webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

phlyLabs phlyMail Lite 4.03.04 – ‘go’ Open Redirect

phlyLabs phlyMail Lite 4.03.04 (go param) Open Redirect Vulnerability

2013-01-13 LiquidWorm webapps

PHPLiteAdmin 1.9.3 – Remote PHP Code Injection

# Exploit Title: phpliteadmin

2013-01-11 L@usch webapps

WordPress Plugin Gallery – ‘filename_1’ Arbitrary File Access

source: https://www.securityfocus.com/bid/57256/info

2013-01-10 Beni_Vanda webapps

Quick.CMS / Quick.Cart – Cross-Site Scripting

source: https://www.securityfocus.com/bid/57254/info

2013-01-09 High-Tech Bridge webapps

Prizm Content Connect – Arbitrary File Upload

source: https://www.securityfocus.com/bid/57242/info

2013-01-09 Include Security Research webapps

TinyBrowser – ‘edit.php’ Directory Listing

source: https://www.securityfocus.com/bid/57230/info

2013-01-09 MustLive webapps

TinyBrowser – ‘tinybrowser.php’ Directory Listing

source: https://www.securityfocus.com/bid/57230/info

2013-01-09 MustLive webapps

tinybrowser – ‘type’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57230/info

2013-01-09 MustLive webapps

WeBid 1.0.6 – SQL Injection

# Exploit Title: WeBid 1.0.6 SQL Injection Vulnerability

2013-01-09 Life Wasted webapps

Watson Management Console 4.11.2.G – Directory Traversal

# Exploit Title: Watson Management Console Directory Traversal Vulnerability

2013-01-09 Dhruv Shah webapps

Free Blog 1.0 – Multiple Vulnerabilities

# Free Blog 1.0 Multiple Vulnerability

2013-01-09 cr4wl3r webapps

WebsiteBaker Addon Concert Calendar 2.1.4 – Multiple Vulnerabilities

Advisory: Websitebaker Add-on 'Concert Calendar 2.1.4' XSS & SQLi vulnerability

2013-01-09 Stefan Schurtz webapps

WordPress Plugin Google Document Embedder – Arbitrary File Disclosure (Metasploit)

##

2013-01-08 Metasploit webapps

Advantech Webaccess HMI/SCADA Software – Persistence Cross-Site Scripting

##############################################################################

2013-01-08 SecPod Research webapps

E Sms Script – Multiple SQL Injections

# E SMS Script Multiple SQL Injection Vulnerability

2013-01-08 cr4wl3r webapps

WordPress Plugin NextGEN Gallery – ‘test-head’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57200/info

2013-01-08 Am!r webapps

Joomla! Component com_incapsula – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57190/info

2013-01-08 Gjoko Krstic webapps

MotoCMS – ‘admin/data/users.xml’ Access Restriction / Information Disclosure

source: https://www.securityfocus.com/bid/57055/info

2013-01-08 AkaStep webapps

Havalite CMS – ‘comment’ HTML Injection

source: https://www.securityfocus.com/bid/57169/info

2013-01-06 Henri Salo webapps

Nexpose Security Console – Cross-Site Request Forgery

Product: Nexpose Security Console

2013-01-06 Robert Gilbert webapps

pfSense 2.0.1 – Cross-Site Scripting / Cross-Site Request Forgery / Remote Command Execution

######################################################################

2013-01-05 Yann CAM webapps

MyBB Profile Wii Friend Code – Multiple Vulnerabilities

# Exploit Title: MyBB Profile Wii Friend Code SQLi/Persistent XSS

2013-01-04 Ichi webapps

Simple Web Server 2.3-rc1 – Directory Traversal

# Exploit Title: Simple Webserver 2.3-rc1 Directory Traversal

2013-01-04 CwG GeNiuS webapps

TomatoCart – ‘json.php’ Security Bypass

source: https://www.securityfocus.com/bid/57156/info

2013-01-04 Aung Khant webapps

Multiple WordPress WPScientist Themes – Arbitrary File Upload

source: https://www.securityfocus.com/bid/57152/info

2013-01-04 JingoBD webapps

WordPress Plugin Uploader – Arbitrary File Upload

source: https://www.securityfocus.com/bid/57112/info

2013-01-03 Sammy FORGIT webapps

osTicket – ‘tickets.php?status’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57111/info

2013-01-02 AkaStep webapps

osTicket – ‘l.php?url’ Arbitrary Site Redirect

source: https://www.securityfocus.com/bid/57111/info

2013-01-02 AkaStep webapps

WordPress Plugin Xerte Online – ‘save.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/57098/info

2013-01-02 Sammy FORGIT webapps

Astium VoIP PBX 2.1 build 25399 – Multiple Vulnerabilities/Remote Command Execution

#!/usr/bin/python

2013-01-02 xistence webapps

e107 1.0.2 – SQL Injection (via Cross-Site Request Forgery)

# Exploit Title: e107 v1.0.2 Administrator CSRF Resulting in SQL Injection

2013-01-02 Joshua Reynolds webapps

e107 1.0.1 – Arbitrary JavaScript Execution (via Cross-Site Request Forgery)

# Exploit Title: e107 v1.0.1 Administrator CSRF Resulting in Arbitrary Javascript Execution

2013-01-02 Joshua Reynolds webapps

WordPress Plugin Shopping Cart for WordPress – ‘/wp-content/plugins/levelfourstorefront/scripts/administration/exportaccounts.php?reqID’ SQL Injection

source: https://www.securityfocus.com/bid/57101/info

2013-01-01 Sammy FORGIT webapps

WordPress Plugin Shopping Cart for WordPress – ‘/wp-content/plugins/levelfourstorefront/scripts/administration/backup.php?reqID’ SQL Injection

source: https://www.securityfocus.com/bid/57101/info

2013-01-01 Sammy FORGIT webapps

WordPress Plugin Shopping Cart for WordPress – ‘/wp-content/plugins/levelfourstorefront/scripts/administration/exportsubscribers.php? reqID’ SQL Injection

source: https://www.securityfocus.com/bid/57101/info

2013-01-01 Sammy FORGIT webapps

WHMCS 5.0 – Insecure Cookie Authentication Bypass

source: https://www.securityfocus.com/bid/57145/info

2012-12-31 Agd_Scorp webapps

Joomla! Component Spider Calendar – ‘date’ Blind SQL Injection

Happy New year for all

2012-12-31 Red-D3v1L webapps

MyBB 1.6.9 – ‘editpost.php?posthash’ Blind SQL Injection

MyBB

2012-12-31 Joshua Rogers webapps

WordPress Plugin Zingiri Forums – ‘language’ Local File Inclusion

source: https://www.securityfocus.com/bid/56777/info

2012-12-30 Amirh03in webapps

WHM – ‘filtername’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57061/info

2012-12-27 Rafay Baloch webapps

cPanel – ‘detailbw.html’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57060/info

2012-12-27 Christy Philip Mathew webapps

cPanel WebHost Manager (WHM) – ‘/webmail/x3/mail/clientconf.html?acct’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57060/info

2012-12-27 Christy Philip Mathew webapps

cPanel – ‘dir’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57064/info

2012-12-26 Rafay Baloch webapps

Guru Auction 2.0 – Multiple SQL Injections

) ) ) ( ( ( ( ( ) )

2012-12-26 v3n0m webapps

MyBB AwayList Plugin – ‘index.php?id’ SQL Injection

# Exploit Title: AwayList MyBB plugin SQLi 0day

2012-12-24 Red_Hat webapps

MyBB HM My Country Flags – SQL Injection

# Exploit title: HM My Country Flags SQL Injection

2012-12-24 JoinSe7en webapps

City Directory Review and Rating Script – ‘search.php’ SQL Injection

# Exploit Title: City Directory Review and Rating Script SQL Injection

2012-12-24 3spi0n webapps

cPanel – ‘account’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57045/info

2012-12-24 Rafay Baloch webapps

Hero Framework – users/login ‘Username’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57035/info

2012-12-24 Stefan Schurtz webapps

Hero Framework – ‘search?q’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57035/info

2012-12-24 Stefan Schurtz webapps