webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

City Reviewer – ‘search.php’ Script SQL Injection

source: https://www.securityfocus.com/bid/57049/info

2012-12-22 3spi0n webapps

VoipNow Service Provider Edition – Arbitrary Command Execution

source: https://www.securityfocus.com/bid/57032/info

2012-12-21 i-Hmx webapps

Elite Bulletin Board 2.1.21 – Multiple SQL Injections

Advisory ID: HTB23133

2012-12-21 High-Tech Bridge SA webapps

banana dance b.2.6 – Multiple Vulnerabilities

Advisory ID: HTB23118

2012-12-21 High-Tech Bridge SA webapps

SelectSurvey CMS – ‘ASP.NET’ Arbitrary File Upload

=============================================================

2012-12-21 040 webapps

YeaLink IP Phone SIP-TxxP Firmware 9.70.0.100 – Multiple Vulnerabilities

#+-------------------------------------------------------------------------------------------------------------------...

2012-12-21 xistence webapps

Enterpriser16 Load Balancer 7.1 – Multiple Cross-Site Scripting Vulnerabilities

Title:

2012-12-19 Vulnerability-Lab webapps

SonicWALL SonicOS 5.8.1.8 WAF – Cross-Site Scripting

Title:

2012-12-19 Vulnerability-Lab webapps

WordPress Theme Clockstone (and other CMSMasters Themes) – Arbitrary File Upload

# Exploit Title: [Clockstone and Various other CMSMasters Theme File Upload Vulnerabilities]

2012-12-19 DigiP webapps

Joomla! Component com_bit – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/56995/info

2012-12-19 Xr0b0t webapps

Joomla! Component com_ztautolink – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/56994/info

2012-12-19 Xr0b0t webapps

MyBB Transactions Plugin – ‘transaction’ SQL Injection

source: https://www.securityfocus.com/bid/57009/info

2012-12-18 limb0 webapps

WordPress Plugin RokBox Plugin – ‘/wp-content/plugins/wp_rokbox/jwplayer/jwplayer.swf?abouttext’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56953/info

2012-12-17 MustLive webapps

PHPWCMS 1.5.4.6 – ‘preg_replace’ Multiple Vulnerabilities

2012-12-17 aeon webapps

MyBB User Profile Skype ID Plugin 1.0 – Persistent Cross-Site Scripting

# Exploit Title: Profile Skype ID MyBB Plugin Stored XSS

2012-12-16 limb0 webapps

Social Sites MyBB Plugin 0.2.2 – Cross-Site Scripting

# Exploit Title: Social Sites MyBB Plugin 0.2.2 Cross Site Scripting

2012-12-14 s3m00t webapps

Centreon Enterprise Server 2.3.3 < 2.3.9-4 - Blind SQL Injection

#!/usr/bin/env python

2012-12-13 modpr0be webapps

MyBB DyMy User Agent Plugin – ‘newreply.php’ SQL Injection

############################################################################

2012-12-13 JoinSe7en webapps

WordPress Plugin Portable phpMyAdmin – Authentication Bypass

'portable-phpMyAdmin (WordPress Plugin)' Authentication Bypass (CVE-2012-5469)

2012-12-13 Mark Stanislav webapps

Facebook Profile MyBB Plugin 2.4 – Persistent Cross-Site Scripting

# Exploit Title: MyBB Facebook Profile Plugin Persistant XSS

2012-12-13 limb0 webapps

MyBB AJAX Chat – Persistent Cross-Site Scripting

# Title: MyBB AJAX Chat Persistent XSS Vulnerability

2012-12-13 Mr. P-teo webapps

MyYoutube MyBB Plugin 1.0 – SQL Injection

# Exploit Title: MyYoutube MyBB plugin SQL UPDATE injection.

2012-12-13 Zixem webapps

PHP Address Book – ‘group’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56937/info

2012-12-13 Kenneth F. Belva webapps

N-able N-central – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/56933/info

2012-12-13 Cartel webapps

Axway Secure Transport 5.1 SP2 – Directory Traversal

Secure Transport Path Traversal Vulnerability

2012-12-12 Sebastian Perez webapps

TipsOfTheDay MyBB Plugin – Multiple Vulnerabilities

# Exploit Title: TipsOfTheDay mybb plugin stored XSS and SQL injection vulnerabilitys.

2012-12-12 VipVince webapps

PHP-Nuke 8.2.4 – Cross-Site Request Forgery

###########################################################

2012-12-11 sajith webapps

MyBB Profile Blogs Plugin 1.2 – Multiple Vulnerabilities

# Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities.

2012-12-11 Zixem webapps

Joomla! Component com_jooproperty 1.13.0 – Multiple Vulnerabilities

1 ######################################### 1

2012-12-11 D4NB4R webapps

MyBB Bank- 3 Plugin – SQL Injection

# Exploit Title: Bank v3 MyBB plugin SQLi 0day

2012-12-11 Red_Hat webapps

SimpleInvoices invoices Module – Customer Field Cross-Site Scripting

source: https://www.securityfocus.com/bid/56882/info

2012-12-10 tommccredie webapps

Smartphone Pentest Framework – Multiple Remote Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/56881/info

2012-12-10 High-Tech Bridge webapps

Achievo 1.4.5 – Multiple Vulnerabilities (2)

Advisory ID: HTB23126

2012-12-09 High-Tech Bridge SA webapps

Clipbucket 2.6 Revision 738 – Multiple SQL Injections

Advisory ID: HTB23125

2012-12-09 High-Tech Bridge SA webapps

Cisco DPC2420 – Multiples Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

2012-12-09 Facundo M. de la Cruz webapps

MyBB KingChat Plugin – Persistent Cross-Site Scripting

Exploit Title: MyBB 'kingchat' chat-box plugin.

2012-12-09 VipVince webapps

vBulletin ajaxReg Module – SQL Injection

source: https://www.securityfocus.com/bid/56877/info

2012-12-08 Cold Zero webapps

FOOT Gestion – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56862/info

2012-12-07 Emmanuel Farcy webapps

WordPress Plugin Simple Gmail Login – Stack Trace Information Disclosure

source: https://www.securityfocus.com/bid/56860/info

2012-12-07 Aditya Balapure webapps

m0n0wall 1.33 – Multiple Cross-Site Request Forgery Vulnerabilities

######################################################################

2012-12-07 Yann CAM webapps

Kordil EDms 2.2.60rc3 – SQL Injection

# Exploit Title: Kordil EDMS v2.2.60rc3 SQL Injection Vulnerability

2012-12-06 Woody Hughes webapps

Advantech Studio 7.0 – SCADA/HMI Directory Traversal

# Exploit Title: Advantech Studio v7.0 SCADA/HMI Directory Traversal 0-day

2012-12-04 Nin3 webapps

Sourcefabric Newscoop – ‘f_email’ SQL Injection

source: https://www.securityfocus.com/bid/56800/info

2012-12-04 AkaStep webapps

WordPress Theme Nest – ‘codigo’ SQL Injection

source: https://www.securityfocus.com/bid/56792/info

2012-12-04 Ashiyane Digital Security Team webapps

FirePass SSL VPN – Local File Inclusion

SEC Consult Vulnerability Lab Security Advisory < 20121203-0 >

2012-12-03 SEC Consult webapps

Symantec Messaging Gateway 9.5.3-3 – Arbitrary File Download

=======

2012-12-03 Ben Williams webapps

Symantec Messaging Gateway 9.5.3-3 – Cross-Site Request Forgery

=======

2012-12-03 Ben Williams webapps

MyBB KingChat Plugin – SQL Injection

# Exploit Title: KingChat MyBB plugin SQL Injection 0day

2012-12-03 Red_Hat webapps

SchoolCMS – Persistent Cross-Site Scripting

Title: SchoolCMS Persistant XSS.

2012-12-03 VipVince webapps

TinyMCPUK – ‘test’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56767/info

2012-12-01 eidelweiss webapps