webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

ezStats2 – ‘style.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/57757/info

2013-02-06 L0n3ly-H34rT webapps

Glossword 1.8.3 – SQL Injection

#cs

2013-02-05 AkaStep webapps

glossword 1.8.12 – Multiple Vulnerabilities

===================================================

2013-02-05 AkaStep webapps

Free Monthly Websites 2.0 – Multiple Vulnerabilities

Title:

2013-02-05 X-Cisadane webapps

D-Link DIR-600 / DIR-300 (Rev B) – Multiple Vulnerabilities

Device Name: DIR-600 / DIR 300 - HW rev B1

2013-02-05 m-1-k-3 webapps

AdaptCMS 2.0.4 – ‘config.php?question’ SQL Injection

# Exploit Title: AdaptCMS

2013-02-05 kallimero webapps

ArrowChat 1.5.61 – Multiple Vulnerabilities

# Exploit Title: ArrowChat

2013-02-05 kallimero webapps

Cisco Unity Express – Multiple Vulnerabilities

# Exploit Title: Cisco Unity Express Multiple Vulnerabilities

2013-02-05 Jacob Holcomb webapps

Simple Machine Forum 2.0.x < 2.0.4 - File Disclosure / Directory Traversal

# Exploit Title: SMF < 2.0.4 File Disclosure/Path Traversal

2013-02-04 NightlyDev webapps

EasyITSP – ‘voicemail.php’ Directory Traversal

source: https://www.securityfocus.com/bid/57741/info

2013-02-04 Michal Blaszczak webapps

WordPress Theme flashnews – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/57676/info

2013-02-02 MustLive webapps

WordPress Plugin Audio Player – ‘playerID’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57848/info

2013-01-31 hiphop webapps

Buffalo TeraStation TS-Series – Multiple Vulnerabilities

Title: Buffalo TeraStation TS-Series multiple vulnerabilities

2013-01-31 Andrea Fabrizi webapps

D-Link DCS Cameras – Multiple Vulnerabilities

Unauthenticated remote access to D-Link DCS cameras

2013-01-31 Roberto Paleari webapps

Netgear SPH200D – Multiple Vulnerabilities

Device Name: SPH200D

2013-01-31 m-1-k-3 webapps

pfSense UTM Platform 2.0.1 – Cross-Site Scripting

┴┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┴

2013-01-29 Dimitris Strevinas webapps

Kohana Framework 2.3.3 – Directory Traversal

Title:

2013-01-29 Vulnerability-Lab webapps

Fortinet FortiMail 400 IBE – Multiple Vulnerabilities

Title:

2013-01-29 Vulnerability-Lab webapps

DataLife Engine 9.7 – ‘preview.php’ PHP Code Injection

------------------------------------------------------------------

2013-01-28 EgiX webapps

PHP weby directory software 1.2 – Multiple Vulnerabilities

===========================================

2013-01-28 AkaStep webapps

Microsoft Internet Explorer 8/9 – Steal Any Cookie

# Exploit Title: Internet Explorer 8 & Internet Explorer 9 steal any Cookie

2013-01-28 Christian Haider webapps

ImageCMS 4.0.0b – Multiple Vulnerabilities

Advisory ID: HTB23132

2013-01-25 High-Tech Bridge SA webapps

WordPress Plugin SolveMedia 1.1.0 – Cross-Site Request Forgery

# Exploit Title: WordPress SolveMedia 1.1.0 CSRF Vulnerability

2013-01-25 Junaid Hussain webapps

iCart Pro – ‘section’ SQL Injection

source: https://www.securityfocus.com/bid/57564/info

2013-01-25 n3tw0rk webapps

PHPWeby Free Directory Script – ‘contact.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/57561/info

2013-01-25 AkaStep webapps

WordPress Plugin WP-Table Reloaded – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57664/info

2013-01-24 hiphop webapps

SQLiteManager 1.2.4 – Remote PHP Code Injection

#!/usr/bin/env python

2013-01-24 RealGame webapps

WordPress Theme Chocolate WP – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/57541/info

2013-01-23 Eugene Dokukin webapps

gpEasy CMS – ‘section’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57522/info

2013-01-23 High-Tech Bridge SA webapps

Perforce P4Web – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57514/info

2013-01-22 Christy Philip Mathew webapps

DigiLIBE – Execution-After-Redirect Information Disclosure

source: https://www.securityfocus.com/bid/57499/info

2013-01-22 Robert Gilbert webapps

Adult WebMaster Script – Password Disclosure

# Exploit Title: Yagina.com Adult Webmaster Script Admin Password Disclosure

2013-01-22 Dshellnoi Unix webapps

WordPress Plugin Developer Formatter – Cross-Site Request Forgery

====================================================================================================================

2013-01-22 Junaid Hussain webapps

NConf 1.3 – Arbitrary File Creation

# Exploit Title: nconf file read and wrtite exploit

2013-01-21 haidao webapps

NConf 1.3 – ‘/detail.php/detail_admin_items.php?id’ SQL Injection

# Exploit Title: nconf detail.php，detail_admin_items.php blind injection

2013-01-21 haidao webapps

Scripts Genie Classified Ultra – SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/57465/info

2013-01-20 3spi0n webapps

WordPress Plugin Ripe HD FLV Player – SQL Injection

-------------------------------------------------------------------

2013-01-19 Zikou-16 webapps

Joomla! Component com_collector – Arbitrary File Upload

# Exploit Title:Joomla com_collecter shell upload

2013-01-19 Red Dragon_al webapps

SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x – Remote Command Execution

#!/usr/bin/perl

2013-01-18 Nikolas Sotiriu webapps

Linksys WRT54GL Firmware 4.30.15 build 2 – Multiple Vulnerabilities

Device Name: Linksys WRT54GL v1.1

2013-01-18 m-1-k-3 webapps

SonicWALL GMS/Viewpoint/Analyzer – Authentication Bypass

-------------------------- NSOADV-2013-002 ---------------------------

2013-01-18 Nikolas Sotiriu webapps

PHP-Charts – Arbitrary PHP Code Execution

===============================================================

2013-01-18 AkaStep webapps

Invision Gallery 2.0.5 – SQL Injection

##############

2013-01-17 Ashiyane Digital Security Team webapps

IP.Gallery – ‘img’ SQL Injection

source: https://www.securityfocus.com/bid/57444/info

2013-01-17 Ashiyane Digital Security Team webapps

Cydia Repo Manager – Cross-Site Request Forgery

# Cydia Repo Manager CSRF Vulnerability

2013-01-16 Ramdan Yantu webapps

Oracle Application Framework – Diagnostic Mode Bypass

Trustwave SpiderLabs Security Advisory TWSL2012-023:

2013-01-16 Trustwave's SpiderLabs webapps

CMS snews – SQL Injection

____ ____ ____ _______/ |________ ____ ____

2013-01-15 By onestree webapps

phpLiteAdmin – ‘table’ SQL Injection

source: https://www.securityfocus.com/bid/57431/info

2013-01-15 KedAns-Dz webapps

phpShop 2.0 – SQL Injection

# Exploit Title : phpshop 2.0 SQL Injection Vulnerability

2013-01-14 By onestree webapps

phlyLabs phlyMail Lite 4.03.04 – Full Path Disclosure / Persistent Cross-Site Scripting

phlyLabs phlyMail Lite 4.03.04 Path Disclosure and Stored XSS Vulnerabilities

2013-01-13 LiquidWorm webapps