webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

OpenX 2.8.10 – Multiple Vulnerabilities

Advisory ID: HTB23155

2013-07-05 High-Tech Bridge SA webapps

Kasseler CMS 2 r1223 – Multiple Vulnerabilities

Advisory ID: HTB23158

2013-07-05 High-Tech Bridge SA webapps

Mobile Atlas Creator 1.9.12 – Persistent Command Injection

Title:

2013-07-05 Vulnerability-Lab webapps

Machform Form Maker 2 – Multiple Vulnerabilities

###########################################################################################

2013-07-02 Yashar shahinzadeh webapps

WordPress Plugin Category Grid View Gallery – ‘ID’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/60905/info

2013-07-02 Iranian Exploit DataBase webapps

WordPress Plugin WP Feed – ‘nid’ SQL Injection

source: https://www.securityfocus.com/bid/60904/info

2013-07-02 Iranian Exploit DataBase webapps

GLPI 0.83.9 – ‘Unserialize()’ Remote Code Execution

source: https://www.securityfocus.com/bid/60823/info

2013-07-01 Xavier Mehrenberger webapps

Fortigate Firewalls – Cross-Site Request Forgery

Vulnerability ID: CVE-2013-1414

2013-07-01 Sven Wurth webapps

Barracuda SSL VPN 680Vx 2.3.3.193 – Multiple Script Injection Vulnerabilities

Barracuda SSL VPN 680Vx 2.3.3.193 Multiple Script Injection Vulnerabilities

2013-07-01 LiquidWorm webapps

C.P.Sub 4.5 – Authentication Bypass

#!/usr/bin/python

2013-07-01 Chako webapps

eFile Wifi Transfer Manager 1.0 – Multiple Vulnerabilities

Title:

2013-06-30 Vulnerability-Lab webapps

WordPress Plugin Xorbin Digital Flash Clock – ‘widgetUrl’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/60862/info

2013-06-30 Prakhar Prasad webapps

WordPress Plugin Xorbin Analog Flash Clock – ‘widgetUrl’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/60860/info

2013-06-30 Prakhar Prasad webapps

Atomy Maxsite – ‘index.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/60859/info

2013-06-30 Iranian_Dark_Coders_Team webapps

WordPress Plugin WP Private Messages – ‘msgid’ SQL Injection

source: https://www.securityfocus.com/bid/60854/info

2013-06-29 IeDb ir webapps

Nameko – ‘nameko.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/60853/info

2013-06-29 Andrea Menin webapps

Xaraya – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/60795/info

2013-06-26 High-Tech Bridge webapps

PHP-Charts 1.0 – ‘index.php?type’ Remote Code Execution

#!/usr/bin/python

2013-06-26 infodox webapps

e107 Advanced Medal System Plugin – SQL Injection

# Exploit Title: Advanced Medal System SQL Injection

2013-06-26 Life Wasted webapps

Barnraiser Prairie – ‘get_file.php’ Directory Traversal

source: https://www.securityfocus.com/bid/60782/info

2013-06-25 prairie webapps

FtpLocate – HTML Injection

source: https://www.securityfocus.com/bid/60760/info

2013-06-24 Chako webapps

Elemata CMS RC3.0 – ‘global.php?id’ SQL Injection

# Exploit Title : Elemata CMS RC3.0 SQL Injection

2013-06-24 CWH Underground webapps

PodHawk 1.85 – Arbitrary File Upload

# Exploit Title : PodHawk Arbitary File Upload Vulnerability

2013-06-24 CWH Underground webapps

Linksys X3000 1.0.03 build 001 – Multiple Vulnerabilities

Device: X3000

2013-06-24 m-1-k-3 webapps

Collabtive 1.0 – ‘manageuser.php’ SQL Injection

# Exploit Title: Collabtive 1.0 SQLi

2013-06-24 drone webapps

phpEventCalendar 0.2.3 – Multiple Vulnerabilities

phpEventCalendar v.0.2.3 Multiple Vulnerabilities

2013-06-24 AtT4CKxT3rR0r1ST webapps

Alienvault Open Source SIEM (OSSIM) 4.1 – Multiple SQL Injection Vulnerabilities

# Title: Alienvault OSSIM Open Source SIEM 4.1 Multiple SQL Vulnerabilities

2013-06-24 Glafkos Charalambous webapps

Top Games Script 1.2 – ‘play.php?gid’ SQL Injection

TopGamesScript-v1.2 (play.php) Sql Injection Vulnerability

2013-06-24 AtT4CKxT3rR0r1ST webapps

TRENDnet TE100-P1U Print Server Firmware 4.11 – Authentication Bypass

#############################################################

2013-06-24 Chako webapps

GLPI 0.83.8 – Multiple Vulnerabilities

GLPI v0.83.8 Multiple Error-based SQL Injection Vulnerabilities

2013-06-21 LiquidWorm webapps

Monkey CMS – Multiple Vulnerabilities

###########################################################################################

2013-06-19 Yashar shahinzadeh, Mormoroth webapps

imacs CMS 0.3.0 – Unrestricted Arbitrary File Upload

2013-06-19 CWH Underground webapps

Joomla! Component com_rokdownloads – Arbitrary File Upload

source: https://www.securityfocus.com/bid/60690/info

2013-06-19 Am!r webapps

et-chat – Privilege Escalation / Arbitrary File Upload

source: https://www.securityfocus.com/bid/60660/info

2013-06-18 MR.XpR webapps

BloofoxCMS – ‘index.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/60585/info

2013-06-17 CWH Underground webapps

Simple File Manager 024 – Authentication Bypass

# Exploit Title: Simple File Manager v.024 Login Bypass Vulnerability

2013-06-17 Chako webapps

SPBAS Business Automation Software 2012 – Multiple Vulnerabilities

# SPBAS Business Automation Software- XSS & CSRF Vulnerability

2013-06-17 Christy Philip Mathew webapps

Havalite CMS 1.1.7 – Unrestricted Arbitrary File Upload

2013-06-17 CWH Underground webapps

Fly-High CMS 2012-07-08 – Unrestricted Arbitrary File Upload

2013-06-17 CWH Underground webapps

WordPress Plugin Ultimate WordPress Auction Plugin 1.0 – Cross-Site Request Forgery

=============================================================

2013-06-17 expl0i13r webapps

ZamFoo – ‘date’ Remote Command Injection

source: https://www.securityfocus.com/bid/60826/info

2013-06-15 localhost.re webapps

LibrettoCMS 2.2.2 – Arbitrary File Upload

# Exploit Title : LibrettoCMS 2.2.2 Malicious File Upload

2013-06-14 CWH Underground webapps

Airlive IP Cameras – Multiple Vulnerabilities

===========================================================================

2013-06-13 Sánchez, Lopez, Castillo webapps

WordPress Plugin NextGEN Gallery – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/60533/info

2013-06-12 Marcos Garcia webapps

mkCMS – ‘index.php’ Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/60488/info

2013-06-11 CWH Underground webapps

Simple PHP Agenda 2.2.8 – ‘edit_event.php?eventid’ SQL Injection

=============================================

2013-06-11 Anthony Dubuissez webapps

Fobuc Guestbook 0.9 – SQL Injection

# Exploit Title : Fobuc Guestbook 0.9 SQL Injection

2013-06-11 CWH Underground webapps

Buffalo WZR-HP-G300NH2 – Cross-Site Request Forgery

######################################################################

2013-06-11 Prayas Kulshrestha webapps

NanoBB 0.7 – Multiple Vulnerabilities

# Exploit Title : NanoBB 0.7 Multiple Vulnerabilities

2013-06-11 CWH Underground webapps

Weathermap 0.97c – ‘mapname’ Local File Inclusion

=============================================

2013-06-11 Anthony Dubuissez webapps