webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

StatusNet/Laconica 0.7.4/0.8.2/0.9.0beta3 – Arbitrary File Reading

+-------------------------------------------------------------------------------+

2013-10-14 spiderboy webapps

vBulletin 4.1.x – ‘/install/upgrade.php’ Security Bypass

source: https://www.securityfocus.com/bid/62909/info

2013-10-13 Joshua Rogers webapps

Bilboplanet – ‘auth.php’ SQL Injection

source: https://www.securityfocus.com/bid/62989/info

2013-10-11 Omar Kurt webapps

Ziteman CMS – Login Page SQL Injection

source: https://www.securityfocus.com/bid/62949/info

2013-10-10 Ashiyane Digital Security Team webapps

Imperva SecureSphere Web Application Firewall MX 9.5.6 – Blind SQL Injection

Blind SQL Injection to Imperva SecureSphere Web Application Firewall MX

2013-10-10 Giuseppe D'Amore webapps

Bugzilla 4.2 – Tabular Reports Cross-Site Scripting

source: https://www.securityfocus.com/bid/63205/info

2013-10-09 Mateusz Goik webapps

Bugzilla – ‘editflagtypes.cgi’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/63204/info

2013-10-09 Mateusz Goik webapps

WordPress Plugin WP-Realty – ‘listing_id’ SQL Injection

source: https://www.securityfocus.com/bid/63217/info

2013-10-08 Napsterakos webapps

Alienvault Open Source SIEM (OSSIM) – ‘Timestamp’ Directory Traversal

source: https://www.securityfocus.com/bid/62899/info

2013-10-08 Ding Yu-Chi webapps

WordPress Plugin Quick Contact Form 6.0 – Persistent Cross-Site Scripting

===============================================================================

2013-10-08 Zy0d0x webapps

WHMCompleteSolution (WHMCS) 5.2.7 – SQL Injection

#!/usr/bin/env python

2013-10-08 localhost.re webapps

WordPress Plugin Woopra Analytics – ‘ofc_upload_image.php’ Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/62876/info

2013-10-07 wantexz webapps

Aanval 7.1 build 70151 – Multiple Vulnerabilities

-----------

2013-10-04 xistence webapps

CMS Formulasi 2.07 – Multiple Vulnerabilities

###################################################################################################################

2013-10-04 Sarahma Security webapps

FlashChat 6.0.2 < 6.0.8 - Arbitrary File Upload

#######################################################

2013-10-04 x-hayben21 webapps

elproLOG MONITOR Webaccess 2.1 – Multiple Vulnerabilities

Title:

2013-10-04 Vulnerability-Lab webapps

SPAMINA Cloud Email Firewall – Directory Traversal

source: https://www.securityfocus.com/bid/64693/info

2013-10-03 Sisco Barrera webapps

WordPress Plugin SEO Watcher – ‘ofc_upload_image.php’ Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/62825/info

2013-10-03 wantexz webapps

Alienvault Open Source SIEM (OSSIM) 3.1 – ‘date_from’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/62790/info

2013-10-02 Yu-Chi Ding webapps

GLPI 0.84.1 – Multiple Vulnerabilities

Advisory ID: HTB23173

2013-10-02 High-Tech Bridge SA webapps

Gnew 2013.1 – Multiple Vulnerabilities (2)

Advisory ID: HTB23171

2013-10-02 High-Tech Bridge SA webapps

SimpleRisk 20130915-01 – Multiple Vulnerabilities

1. *Advisory Information*

2013-09-30 Ryan Dewhurst webapps

XAMPP 1.8.1 – ‘lang.php?WriteIntoLocalDisk method’ Local Write Access

=============================================

2013-09-30 Manuel García Cárdenas webapps

mod_accounting Module 0.5 – Blind SQL Injection

- Affected Vendor: http://sourceforge.net/projects/mod-acct/files/

2013-09-30 Wireghoul webapps

Asus RT-N66U 3.0.0.4.374_720 – Cross-Site Request Forgery

Exploit Title: CSRF Asus RT-N66U Arbitrary Command Execution

2013-09-30 cgcai webapps

Tenda W309R Router 5.07.46 – Configuration Disclosure

---------------------------------------------------

2013-09-30 SANTHO webapps

FreeSMS – ‘/pages/crc_handler.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/63004/info

2013-09-27 Sarahma Security webapps

FreeSMS – ‘/pages/crc_handler.php?scheduleid’ SQL Injection

source: https://www.securityfocus.com/bid/63004/info

2013-09-27 Sarahma Security webapps

ArticleSetup – Multiple Vulnerabilities

#Exploit Title : ArticleSetup Multiple Vulnerabilities

2013-09-26 DevilScreaM webapps

Posnic Stock Management System 1.02 – Multiple Vulnerabilities

# Exploit Title: Posnic Stock Management System 1.02 Multiple Vulnerabilities

2013-09-26 Sarahma Security webapps

Hewlett-Packard (HP) 2620 Switch Series. Edit Admin Account – Cross-Site Request Forgery

# Exploit Title: Hewlett-Packard 2620 Switch Series. Edit Admin Account - CSRF Vulnerability

2013-09-26 Hubert Gradek webapps

Piwigo 2.5.2 – Cross-Site Scripting

#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#

2013-09-26 Arsan webapps

ZeroShell ‘cgi-bin/kerbynet’ – Local File Disclosure

Introduction to the PoC :

2013-09-25 Yann CAM webapps

X2CRM 3.4.1 – Multiple Vulnerabilities

Advisory ID: HTB23172

2013-09-25 High-Tech Bridge SA webapps

Good for Enterprise 2.2.2.1611 – Cross-Site Scripting

The vulnerable versions are v2.2.2.1611 and earlier

2013-09-25 Mario webapps

WordPress Plugin NOSpamPTI – Blind SQL Injection

[ NOSpamPTI Wordpress plugin Blind SQL Injection ]

2013-09-23 Alexandro Silva webapps

SilverStripe CMS – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/62782/info

2013-09-23 Benjamin Kunz Mejri webapps

WordPress Plugin Lazy SEO 1.1.9 – Arbitrary File Upload

#######################################################################

2013-09-22 Ashiyane Digital Security Team webapps

Joomla! Component JVideoClip 1.5.1 – ‘uid’ SQL Injection

source: https://www.securityfocus.com/bid/62610/info

2013-09-21 SixP4ck3r webapps

MentalJS – Sandbox Security Bypass

source: https://www.securityfocus.com/bid/62581/info

2013-09-20 Rafay Baloch webapps

Monstra CMS 1.2.0 – ‘login’ SQL Injection

source: https://www.securityfocus.com/bid/62572/info

2013-09-20 linc0ln.dll webapps

vTiger CRM 5.4.0 – ‘index.php?onlyforuser’ SQL Injection

Advisory ID: HTB23168

2013-09-20 High-Tech Bridge SA webapps

AspxCommerce 2.0 – Arbitrary File Upload

# Exploit Title: AspxCommerce v2.0 - Arbitrary File Upload Vulnerability

2013-09-19 SANTHO webapps

WordPress Plugin RokMicroNews – ‘thumb.php’ Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/62513/info

2013-09-19 MustLive webapps

WordPress Plugin RokIntroScroller – ‘thumb.php’ Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/62493/info

2013-09-19 MustLive webapps

WordPress Plugin RokNewsPager – ‘thumb.php’ Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/62458/info

2013-09-18 MustLive webapps

WordPress Plugin Complete Gallery Manager 3.3.3 – Arbitrary File Upload

Title:

2013-09-18 Vulnerability-Lab webapps

Western Digital Arkeia Appliance 10.0.10 – Multiple Vulnerabilities

#####################################################################################################################...

2013-09-17 xistence webapps

OpenEMR 4.1.1 Patch 14 – Multiple Vulnerabilities

#####################################################################################################################...

2013-09-17 xistence webapps

WordPress Plugin RokStories – ‘thumb.php’ Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/62459/info

2013-09-17 MustLive webapps