webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Symphony – ‘sort’ SQL Injection

source: https://www.securityfocus.com/bid/58843/info

2013-04-03 High-Tech Bridge webapps

e107 – ‘content_preset.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58841/info

2013-04-03 Simon Bieber webapps

C2 WebResource – ‘File’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58838/info

2013-04-03 anonymous webapps

Netgear WNR1000 – Authentication Bypass

Authentication bypass on Netgear WNR1000

2013-04-02 Roberto Paleari webapps

Aspen 0.8 – Directory Traversal

Aspen 0.8 - Directory Traversal

2013-04-02 Daniel Ricardo dos Santos webapps

WordPress Plugin FuneralPress 1.1.6 – Persistent Cross-Site Scripting

#

2013-04-02 Rob Armstrong webapps

Network Weathermap 0.97a – ‘editor.php’ Persistent Cross-Site Scripting

Network Weathermap 0.97a - Persistent XSS

2013-04-02 Daniel Ricardo dos Santos webapps

Pollen CMS 0.6 – ‘index.php?p’ Paramete’ Local File Disclosure

# Title: Pollen CMS

2013-04-02 MizoZ webapps

WordPress Plugin Feedweb – ‘wp_post_id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58771/info

2013-03-30 Stefan Schurtz webapps

jPlayer – ‘Jplayer.swf’ Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/59030/info

2013-03-29 Malte Batram webapps

AWS Xms 2.5 – ‘importer.php?what’ Directory Traversal

Advisory ID: HTB23147

2013-03-29 High-Tech Bridge SA webapps

MailOrderWorks 5.907 – Multiple Vulnerabilities

Title:

2013-03-29 Vulnerability-Lab webapps

SynConnect Pms – ‘index.php?loginid’ SQL Injection

Title:

2013-03-29 Bhadresh Patel webapps

ClipShare 4.1.1 – Multiples Vulnerabilities

# Exploit Title: ClipShare 4.1.1 - Multiples Vulnerabilites

2013-03-27 Esac webapps

PsychoStats 3.2.2b – ‘awards.php’ Blind SQL Injection

Exploit Title : PsychoStats awards.php blind SQL Injection

2013-03-27 Mohamed from ALG webapps

OrionDB Web Directory – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58720/info

2013-03-27 3spi0n webapps

MyBB 1.6.6 – ‘index.php?conditions[usergroup][]’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52743/info

2013-03-27 Aditya Modha webapps

MyBB 1.6.6 – ‘index.php?conditions[usergroup][]’ SQL Injection

source: https://www.securityfocus.com/bid/52743/info

2013-03-27 Aditya Modha webapps

WordPress Plugin Mathjax Latex 1.1 – Cross-Site Request Forgery

# Title: Wordpress Mathjax Latex 1.1 Cross-Site Request Forgery Vulnerability

2013-03-26 Junaid Hussain webapps

Ra1NX PHP Bot – pubcall Authentication Bypass Remote Code Execution (Metasploit)

# Exploit Title: "Ra1NX" PHP Bot pubcall Authentication Bypass Remote Code Execution

2013-03-25 bwall webapps

vBulletin 5.0.0 Beta 11 < 5.0.0 Beta 28 - SQL Injection

# Exploit Title: vBulletin 5 Beta XX SQLi 0day

2013-03-25 Orestis Kourides webapps

ClipShare 4.1.1 – ‘gid’ Blind SQL Injection

# Exploit Title: ClipShare 4.1.1 (gmembers.php) Blind SQL Injection Vulnerability

2013-03-25 Esac webapps

Free Hosting Manager 2.0.2 – Multiple SQL Injections

-------------------------------------------------------------------------

2013-03-25 Saadi Siddiqui webapps

Atmail WebMail – ‘INBOX.Trash?mailId’ Reflected Cross-Site Scripting

source: https://www.securityfocus.com/bid/65408/info

2013-03-25 Vicente Aguilera Diaz webapps

Atmail WebMail – ‘searchResultsTab5?filter’ Reflected Cross-Site Scripting

source: https://www.securityfocus.com/bid/65408/info

2013-03-25 Vicente Aguilera Diaz webapps

Atmail WebMail – Message Attachment File Name Reflected Cross-Site Scripting

source: https://www.securityfocus.com/bid/65408/info

2013-03-25 Vicente Aguilera Diaz webapps

WordPress Plugin Banners Lite – ‘wpbanners_show.php’ HTML Injection

source: https://www.securityfocus.com/bid/58671/info

2013-03-25 Fernando A. Lagos B webapps

Jaow CMS – ‘add_ons’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58658/info

2013-03-23 Metropolis webapps

OpenCart 1.5.5.1 – ‘FileManager.php’ Directory Traversal Arbitrary File Access

[waraxe-2013-SA#098] - Directory Traversal Vulnerabilities in OpenCart 1.5.5.1

2013-03-22 waraxe webapps

Stradus CMS 1.0beta4 – Multiple Vulnerabilities

##########################################

2013-03-22 DaOne webapps

Slash CMS – Multiple Vulnerabilities

##########################################

2013-03-22 DaOne webapps

Flatnux CMS 2013-01.17 – ‘index.php’ Local File Inclusion

##########################################

2013-03-22 DaOne webapps

AContent 1.3 – Local File Inclusion

##########################################

2013-03-22 DaOne webapps

WordPress Plugin IndiaNIC FAQs Manager 1.0 – Blind SQL Injection

# Exploit Title: WordPress IndiaNIC FAQ 1.0 Plugin Blind SQL Injection

2013-03-22 m3tamantra webapps

WordPress Plugin IndiaNIC FAQs Manager 1.0 – Multiple Vulnerabilities

#####################################################

2013-03-22 m3tamantra webapps

StarVedia IPCamera IC502w IC502w+ v020313 – ‘Username’/Password Disclosure

#!/usr/bin/perl

2013-03-22 Todor Donev webapps

ViewGit 0.0.6 – Multiple Cross-Site Scripting Vulnerabilities

Vulnerability Report

2013-03-19 Matthew R. Bucci webapps

Rebus:list – ‘list.php?list_id’ SQL Injection

# Exploit Title: Rebus:list SQL Injection Vulnerability

2013-03-19 Robert Cooper webapps

Verizon Fios Router MI424WR-GEN3I – Cross-Site Request Forgery

# Exploit Title: Verizon Fios Router CSRF Admin Shell

2013-03-19 Jacob Holcomb webapps

WordPress Plugin Count Per Day 3.2.5 – ‘counter.php’ Cross-Site Scripting

#!/usr/bin/ruby

2013-03-19 m3tamantra webapps

WordPress Plugin Occasions 1.0.4 – Cross-Site Request Forgery

CSRF Occasions

2013-03-19 m3tamantra webapps

WordPress Plugin Occasions – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/58599/info

2013-03-19 m3tamantra webapps

Joomla! Component com_rsfiles – ‘cid’ SQL Injection

# Title : Joomla Component RSfiles

2013-03-18 ByEge webapps

WordPress Plugin Simply Poll 1.4.1 – Multiple Vulnerabilities

# Exploit Title: WordPress Simply Poll Plugin 1.4.1 CSRF and stored XSS

2013-03-18 m3tamantra webapps

DaloRadius – Multiple Vulnerabilities

-------------------------------------------------------------------------

2013-03-18 Saadi Siddiqui webapps

ClipShare 4.1.4 – Multiple Vulnerabilities

=====================================================================

2013-03-15 AkaStep webapps

Open-Xchange Server 6 – Multiple Vulnerabilities

Multiple security issues for Open-Xchange Server have been discovered and fixed. The vendor has chosen responsible fu...

2013-03-15 Martin Braun webapps

WordPress Plugin LeagueManager 3.8 – SQL Injection

#!/usr/bin/ruby

2013-03-15 Joshua Reynolds webapps

Cisco Video Surveillance Operations Manager 6.3.2 – Multiple Vulnerabilities

# Exploit Title:Cisco Video Surveillance Operations Manager Multiple

2013-03-15 Bassem webapps

Petite Annonce – Cross-Site Scripting

source: https://www.securityfocus.com/bid/58508/info

2013-03-14 Metropolis webapps