webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Apache Rave 0.11 < 0.20 - User Information Disclosure

CVE-2013-1814: Apache Rave exposes User over API

2013-03-13 Andreas Guth webapps

Web Cookbook – Multiple SQL Injections

# Exploit Title: Web Cookbook Multiple SQL Injection

2013-03-13 Saadat Ullah webapps

PHPBoost – Arbitrary File Upload / Information Disclosure

source: https://www.securityfocus.com/bid/58432/info

2013-03-11 KedAns-Dz webapps

KindEditor – Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/58431/info

2013-03-11 KedAns-Dz webapps

Privoxy Proxy – Authentication Information Disclosure

source: https://www.securityfocus.com/bid/58425/info

2013-03-11 Chris John Riley webapps

WordPress Plugin podPress – ‘playerID’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58421/info

2013-03-11 hiphop webapps

Asteriskguru Queue Statistics – ‘warning’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58418/info

2013-03-10 Manuel García Cárdenas webapps

SWFupload – Multiple Content Spoofing / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58417/info

2013-03-10 MustLive webapps

WordPress Plugin Terillion Reviews – Profile Id HTML Injection

source: https://www.securityfocus.com/bid/58415/info

2013-03-08 Aditya Balapure webapps

Your Own Classifieds – Cross-Site Scripting

source: https://www.securityfocus.com/bid/58399/info

2013-03-08 Rafay Baloch webapps

CosCMS 1.721 – OS Command Injection

Advisory ID: HTB23145

2013-03-07 High-Tech Bridge SA webapps

mnoGoSearch 3.3.12 (search.cgi) – Arbitrary File Read

-----------------------------------------------------------

2013-03-07 Sergey Bobrov webapps

Qool CMS 2.0 RC2 – Multiple Vulnerabilities

Qool CMS v2.0 RC2 XSRF Add Root Exploit

2013-03-07 LiquidWorm webapps

Remote File Manager 1.2 iOS – Multiple Vulnerabilities

Title:

2013-03-06 Vulnerability-Lab webapps

Matrix42 Service Store – ‘default.aspx’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/59290/info

2013-03-06 43zsec webapps

WordPress Plugin Count Per Day – ‘daytoshow’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58307/info

2013-03-05 alejandr0.m0f0 webapps

HP Intelligent Management Center – ‘topoContent.jsf’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58293/info

2013-03-04 Julien Ahrens webapps

Nconf 1.3 – Multiple SQL Injections

# Exploit Title: nconf handle_item.php，Modify_attr.php etc Multiple Sql injection

2013-03-04 Saadi Siddiqui webapps

D-Link DSL-2740B ADSL Router – Authentication Bypass

+--------------------------------------------------------------------------------------------------------------------...

2013-03-04 Ivano Binetti webapps

Plogger – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/58271/info

2013-03-02 Saadat Ullah webapps

Question2Answer – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/58414/info

2013-03-01 MustLive webapps

WordPress Plugin Uploader – ‘blog’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58285/info

2013-03-01 CodeV webapps

Batavi – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58151/info

2013-03-01 Dognaedis webapps

PHP-Fusion 7.02.05 – Multiple Vulnerabilities

[waraxe-2013-SA#097] - Multiple Vulnerabilities in PHP-Fusion 7.02.05

2013-03-01 waraxe webapps

Piwigo 2.4.6 – Multiple Vulnerabilities

Advisory ID: HTB23144

2013-03-01 High-Tech Bridge SA webapps

doorGets CMS – Cross-Site Request Forgery

# Title: Doorgets CSRF Vulnerability

2013-03-01 n0pe webapps

WordPress Plugin Comment Rating 2.9.32 – Multiple Vulnerabilities

# Exploit Title: Wordpress plugin: Comment Rating SQL injection

2013-02-27 ebanyu webapps

Joomla! 3.0.2 – ‘highlight.php’ PHP Object Injection

-------------------------------------------------------------------

2013-02-27 EgiX webapps

Geeklog – Cross-Site Scripting

source: https://www.securityfocus.com/bid/58209/info

2013-02-27 High-Tech Bridge webapps

JForum – ‘jforum.page’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58164/info

2013-02-26 ZeroDayLab webapps

WiFilet 1.2 iPad iPhone – Multiple Vulnerabilities

Title:

2013-02-26 Vulnerability-Lab webapps

MTP Poll 1.0 – Multiple Cross-Site Scripting Vulnerabilities

MTP Poll 1.0 Multiple Remote Script Insertion Vulnerabilities

2013-02-26 LiquidWorm webapps

MTP Guestbook 1.0 – Multiple Cross-Site Scripting Vulnerabilities

MTP Guestbook 1.0 Multiple Remote Script Insertion Vulnerabilities

2013-02-26 LiquidWorm webapps

MTP Image Gallery 1.0 – ‘edit_photos.php?title’ Cross-Site Scripting

MTP Image Gallery 1.0 (title) Remote Script Insertion Vulnerability

2013-02-26 LiquidWorm webapps

iOS IPMap 2.5 – Arbitrary File Upload

Title:

2013-02-26 Vulnerability-Lab webapps

Rix4Web Portal – Blind SQL Injection

################################################

2013-02-26 L0n3ly-H34rT webapps

Brewthology 0.1 – SQL Injection

#Brewthology 0.1 SQL Injection Exploit

2013-02-26 cr4wl3r webapps

phpMyRecipes – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/58160/info

2013-02-25 PDS webapps

WordPress Plugin Smart Flv – ‘jwplayer.swf’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58135/info

2013-02-25 Henri Salo webapps

AirDrive HD 1.6 iPad iPhone – Multiple Vulnerabilities

Title:

2013-02-24 Vulnerability-Lab webapps

File Manager – HTML Injection / Local File Inclusion

source: https://www.securityfocus.com/bid/58313/info

2013-02-23 Benjamin Kunz Mejri webapps

OpenEMR – ‘site’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58085/info

2013-02-21 Gjoko Krstic webapps

PHPmyGallery 1.5 – Local File Disclosure / Cross-Site Scripting

source: https://www.securityfocus.com/bid/58081/info

2013-02-21 TheMirkin webapps

PHPMyRecipes 1.2.2 – ‘viewrecipe.php?r_id’ SQL Injection

#phpMyRecipes 1.2.2 SQL Injection Exploit

2013-02-21 cr4wl3r webapps

Alt-N MDaemon WorldClient 13.0.3 – Multiple Vulnerabilities

======================================================================

2013-02-21 QSecure & Demetris Papapetrou webapps

glFusion 1.2.2 – Multiple Cross-Site Scripting Vulnerabilities

Advisory ID: HTB23142

2013-02-21 High-Tech Bridge SA webapps

RTTucson Quotations Database Script – Authentication Bypass

# RTTucson Quotations Database Script (Auth Bypass) SQL Injection Vulnerability

2013-02-21 cr4wl3r webapps

Alt-N MDaemon 12.5.6/13.0.3 – Email Body HTML/JS Injection

==============================================================

2013-02-21 QSecure & Demetris Papapetrou webapps

Web Cookbook – Multiple Vulnerabilities

# Web Cookbook Multiple Vulnerability

2013-02-21 cr4wl3r webapps

CKEditor 4.0.1 – Multiple Vulnerabilities

===========================================

2013-02-20 AkaStep webapps