webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Itech Video Sharing Script 4.94 – ‘v’ SQL Injection

Exploit Title: Video Sharing Script 4.94 – SQL Injection

2017-01-30 Kaan KAMIS webapps

PHP Logo Designer Script – Arbitrary File Upload

# # # # #

2017-01-30 Ihsan Sencan webapps

PHP Product Designer Script – Arbitrary File Upload

# # # # #

2017-01-30 Ihsan Sencan webapps

Itech Real Estate Script 3.12 – SQL Injection

Exploit Title: Itech Real Estate Script v3.12 – SQL Injection

2017-01-30 Kaan KAMIS webapps

Itech News Portal Script 6.28 – ‘inf’ SQL Injection

Exploit Title: Itech News Portal Script v6.28 – SQL Injection

2017-01-30 Kaan KAMIS webapps

Itech Multi Vendor Script 6.49 – ‘pl’ SQL Injection

Exploit Title: Itech Multi Vendor Script 6.49 – SQL Injection

2017-01-30 Kaan KAMIS webapps

Itech Freelancer Script 5.13 – SQL Injection

Exploit Title: Itech Freelancer Script v5.13 – SQL Injection

2017-01-30 Kaan KAMIS webapps

Itech Dating Script 3.26 – SQL Injection

Exploit Title: Itech Dating Script v3.26 – SQL Injection

2017-01-30 Kaan KAMIS webapps

Itech Classifieds Script 7.27 – ‘scat’ SQL Injection

Exploit Title: Itech Classifieds Script v7.27 – SQL Injection

2017-01-30 Kaan KAMIS webapps

Itech B2B Script 4.28 – SQL Injection

Exploit Title: Itech B2B Script v4.28 – SQL Injection

2017-01-30 Kaan KAMIS webapps

Itech Auction Script 6.49 – ‘mcid’ SQL Injection

Exploit Title: Itech Auction Script v6.49 – SQL Injection

2017-01-30 Kaan KAMIS webapps

Caregiver Script 2.57 – SQL Injection

Exploit Title: Caregiver Script v2.57 – SQL Injection

2017-01-30 Kaan KAMIS webapps

PHP PEAR 1.10.1 – Arbitrary File Download

[+]#############################################################################################

2017-01-30 hyp3rlinx webapps

TrueConf Server 4.3.7 – Multiple Vulnerabilities

TrueConf Server v4.3.7 Multiple Remote Web Vulnerabilities

2017-01-29 LiquidWorm webapps

Joomla! Component JTAG Calendar 6.2.4 – ‘search’ SQL Injection

# Exploit Title: Joomla Component JTAG Calendar 6.2.4 - SQL Injection

2017-01-28 Persian Hack Team webapps

WordPress Plugin Online Hotel Booking System Pro 1.0 – SQL Injection

# # # # #

2017-01-27 Ihsan Sencan webapps

Online Hotel Booking System Pro 1.2 – SQL Injection

# # # # #

2017-01-27 Ihsan Sencan webapps

WordPress Plugin WP Private Messages 1.0.1 – SQL Injection (2)

# Exploit Title: WP Email Users – 1.4.1 – Plugin WordPress – Sql Injection

2017-01-27 Lenon Leite webapps

Radisys MRF – Command Injection

Title: MRF Web Panel OS Command Injection

2017-01-27 Filippos Mastrogiannis webapps

Maian Weblog 4.0 – SQL Injection

Introduction

2017-01-27 Kaan KAMIS webapps

My Photo Gallery 1.0 – SQL Injection

Introduction

2017-01-27 Kaan KAMIS webapps

Polycom VVX Web Interface – Change Admin Password

# Exploit Title: Polycom VVX Web Interface - Change Admin Password as User

2017-01-26 Mike Brown webapps

PHPBack < 1.3.1 - SQL Injection / Cross-Site Scripting

##################################################################################################

2017-01-26 Manish Tanwar webapps

TM RG4332 Wireless Router – Arbitrary File Disclosure

# Exploit Title: TM RG4332 Wireless Router Traversal Arbitrary File Read

2017-01-26 Saeid Atabaki webapps

Web Based TimeSheet Script – Authentication Bypass

# # # # #

2017-01-26 Ihsan Sencan webapps

KB Messages PHP Script 1.0 – Authentication Bypass

# # # # #

2017-01-26 Ihsan Sencan webapps

KB Login Authentication Script 1.1 – Authentication Bypass

# # # # #

2017-01-26 Ihsan Sencan webapps

KB Affiliate Referral Script 1.0 – Authentication Bypass

# # # # #

2017-01-26 Ihsan Sencan webapps

PHP PEAR HTTP_Upload 1.0.0b3 – Arbitrary File Upload

[+]################################################################################################

2017-01-26 hyp3rlinx webapps

Movie Portal Script 7.36 – Multiple Vulnerabilities

Exploit Title : Movie Portal Script v7.36 - Multiple Vulnerability

2017-01-25 Marc Castejon webapps

WD My Cloud Mirror 2.11.153 – Authentication Bypass / Remote Code Execution

# Exploit Title: WD My Cloud Mirror 2.11.153 RCE and Authentication Bypass

2017-01-24 Kacper Szurek webapps

NTOPNG 2.4 Web Interface – Cross-Site Request Forgery

[+]#####################################################################################

2017-01-22 hyp3rlinx webapps

PageKit 1.0.10 – Password Reset

# Exploit Title: Remote PageKit Password Reset Vulnerability

2017-01-21 Saurabh Banawar webapps

Joomla! < 3.6.4 - Admin Takeover

#!/usr/bin/python3

2017-01-20 Charles Fol webapps

Joomla! < 2.5.2 - Admin Creation

#!/usr/bin/python3

2017-01-20 Charles Fol webapps

MyBB < 1.8.3 (with PHP 5.6 < 5.6.11) - Remote Code Execution

#GMP Deserialization Type Confusion Vulnerability [MyBB A type-confusion vulnerability was discovered in GMP deseria...

2017-01-20 Taoguang Chen webapps