webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

webERP 4.11.3 – ‘SalesInquiry.php?SortBy’ SQL Injection

# ==============================================================

2014-02-28 HauntIT webapps

WordPress Plugin VideoWhisper 4.27.3 – Multiple Vulnerabilities

Advisory ID: HTB23199

2014-02-28 High-Tech Bridge SA webapps

MICROSENS Profi Line Switch 10.3.1 – Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory < 20140228-0 >

2014-02-28 SEC Consult webapps

Plex Media Server 0.9.9.2.374-aa23a69 – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20140228-1 >

2014-02-28 SEC Consult webapps

Plex Media Server 0.9.9.2.374-aa23a69 – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20140228-1 >

2014-02-28 SEC Consult webapps

Webuzo 2.1.3 – Multiple Vulnerabilities

# Exploit Title: Webuzo Multiple Vulnerabilities

2014-02-28 Mahendra webapps

PHP Ticket System Beta 1 – ‘get_all_created_by_user.php?id’ SQL Injection

# ==============================================================

2014-02-28 HauntIT webapps

PHP-CMDB 0.7.3 – Multiple Vulnerabilities

# ==============================================================

2014-02-28 HauntIT webapps

Bluetooth Photo Share Pro 2.0 iOS – Multiple Vulnerabilities

Document Title:

2014-02-27 Vulnerability-Lab webapps

GDL 4.2 – Multiple Vulnerabilities

-> Title : GDL 4.2 Multiple Vulnerabilities

2014-02-27 ByEge webapps

Piwigo 2.6.1 – Cross-Site Request Forgery

# Exploit Title: piwigo 2.6.1 - CSRF

2014-02-26 killall-9 webapps

POSH 3.1.x – ‘addtoapplication.php’ SQL Injection

source: https://www.securityfocus.com/bid/65817/info

2014-02-26 Anthony BAUBE webapps

Private Camera Pro 5.0 iOS – Multiple Vulnerabilities

Document Title:

2014-02-25 Vulnerability-Lab webapps

Sendy 1.1.8.4 – SQL Injection

# Exploit Title: Sendy SqlInject

2014-02-25 Hurley webapps

WiFiles HD 1.3 iOS – Local File Inclusion

Document Title:

2014-02-25 Vulnerability-Lab webapps

Technicolor TC7200 – Credentials Disclosure

# Exploit Title: Technicolor TC7200: Authentication Bypass

2014-02-25 Jeroen - IT Nerdbox webapps

Ganib Project Management 2.3 – SQL Injection

# Exploit title: Ganib 2.x SQLi

2014-02-24 drone webapps

WordPress Plugin AdRotate 3.9.4 – ‘clicktracker.ph?track’ SQL Injection

Advisory ID: HTB23201

2014-02-22 High-Tech Bridge SA webapps

ILIAS 4.4.1 – Multiple Vulnerabilities

# ==============================================================

2014-02-22 HauntIT webapps

ATutor – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/65744/info

2014-02-22 HauntIT webapps

eshtery CMS – ‘FileManager.aspx’ Local File Disclosure

source: https://www.securityfocus.com/bid/65740/info

2014-02-22 peng.deng webapps

Jorjweb – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/66377/info

2014-02-21 Vulnerability Laboratory webapps

Stark CRM 1.0 – Multiple Vulnerabilities

Stark CRM v1.0 Multiple Script Injection And Session Riding Vulnerabilities

2014-02-20 LiquidWorm webapps

Barracuda Firewall 6.1.0.016 – Multiple Vulnerabilities

Document Title:

2014-02-20 Vulnerability-Lab webapps

WordPress Plugin BP Group Documents 1.2.1 – Multiple Vulnerabilities

Details

2014-02-19 Tom Adams webapps

Barracuda Message Archiver 650 – Persistent Cross-Site Scripting

Document Title:

2014-02-19 Vulnerability-Lab webapps

D-Link DIR-615 vE4 Firmware 5.10 – Cross-Site Request Forgery

####################################################################################

2014-02-19 Dhruv Shah webapps

Lotus Sametime 8.5.1 – Password Disclosure

# Exploit Title: Post Exploitation - Getting username and password in the Lotus Sametime 8.5.1

2014-02-19 Adriano Marcio Monteiro webapps

WordPress Plugin NextGEN Gallery – ‘jqueryFileTree.php’ Directory Traversal

source: https://www.securityfocus.com/bid/65637/info

2014-02-19 Tom Adams webapps

MODx Evogallery Module – ‘Uploadify.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/65646/info

2014-02-18 TUNISIAN CYBER webapps

Open Web Analytics 1.5.4 – ‘owa_email_address’ SQL Injection

"""

2014-02-18 Dana James Traversie webapps

Concrete5 CMS 5.6.2.1 – ‘index.php?cID’ SQL Injection

# Exploit Title: Concrete5 sql injection

2014-02-18 killall-9 webapps

Pina CMS – Multiple Vulnerabilities

############################################################################

2014-02-18 Shadman Tanjim webapps

My PDF Creator & DE DM 1.4 iOS – Multiple Vulnerabilities

Document Title:

2014-02-18 Vulnerability-Lab webapps

IceWarp Mail Server 11.0.0.0 – Cross-Site Scripting

Disclaimer:

2014-02-17 Usman Saeed webapps

Joomla! Component com_wire_immogest – ‘index.php’ SQL Injection

source: https://www.securityfocus.com/bid/65606/info

2014-02-17 MR.XpR webapps

i-doit Pro – ‘objID’ SQL Injection

source: https://www.securityfocus.com/bid/65557/info

2014-02-17 Stephan Rickauer webapps

File Hub 1.9.1 iOS – Multiple Vulnerabilities

Document Title:

2014-02-16 Vulnerability-Lab webapps

mbDriveHD 1.0.7 iOS – Multiple Vulnerabilities

Document Title:

2014-02-16 Vulnerability-Lab webapps

Office Assistant Pro 2.2.2 iOS – Local File Inclusion

Document Title:

2014-02-16 Vulnerability-Lab webapps

Trendchip HG520 ADSL2+ Wireless Modem – Cross-Site Request Forgery

########################################################################

2014-02-16 Dhruv Shah webapps

Dexter (CasinoLoader) Panel – SQL Injection

# Exploit Title: Dexter (CasinoLoader) Panel SQLi

2014-02-16 bwall webapps

CA 2E Web Option 8.1.2 – Authentication Bypass

Vulnerability title: Unauthenticated Privilege Escalation in CA 2E Web Option

2014-02-13 Mike Emery webapps

jDisk (stickto) 2.0.3 iOS – Multiple Vulnerabilities

Document Title:

2014-02-12 Vulnerability-Lab webapps

Netgear DGN2200 N300 Wireless Router – Multiple Vulnerabilities

Title: Multiple vulnerabilities in NETGEAR N300 WIRELESS ADSL2+ MODEM ROUTER DGN2200

2014-02-12 Andrew Horton webapps

Rhino – Cross-Site Scripting / Password Reset

source: https://www.securityfocus.com/bid/65628/info

2014-02-12 Slotleet webapps

Tableau Server < 8.0.7 / < 8.1.2 - Blind SQL Injection

Trustwave's SpiderLabs Security Advisory TWSL2014-003:

2014-02-11 Trustwave's SpiderLabs webapps

Titan FTP Server 10.32 Build 1816 – Directory Traversal

"Titan FTP Server Directory Traversal Vulnerabilities"

2014-02-11 Fara Rustein webapps

WordPress Plugin BuddyPress 1.9.1 – Privilege Escalation

# Exploit Title: Wordpress plugin Buddypress

2014-02-11 Pietro Oliva webapps

WiFi Camera Roll 1.2 iOS – Multiple Vulnerabilities

Document Title:

2014-02-11 Vulnerability-Lab webapps