – SQL Injection	webapps	Carlos Avila
2019-02-20	HotelDruid 2.3 – Cross-Site Scripting	webapps	Mehmet EMIROGLU
2019-02-19	Ask Expert Script 3.0.5 – Cross Site Scripting / SQL Injection	webapps	Mr Winst0n
2019-02-19	XAMPP 5.6.8 – SQL Injection / Persistent Cross-Site Scripting	webapps	Rafael Pedrero
2019-02-19	eDirectory – SQL Injection	webapps	Efrén Díaz
2019-02-19	Zuz Music 2.1 – ‘zuzconsole/___contact ‘ Persistent Cross-Site Scripting	webapps	Deyaa Muhammad
2019-02-19	Listing Hub CMS 1.0 – ‘pages.php id’ SQL Injection	webapps	Deyaa Muhammad
2019-02-19	Find a Place CMS Directory 1.5 – ‘assets/external/data_2.php cate’ SQL Injection	webapps	Deyaa Muhammad
2019-02-18	WordPress Plugin WooCommerce – GloBee (cryptocurrency) Payment Gateway 1.1.1 – Payment Bypass / Unauthorized Order Status Spoofing	webapps	GeekHack
2019-02-18	Webiness Inventory 2.3 – ‘ProductModel’ Arbitrary File Upload	webapps	Mehmet EMIROGLU