webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

SMF – ‘/index.php’ HTML Injection / Multiple PHP Code Injection Vulnerabilities

source: https://www.securityfocus.com/bid/59409/info

2013-04-23 Jakub Galczyk webapps

D-Link DIR-615 Rev D3 / DIR-300 Rev A – Multiple Vulnerabilities

Device Name: DIR-615 - Hardware revision D3 / DIR-300 - Hardware revision A

2013-04-23 m-1-k-3 webapps

VoipNow 2.5 – Local File Inclusion

+ Application : Voipnow

2013-04-22 i-Hmx webapps

Joomla! Component com_civicrm 4.2.2 – Remote Code Injection

# Exploit Title: joomla component com_civicrm remode code injection exploit

2013-04-22 iskorpitx webapps

WordPress Theme Colormix – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/59371/info

2013-04-21 MustLive webapps

Crafty Syntax Live Help 3.1.2 – Remote File Inclusion / Full Path Disclosure

source: https://www.securityfocus.com/bid/59322/info

2013-04-19 ITTIHACK webapps

Nginx 0.6.x – Arbitrary Code Execution NullByte Injection

# Exploit Title: nginx Arbitrary Code Execution NullByte Injection

2013-04-19 Neal Poole webapps

KrisonAV CMS 3.0.1 – Multiple Vulnerabilities

Advisory ID: HTB23150

2013-04-18 High-Tech Bridge SA webapps

Oracle WebCenter Sites Satellite Server – HTTP Header Injection

SEC Consult Vulnerability Lab Security Advisory < 20130417-2 >

2013-04-18 SEC Consult webapps

Fork CMS – ‘js.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/59298/info

2013-04-18 Rafay Baloch webapps

Sosci Survey – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/59278/info

2013-04-17 T. Lazauninkas webapps

ZPanel – ‘templateparser.class.php’ Crafted Template Remote Command Execution

Hi all,

2013-04-16 Sven Slootweg webapps

phpVms Virtual Airline Administration 2.1.934/2.1.935 – SQL Injection

=============================================================================================================

2013-04-15 NoGe webapps

CMSLogik 1.2.1 – Multiple Vulnerabilities

#!/usr/bin/python

2013-04-15 LiquidWorm webapps

Vanilla Forums Van2Shout Plugin 1.0.51 – Multiple Cross-Site Request Forgery Vulnerabilities

# Exploit Title:

2013-04-15 Henry Hoggard webapps

Todoo Forum 2.0 – ‘todooforum.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/59069/info

2013-04-14 Chiekh Bouchenafa webapps

Todoo Forum 2.0 – ‘todooforum.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/59069/info

2013-04-14 Chiekh Bouchenafa webapps

Aibolit – Information Disclosure

source: https://www.securityfocus.com/bid/59053/info

2013-04-13 MustLive webapps

Simple HRM System 2.3 – Multiple Vulnerabilities

# Exploit Title: Multiple Vulnerabilities in Simple HRM system v2.3 and

2013-04-12 Doraemon webapps

Free Monthly Websites 2.0 – Admin Password Change

==========================================================================================

2013-04-12 Yassin Aboukir webapps

Request Tracker – ‘ShowPending’ SQL Injection

source: https://www.securityfocus.com/bid/59022/info

2013-04-11 cheki webapps

WordPress Plugin Spider Video Player – ‘theme’ SQL Injection

source: https://www.securityfocus.com/bid/59021/info

2013-04-11 Ashiyane Digital Security Team webapps

Hero Framework – ‘/users/forgot_password?error’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/59041/info

2013-04-10 High-Tech Bridge webapps

Hero Framework – ‘/users/login?Username’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/59041/info

2013-04-10 High-Tech Bridge webapps

WordPress Plugin Spiffy XSPF Player – ‘playlist_id’ SQL Injection

source: https://www.securityfocus.com/bid/58976/info

2013-04-10 Ashiyane Digital Security Team webapps

phpMyAdmin – ‘tbl_gis_visualization.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58962/info

2013-04-09 waraxe webapps

WordPress Plugin Traffic Analyzer – ‘aoid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58948/info

2013-04-09 Beni_Vanda webapps

EasyPHP – ‘/index.php’ Authentication Bypass / Remote PHP Code Injection

source: https://www.securityfocus.com/bid/58945/info

2013-04-09 KedAns-Dz webapps

ZAPms 1.41 – SQL Injection

=============================================================================================================

2013-04-09 NoGe webapps

WHMCompleteSolution (WHMCS) Group Pay Plugin 1.5 – ‘grouppay.php?hash’ SQL Injection

#######################################################################

2013-04-08 HJauditing Employee Tim webapps

Sophos Web Protection Appliance 3.7.8.1 – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20130403-0 >

2013-04-08 SEC Consult webapps

TP-Link TD-8817 6.0.1 Build 111128 Rel.26763 – Cross-Site Request Forgery

######################################################################

2013-04-08 Un0wn_X webapps

Vanilla Forums 2-0-18-4 – SQL Injection

# Exploit Title: Vanilla Forums - SQL-Injection - Insert arbitrary user & dump usertable

2013-04-08 bl4ckw0rm webapps

D-Link – Multiple Vulnerabilities

# Exploit Title: Multiple Vulnerabilities in Dlink devices

2013-04-08 m-1-k-3 webapps

Belkin Wemo – Arbitrary Firmware Upload

# Exploit Title: Belkin Wemo Arbitrary Firmware Vulnerability

2013-04-08 Daniel Buentello webapps

OTRS 3.x – FAQ Module Persistent Cross-Site Scripting

# Exploit Title: [OTRS Faq Module - Persistent XSS]

2013-04-08 Luigi Vezzoso webapps

OpenCart – Cross-Site Request Forgery (Change User Password)

# Exploit Title : OpenCart CSRF

2013-04-08 Saadi Siddiqui webapps

Zimbra – ‘aspell.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58913/info

2013-04-05 Michael Scherer webapps