webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Vanilla Forums 2.0 < 2.0.18.5 - 'class.utilitycontroller.php' PHP Object Injection

-------------------------------------------------------------------------------------------

2013-11-08 EgiX webapps

RASPcalendar 1.01 (ASP) – Admin Login

---------------------------------------------------

2013-11-08 Hackeri-AL UAH-Crew webapps

WordPress Theme Kernel – Arbitrary File Upload

###################################################################################################

2013-11-07 link_satisi webapps

Microweber 0.905 – Error-Based SQL Injection

===============================================================================

2013-11-07 Zy0d0x webapps

Apache Tomcat 5.5.25 – Cross-Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------...

2013-11-04 Ivano Binetti webapps

Practico 13.9 – Multiple Vulnerabilities

Practico 13.9 Multiple Vulnerabilities

2013-11-03 LiquidWorm webapps

pdirl PHP Directory Listing 1.0.4 – Cross-Site Scripting

Document Title:

2013-11-01 Vulnerability-Lab webapps

WordPress Theme Think Responsive 1.0 – Arbitrary File Upload

###################################################################################################

2013-11-01 Byakuya Kouta webapps

ImpressPages CMS 3.6 – ‘manage()’ Remote Code Execution

#!/usr/bin/python

2013-11-01 LiquidWorm webapps

WordPress Theme Switchblade 1.3 – Arbitrary File Upload

###################################################################################################

2013-11-01 Byakuya Kouta webapps

ImpressPages CMS 3.6 – Arbitrary File Deletion

ImpressPages CMS v3.6 Remote Arbitrary File Deletion Vulnerability

2013-11-01 LiquidWorm webapps

WordPress Theme This Way – ‘upload_settings_image.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/63523/info

2013-11-01 Bet0 webapps

Opsview pre 4.4.1 – Blind SQL Injection

CVE-2013-5694 Blind SQL Injection in Ops View

2013-10-31 J. Oquendo webapps

ImpressPages CMS 3.6 – Multiple Cross-Site Scripting / SQL Injection Vulnerabilities

ImpressPages CMS v3.6 Multiple XSS/SQLi Vulnerabilities

2013-10-31 LiquidWorm webapps

Unicorn Router WB-3300NR – Cross-Site Request Forgery (Factory Reset/DNS Change)

# Exploit Title: Unicorn Router WB-3300NR CSRF (Factory Reset/DNS Change)

2013-10-30 absane webapps

XAMPP for Windows 1.8.2 – Blind SQL Injection

# Exploit Title: XAMPP for Windows 1.8.2 Blind Sql Injection

2013-10-29 Sebastián Magof webapps

GTX CMS 2013 Optima – SQL Injection

Document Title:

2013-10-29 Vulnerability-Lab webapps

Olat CMS 7.8.0.1 – Persistent Cross-Site Scripting

Document Title:

2013-10-29 Vulnerability-Lab webapps

Horde Groupware Web Mail Edition 5.1.2 – Cross-Site Request Forgery (1)

#############################

2013-10-29 Marcela Benetrix webapps

Stem Innovation – ‘IZON’ Hard-Coded Credentials

Stem Innovation ‘IZON’ Hard-coded Credentials (CVE-2013-6236)

2013-10-29 Mark Stanislav webapps

ILIAS eLearning CMS 4.3.4 < 4.4 - Persistent Cross-Site Scripting

Document Title:

2013-10-29 Vulnerability-Lab webapps

Onpub CMS 1.4/1.5 – Multiple SQL Injections

Document Title:

2013-10-28 Vulnerability-Lab webapps

Pirelli Discus DRG A125g – Password Disclosure

#!/usr/bin/perl

2013-10-28 Sebastián Magof webapps

PHP RSS Reader 2010 – SQL Injection

# Exploit Title: [PHP RSS READER 2010 SQLI]

2013-10-28 mishal abdullah webapps

WordPress Theme Curvo – Cross-Site Request Forgery / Arbitrary File Upload

###################################################################################################

2013-10-26 Byakuya Kouta webapps

JReport – ‘dealSchedules.jsp’ Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/63363/info

2013-10-25 Poonam Singh webapps

WordPress Theme SAICO 1.0 < 1.0.2 - Arbitrary File Upload

###################################################################################################

2013-10-24 Byakuya Kouta webapps

WordPress Theme Daily Deal – Arbitrary File Upload

source: https://www.securityfocus.com/bid/63257/info

2013-10-23 DevilScreaM webapps

ARRIS DG860A – NVRAM Backup Password Disclosure

#!/usr/bin/env ruby

2013-10-22 Justin Oberdorf webapps

Course Registration Management System – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/63435/info

2013-10-21 Omar Kurt webapps

Joomla! Component Maian15 – ‘name’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/63287/info

2013-10-20 SultanHaikal webapps

ZonPHP 2.25 – Remote Code Execution

# Exploit Title: ZonPHP V2.25 RCE Vulnerability

2013-10-20 Halim Cruzito webapps

WHMCompleteSolution (WHMCS) 5.2.8 – SQL Injection

# Exploit Title: WHMCS 5.2.8 SQL Injection

2013-10-19 g00n webapps

WordPress Theme Area53 – Arbitrary File Upload

###################################################################################################

2013-10-19 Byakuya Kouta webapps

Elite Graphix ElitCMS 1.01 / PRO – Multiple Web Vulnerabilities

Document Title:

2013-10-18 Vulnerability-Lab webapps

Woltlab Burning Board Regenbogenwiese 2007 Addon – SQL Injection

# Exploit Title: Woltlab Burning Board Regenbogenwiese 2007 Addon SQL Injection Exploit

2013-10-17 Easy Laster webapps

WordPress Plugin Realty – Blind SQL Injection

$$$$$$\ $$\ $$\ $$$$$$\

2013-10-17 Napsterakos webapps

Zikula CMS 1.3.5 – Multiple Vulnerabilities

Document Title:

2013-10-17 Vulnerability-Lab webapps

WordPress Plugin Quick Paypal Payments 3.0 – Presistant Cross-Site Scripting

TITLE

2013-10-17 Zy0d0x webapps

WebTester 5.x – Multiple Vulnerabilities

==========================================================================================

2013-10-16 X-Cisadane webapps