webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Gallery 2 < 2.0.2 - Multiple Vulnerabilities
Gallery 2 Multiple Vulnerabilities
WordPress Plugin CP Polls 1.0.8 – Multiple Vulnerabilities
# Exploit Title: WordPress CP Polls 1.0.8 - CSRF - Update poll settings & Persistent XSS
WordPress Plugin More Fields 2.1 – Cross-Site Request Forgery
# Exploit Title: Wordpress More Fields Plugin 2.1 Cross-Site Request Forgery
phpRPC < 0.7 - Remote Code Execution
phpRPC Remote Code Execution
Joomla! Component com_poweradmin 2.3.0 – Multiple Vulnerabilities
---------------------------------------------------------
Centreon 2.5.3 – Remote Command Execution
Unauthenticated Remote Command Execution in Centreon Web Interface
Zimbra 8.0.9 GA – Cross-Site Request Forgery
======================================
Infor CRM 8.2.0.1136 – Multiple HTML Script Injection Vulnerabilities
Infor CRM 8.2.0.1136 Multiple HTML Script Injection Vulnerabilities
IBM Lotus Domino R8 – Password Hash Extraction
# Exploit Title: IBM Lotus Domino
Mambo < 4.5.3h - Multiple Vulnerabilities
Mambo Multiple Vulnerabilities
Ubiquiti Networks UniFi 3.2.10 – Cross-Site Request Forgery
RCE Security Advisory
Dell OpenManage Server Administrator 8.2 – (Authenticated) Directory Traversal
# Exploit Title: Dell OpenManage Server Administrator 8.2 Authenticated
Thru Managed File Transfer Portal 9.0.2 – SQL Injection
-----BEGIN PGP SIGNED MESSAGE-----
InstantCoder 1.0 iOS – Multiple Vulnerabilities
Document Title:
PEAR LiveUser < 0.16.8 - Arbitrary File Access
PEAR LiveUser Arbitrary File Access
SOLIDserver < 5.0.4 - Local File Inclusion
Title: SOLIDserver
Geeklog < 1.4.0 - Multiple Vulnerabilities
Geeklog Multiple Vulnerabilities
ManageEngine Firewall Analyzer 8.5 – Multiple Vulnerabilities
================================================================
Chamilo LMS – Persistent Cross-Site Scripting
Document Title:
Chamilo LMS IDOR – ‘messageId’ Delete POST Injection
Document Title:
ADOdb < 4.71 - Cross Site Scripting
ADOdb Cross Site Scripting
DirectAdmin 1.491 – Cross-Site Request Forgery
=============================================================================
Vesta Control Panel 0.9.8-15 – Persistent Cross-Site Scripting
# Exploit Title :Vesta Control Panel
Redaxo 5.0.0 – Multiple Vulnerabilities
=== LSE Leading Security Experts GmbH - Security Advisory 2016-01-18 ===
OCS Inventory NG 2.2 – SQL Injection
# Exploit Title: OCS Inventory NG
JMX2 Email Tester – ‘save_email.php’ Arbitrary File Upload
# Exploit Title: JMX2 Email Tester - Web Shell Upload(save_email.php)
phpMyBackupPro 2.5 – Remote Command Execution / Cross-Site Request Forgery
[+] Credits: hyp3rlinx
WordPress Plugin ALO EasyMail NewsLetter 2.6.01 – Cross-Site Request Forgery
# Exploit Title: Wordpress ALO EasyMail Newsletter plugin cross-site request forgery vulnerability
ManageEngine Network Configuration Management Build 11000 – Privilege Escalation
===================================================================================
ManageEngine OPutils 8.0 – Multiple Vulnerabilities
===================================================================================
Tiny Tiny RSS – Blind SQL Injection
# Exploit Title: Tiny Tiny RSS Blind SQL Injection
Yeager CMS 1.2.1 – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20160210-0 >
WordPress Plugin Booking Calendar Contact Form 1.0.23 – Multiple Vulnerabilities
# Exploit Title: Wordpress booking calendar contact form '',
dotDefender Firewall 5.00.12865/5.13-13282 – Cross-Site Request Forgery
[+] Credits: hyp3rlinx
Solr 3.5.0 – Arbitrary Data Deletion
# Exploit Title: All Solr Data Can Be Delete
Symphony CMS 2.6.3 – Multiple SQL Injections
================================================================
ATutor 2.2 – Multiple Cross-Site Scripting Vulnerabilities
Security Advisory - Curesec Research Team
OpenDocMan 1.3.4 – Cross-Site Request Forgery
Security Advisory - Curesec Research Team
UliCMS v9.8.1 – SQL Injection
=============================================
Netgear NMS300 ProSafe Network Management System – Multiple Vulnerabilities
>> Remote code execution / arbitrary file download in NETGEAR ProSafe Network Management System NMS300