webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

iScripts MultiCart 2.4 – Persistent Cross-Site Scripting / Cross-Site Request Forgery / Cross-Site Scripting / Cross-Site Request Forgery / Mass Accounts Takeover

# Exploit Title : iScripts MultiCart same product id for which you submited the review.

2013-12-16 Saadi Siddiqui webapps

Wallpaper Script 3.5.0082 – Persistent Cross-Site Scripting

[~] Exploit Title : Wallpaper Script Stored XSS Vulnerability

2013-12-16 null pointer webapps

Gitlab 6.0 – Persistent Cross-Site Scripting

##Exploit-DB note: Tested commit 10b0b8f1797e6c09b4c063c04a4864ecd31d34f4

2013-12-16 hellok webapps

C2C Forward Auction Creator – ‘/auction/casp/Admin.asp’ SQL Injection (Admin Authentication Bypass)

source: https://www.securityfocus.com/bid/64329/info

2013-12-16 R3d-D3V!L webapps

C2C Forward Auction Creator 2.0 – ‘/auction/asp/list.asp?pa’ SQL Injection

source: https://www.securityfocus.com/bid/64329/info

2013-12-16 R3d-D3V!L webapps

iScripts AutoHoster – ‘id’ Local File Inclusion

source: https://www.securityfocus.com/bid/64377/info

2013-12-15 i-Hmx webapps

iScripts AutoHoster – ‘fname’ Local File Inclusion

source: https://www.securityfocus.com/bid/64377/info

2013-12-15 i-Hmx webapps

iScripts AutoHoster – ‘tmpid’ Local File Inclusion

source: https://www.securityfocus.com/bid/64377/info

2013-12-15 i-Hmx webapps

iScripts AutoHoster – ‘main_smtp.php’ Traversal

source: https://www.securityfocus.com/bid/64377/info

2013-12-15 i-Hmx webapps

iScripts AutoHoster – ‘invno’ SQL Injection

source: https://www.securityfocus.com/bid/64377/info

2013-12-15 i-Hmx webapps

iScripts AutoHoster – ‘additionalsettings.php’ SQL Injection

source: https://www.securityfocus.com/bid/64377/info

2013-12-15 i-Hmx webapps

iScripts AutoHoster – ‘checktransferstatusbck.php’ SQL Injection

source: https://www.securityfocus.com/bid/64377/info

2013-12-15 i-Hmx webapps

iScripts AutoHoster – ‘checktransferstatus.php’ SQL Injection

source: https://www.securityfocus.com/bid/64377/info

2013-12-15 i-Hmx webapps

Phone Drive Eightythree 4.1.1 iOS – Multiple Vulnerabilities

Document Title:

2013-12-15 Vulnerability-Lab webapps

Piwigo CMS 2.5.3 – Multiple Web Vulnerabilities

###########################################################

2013-12-15 sajith webapps

Osclass – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/64386/info

2013-12-14 R3d-D3V!L webapps

Etoshop B2B Vertical Marketplace Creator – Multiple SQL Injections

source: https://www.securityfocus.com/bid/64332/info

2013-12-14 R3d-D3V!L webapps

Joomla! Component Projoom NovaSFH 3.0.2 – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/65438/info

2013-12-13 Yuri Kramarz webapps

Dynamic Biz Website Builder ‘QuickWeb’ 1.0 – ‘/login.asp’ Multiple Field SQL Injections / Authentication Bypass

source: https://www.securityfocus.com/bid/64371/info

2013-12-13 R3d-D3V!L webapps

Dynamic Biz Website Builder (QuickWeb) 1.0 – ‘/apps/news-events/newdetail.asp?id’ SQL Injection

source: https://www.securityfocus.com/bid/64371/info

2013-12-13 R3d-D3V!L webapps

BoastMachine – ‘blog’ SQL Injection

source: https://www.securityfocus.com/bid/64278/info

2013-12-13 Omar Kurt webapps

Pentagram Cerberus P 6363 DSL Router – Multiple Vulnerabilities

PENTAGRAM Cerberus P 6363 DSL Router Multiple Vulnerabilities

2013-12-12 condis webapps

WHMCompleteSolution (WHMCS) 4.x/5.x – Multiple Web Vulnerabilities

# Exploit Title: WHMCS v4.x & v5.x - Multiple Web Vulnerabilities

2013-12-12 AhwAk20o0 -- webapps

Cythosia 2.x Botnet (C2 Web Panel) – SQL Injection

##########################################################################

2013-12-12 GalaxyAndroid webapps

KikChat – Local File Inclusion / Remote Code Execution

# KikChat

2013-12-12 cr4wl3r webapps

Photo Video Album Transfer 1.0 iOS – Multiple Vulnerabilities

Document Title:

2013-12-11 Vulnerability-Lab webapps

eFront 3.6.14 (build 18012) – Multiple Persistent Cross-Site Scripting Vulnerabilities

###########################################################

2013-12-11 sajith webapps

Veno File Manager – ‘q’ Arbitrary File Download

source: https://www.securityfocus.com/bid/64346/info

2013-12-11 Daniel Godoy webapps

eduTrac – ‘showmask’ Directory Traversal

source: https://www.securityfocus.com/bid/64255/info

2013-12-11 High-Tech Bridge webapps

PlaySms 0.9.9.2 – Cross-Site Request Forgery

# Exploit Title : PlaySMS

2013-12-10 Saadi Siddiqui webapps

CGILua 3.0 – SQL Injection

# Exploit Title: CGILua SQL Injection

2013-12-09 aceeeeeeeer . webapps

osCMax – Arbitrary File Upload / Full Path Information Disclosure

source: https://www.securityfocus.com/bid/64307/info

2013-12-09 KedAns-Dz webapps

WordPress Plugin PhotoSmash Galleries – ‘bwbps-uploader.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/64173/info

2013-12-08 Ashiyane Digital Security Team webapps

Print n Share 5.5 iOS – Multiple Web Vulnerabilities

Document Title:

2013-12-08 Vulnerability-Lab webapps

Feetan Inc WireShare 1.9.1 iOS – Persistent

Document Title:

2013-12-08 Vulnerability-Lab webapps

Ovidentia 7.9.6 – Multiple Vulnerabilities

###########################################################

2013-12-08 sajith webapps

WordPress Plugin Download Manager Free & Pro 2.5.8 – Persistent Cross-Site Scripting

# Exploit Title: Wordpress Plugin: Wordpress Download Manager Free & Pro

2013-12-08 Jeroen - IT Nerdbox webapps

Zimbra 2009-2013 – Local File Inclusion

# Exploit Title: Zimbra 0day exploit / Privilegie escalation via LFI

2013-12-06 rubina119 webapps

WordPress Plugin page-flip-image-gallery – Arbitrary File Upload

###############################################################

2013-12-06 Ashiyane Digital Security Team webapps

BoxBilling 3.6.11 – ‘mod_notification’ Persistent Cross-Site Scripting

BoxBilling 3.6.11 (mod_notification) Stored Cross-Site Scripting Vulnerability

2013-12-06 LiquidWorm webapps

WordPress Plugin DZS Video Gallery 3.1.3 – Remote File Disclosure / Local File Disclosure

# Exploit Title: WordPress DZS Video Gallery (dzs-videogallery) 3.1.3 Plugins Remote and Local File Disclosure Vulner...

2013-12-06 aceeeeeeeer . webapps

Eaton Network Shutdown Module 3.21 – Remote PHP Code Injection

#!/usr/bin/env python

2013-12-06 Filip Waeytens webapps

D-Link DSR Router Series – Remote Command Execution

#!/usr/bin/python

2013-12-06 0_o webapps

WordPress Plugin Easy Career Openings – ‘jobid’ SQL Injection

source: https://www.securityfocus.com/bid/64167/info

2013-12-06 Iranian_Dark_Coders_Team webapps

NeoBill 0.9-alpha – ‘language’ Local File Inclusion

source: https://www.securityfocus.com/bid/64112/info

2013-12-06 KedAns-Dz webapps

NeoBill – ‘/install/include/solidstate.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/64112/info

2013-12-06 KedAns-Dz webapps

NeoBill – ‘/modules/nullregistrar/PHPwhois/example.php?query’ Remote Code Execution

source: https://www.securityfocus.com/bid/64112/info

2013-12-06 KedAns-Dz webapps

Enorth Webpublisher CMS – ‘thisday’ SQL Injection

source: https://www.securityfocus.com/bid/64110/info

2013-12-06 xin.wang webapps

SonicWALL Gms 7.x – Filter Bypass / Persistent

Document Title:

2013-12-05 Vulnerability-Lab webapps

Wireless Transfer App 3.7 iOS – Multiple Web Vulnerabilities

Document Title:

2013-12-05 Vulnerability-Lab webapps