webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WordPress Plugin Ultimate Product Catalog 4.2.24 – PHP Object Injection
# Exploit Title: [WP Plugin Ultimate Product Catalog 4.2.24 PHP Object Injection]
News 1.0 – SQL Injection
# # # # #
PHPMyFAQ 2.9.8 – Cross-Site Scripting (3)
# Exploit Title: phpMyFAQ 2.9.8 Stored XSS Vulnerability
PHP Melody 2.6.1 – SQL Injection
###################################################
phpMyFAQ 2.9.8 – Cross-Site Request Forgery
# Exploit Title: phpMyFAQ 2.9.8 CSRF Vulnerability
PHPMailer < 5.2.21 - Local File Disclosure
# Exploit Title: PHPMailer
KeystoneJS 4.0.0-beta.5 – Cross-Site Scripting
# Exploit Title: KeystoneJS 4.0.0-beta.5 Unauthenticated Stored XSS
KeystoneJS 4.0.0-beta.5 – CSV Excel Macro Injection
# Exploit Title: KeystoneJS 4.0.0-beta.5 Unauthenticated CSV Injection
FS Realtor Clone – ‘id’ SQL Injection
# Exploit Title: FS Realtor Clone - 'id' SQL Injection
FS Crowdfunding Script – ‘id’ SQL Injection
# Exploit Title: FS Crowdfunding Script - 'id' SQL Injection
FS Care Clone – ‘sitterService’ SQL Injection
# Exploit Title: FS Care Clone - 'sitterService' SQL Injection
FS Monster Clone – ‘id’ SQL Injection
# Exploit Title: FS Monster Clone - 'id' SQL Injection
FS Trademe Clone – ‘id’ SQL Injection
# Exploit Title: FS Trademe Clone - 'id' SQL Injection
FS Thumbtack Clone – ‘ser’ SQL Injection
# Exploit Title: FS Thumbtack Clone - 'ser' SQL Injection
FS Shutter Stock Clone – ‘keywords’ SQL Injection
# Exploit Title: FS Shutter Stock Clone - 'keywords' SQL Injection
Mura CMS < 6.2 - Server-Side Request Forgery / XML External Entity Injection
# Exploit Title: Mura CMS before 6.2 SSRF + XXE
FS OLX Clone – ‘catg_id’ SQL Injection
# Exploit Title: FS OLX Clone - SQL Injection
FS Lynda Clone – ‘category’ SQL Injection
# Exploit Title: FS Lynda Clone - SQL Injection
FS Indiamart Clone – ‘keywords’ SQL Injection
# Exploit Title: FS Indiamart Clone - SQL Injection
FS Groupon Clone – ‘category’ SQL Injection
# Exploit Title: FS Groupon Clone - SQL Injection
FS Freelancer Clone – ‘sk’ SQL Injection
# Exploit Title: FS Freelancer Clone - SQL Injection
FS Expedia Clone – ‘hid’ SQL Injection
# Exploit Title: FS Expedia Clone - SQL Injection
FS Food Delivery Script – ‘keywords’ SQL Injection
# Exploit Title: FS Food Delivery Script - SQL Injection
FS Ebay Clone – ‘pd_maincat_id’ SQL Injection
# Exploit Title: FS Ebay Clone - SQL Injection
FS Book Store Script – ‘category’ SQL Injection
# Exploit Title: FS Book Store Script - SQL Injection
FS Amazon Clone – ‘category_id’ SQL Injection
# Exploit Title: FS Amazon Clone - SQL Injection
FS Car Rental Script – ‘pickup_location’ SQL Injection
# Exploit Title: FS Car Rental Script - SQL Injection
Kaltura < 13.2.0 - Remote Code Execution
#!/usr/bin/env python
CometChat < 6.2.0 BETA 1 - Local File Inclusion
# Exploit Title: CometChat < v6.2.0 BETA 1 - Local File Inclusion
Check_MK 1.2.8p25 – Information Disclosure
1. ADVISORY INFORMATION
Afian AB FileRun 2017.03.18 – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20171018-0 >
Linksys E Series – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20171018-1 >
TP-Link WR940N – (Authenticated) Remote Code
import urllib2
WordPress Plugin Car Park Booking – SQL Injection
# Exploit Title: Wordpress Plugin Car Park Booking - SQL Injection
Career Portal 1.0 – SQL Injection
# Exploit Title: Career Portal v1.0 - SQL Injection
Apache Solr 7.0.1 – XML External Entity Expansion / Remote Code Execution
First Vulnerability: XML External Entity Expansion (deftype=xmlparser)
OpenText Documentum Content Server – Arbitrary File Download
#!/usr/bin/env python
OpenText Documentum Content Server – ‘dmr_content’ Privilege Escalation
#!/usr/bin/env python
OpenText Documentum Content Server – Arbitrary File Download Privilege Escalation
#!/usr/bin/env python
OpenText Documentum Content Server – Privilege Escalation
#!/usr/bin/env python
Squid Analysis Report Generator 2.3.10 – Remote Code Execution
# Exploit Title: RCE/Arbitrary file write in Squid Analysis Report Generator (SARG)
Webmin 1.850 – Multiple Vulnerabilities
[+] SSD Beyond Security: https://blogs.securiteam.com/index.php/archives/3430
Logitech Media Server – Cross-Site Scripting
# Exploit Title: DOM Based Cross Site Scripting (XSS) - Logitech Media Server
FiberHome – Directory Traversal
## Vulnerability Summary
AlienVault Unified Security Management (USM) 5.4.2 – Cross-Site Request Forgery
1. ADVISORY INFORMATION
phpMyFAQ 2.9.8 – Cross-Site Scripting (2)
# Exploit Title: phpMyFAQ 2.9.8 Stored XSS
TYPO3 Extension Restler 1.7.0 – Local File Disclosure
# Exploit Title: Typo3 Restler Extension - Local File Disclosure
TP-Link TL-MR3220 – Cross-Site Scripting
# Exploit Title: Vulnerability Xss - TP-LINK TL-MR3220