webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Joomla! Component Directorix Directory Manager 1.1.1 – SQL Injection

# # # # #

2017-02-21 Ihsan Sencan webapps

Joomla! Component J-MultipleHotelReservation Standard 6.0.2 – ‘review_id’ SQL Injection

# # # # #

2017-02-21 Ihsan Sencan webapps

Joomla! Component Eventix Events Calendar 1.0 – SQL Injection

# # # # #

2017-02-21 Ihsan Sencan webapps

Joomla! Component J-CruiseReservation Standard 3.0 – ‘city’ SQL Injection

# # # # #

2017-02-21 Ihsan Sencan webapps

Joomla! Component J-HotelPortal 6.0.2 – ‘review_id’ SQL Injection

# # # # #

2017-02-21 Ihsan Sencan webapps

DIGISOL DG-HR1400 Wireless Router – Cross-Site Request Forgery

Digisol Router CSRF Exploit - Indrajith A.N

2017-02-21 Indrajith.A.N webapps

Album Lock 4.0 iOS – Directory Traversal

Document Title:

2017-02-20 Vulnerability-Lab webapps

Joomla! Component PayPal IPN for DOCman 3.1 – ‘id’ SQL Injection

# # # # #

2017-02-20 Ihsan Sencan webapps

Joomla! Component MaQma Helpdesk 4.2.7 – ‘id’ SQL Injection

# # # # #

2017-02-20 Ihsan Sencan webapps

PHPShell 2.4 – Session Fixation

[+] Credits: John Page AKA hyp3rlinx

2017-02-19 hyp3rlinx webapps

WordPress Plugin Mail Masta 1.0 – SQL Injection

# Exploit Title: Multiple SQL injection vulnerabilities in Mail Masta (aka mail-masta) plugin 1.0 for Wordpress.

2017-02-18 Hanley Shun webapps

Sawmill Enterprise 8.7.9 – Authentication Bypass

[+] Credits: John Page AKA Hyp3rlinx

2017-02-18 hyp3rlinx webapps

Netgear DGN2200v1/v2/v3/v4 – ‘ping.cgi’ Remote Command Execution

#!/usr/bin/python

2017-02-18 SivertPL webapps

Joomla! Component Most Wanted Real Estate 1.1.0 – SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component Google Map Store Locator 4.4 – SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component Bazaar Platform 3.0 – SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component Room Management 1.0 – SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component OS Services Booking 2.5.1 – SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component EShop 2.5.1 – ‘id’ SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component OS Property 3.0.8 – SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component JomWALL 4.0 – ‘wuid’ SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component Joomloc-Lite 1.3.2 – ‘site_id’ SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component Joomloc-CAT 4.1.3 – ‘ville’ SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component WMT Content Timeline 1.0 – ‘id’ SQL Injection

# # # # #

2017-02-17 Ihsan Sencan webapps

Joomla! Component Groovy Gallery 1.0.0 – SQL Injection

# # # # #

2017-02-17 Ihsan Sencan webapps

Joomla! Component Team Display 1.2.1 – ‘filter_category’ SQL Injection

# # # # #

2017-02-17 Ihsan Sencan webapps

Joomla! Component JEmbedAll 1.4 – SQL Injection

# # # # #

2017-02-16 Ihsan Sencan webapps

dotCMS 3.6.1 – Blind Boolean SQL Injection

: '

2017-02-16 Ben Nott webapps

WordPress Plugin Corner Ad 1.0.7 – Cross-Site Scripting

# Exploit Title: Authorized Stored XSS at WordPress Corner-Ad plugin.

2017-02-16 Atik Rahman webapps

Joomla! Component Spider FAQ Lite 1.3.1 – SQL Injection

# # # # #

2017-02-16 Ihsan Sencan webapps

Joomla! Component Spider Facebook 1.6.1 – SQL Injection

# # # # #

2017-02-16 Ihsan Sencan webapps

Joomla! Component Spider Catalog Lite 1.8.10 – SQL Injection

# # # # #

2017-02-16 Ihsan Sencan webapps

Joomla! Component Spider Calendar Lite 3.2.16 – SQL Injection

# # # # #

2017-02-16 Ihsan Sencan webapps

Coppermine Gallery < 1.5.44 - Directory Traversal

Coppermine Gallery

2017-02-15 Hacker Fantastic webapps

Joomla! Component JSP Store Locator 2.2 – ‘id’ SQL Injection

# # # # #

2017-02-15 Ihsan Sencan webapps

Joomla! Component JoomBlog 1.3.1 – SQL Injection

# # # # #

2017-02-15 Ihsan Sencan webapps

Geutebruck 5.02024 G-Cam/EFD-2250 – ‘testaction.cgi’ Remote Command Execution (Metasploit)

##

2017-02-15 RandoriSec webapps