webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

SilverStripe CMS 3.0.2 – (Multiple Vulnerabilities) Cross-Site Scripting / Cross-Site Request Forgery

Sense of Security - Security Advisory - SOS-12-011

2012-11-30 Sense of Security webapps

SmartCMS – ‘/index.php?menuitem’ SQL Injection / Cross-Site Scripting

##########################################################################

2012-11-30 Yakir Wizman webapps

Free Hosting Manager 2.0 – ‘id’ SQL Injection

##########################################################################

2012-11-30 Yakir Wizman webapps

FCKEditor Core ASP 2.6.8 – Arbitrary File Upload Protection Bypass

- Title: FCKEditor 2.6.8 ASP Version File Upload Protection bypass

2012-11-29 Soroush Dalili webapps

Oracle OpenSSO 8.0 – Multiple Cross-Site Scripting POST Injection Vulnerabilities

Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities

2012-11-29 LiquidWorm webapps

Elastix – ‘page’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56746/info

2012-11-29 cheki webapps

WordPress Theme Toolbox – ‘mls’ SQL Injection

source: https://www.securityfocus.com/bid/56745/info

2012-11-29 Ashiyane Digital Security Team webapps

WordPress Plugin Video Lead Form – ‘errMsg’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56737/info

2012-11-29 Aditya Balapure webapps

BigDump 0.29b and 0.32b – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/56744/info

2012-11-28 Ur0b0r0x webapps

gleamtech filevista/fileultimate 4.6 – Directory Traversal

Hello

2012-11-28 Soroush Dalili webapps

WordPress Theme CStar Design – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56694/info

2012-11-27 Amirh03in webapps

WordPress Theme Wp-ImageZoom – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56691/info

2012-11-26 Amirh03in webapps

Forescout CounterACT – ‘a’ Open Redirection

source: https://www.securityfocus.com/bid/56687/info

2012-11-26 Joseph Sheridan webapps

WordPress Plugin Ads Box – ‘count’ SQL Injection

source: https://www.securityfocus.com/bid/56681/info

2012-11-26 Ashiyane Digital Security Team webapps

SmartCMS – ‘index.php?idx’ SQL Injection

=============================================================================================================

2012-11-26 NoGe webapps

PRADO PHP Framework 3.2.0 – Arbitrary File Read

PRADO PHP Framework 3.2.0 Arbitrary File Read Vulnerability

2012-11-26 LiquidWorm webapps

BuyClassifiedScript – PHP Code Injection

# Exploit Title: buyclassifiedscript PHP code injection vulnerability

2012-11-26 d3b4g webapps

ES CmS 0.1 – SQL Injection

# Exploit Title: ES CmS 0.1 Sql Injection Vulnerability

2012-11-25 hossein beizaee webapps

jBilling 3.0.2 – Cross-Site Scripting

# Exploit Title: jBilling 3.0.2 Cross Site Scripting Vulnerability

2012-11-25 Woody Hughes webapps

Beat Websites – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56683/info

2012-11-24 Metropolis webapps

WordPress Theme Magazine Basic – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56664/info

2012-11-22 Novin hack webapps

WordPress Plugin Zarzadzonie Kontem – ‘ajaxfilemanager.php’ Script Arbitrary File Upload

source: https://www.securityfocus.com/bid/56663/info

2012-11-22 Ashiyane Digital Security Team webapps

WordPress Plugin Plg Novana – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56661/info

2012-11-22 sil3nt webapps

WordPress Plugin Webplayer – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56660/info

2012-11-22 Novin hack webapps

WordPress Plugin Zingiri Web Shop – ‘path’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/56659/info

2012-11-22 Ashiyane Digital Security Team webapps

XiVO – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/56652/info

2012-11-21 Francis Provencher webapps

Feng Office – Security Bypass / HTML Injection

source: https://www.securityfocus.com/bid/56626/info

2012-11-21 Ur0b0r0x webapps

dotProject 2.1.x – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56624/info

2012-11-21 High-Tech Bridge webapps

dotProject 2.1.x – ‘index.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/56624/info

2012-11-21 High-Tech Bridge webapps

PHP Server Monitor – Persistent Cross-Site Scripting

# Author: loneferret of Offensive Security

2012-11-21 loneferret webapps

ManageEngine ServiceDesk 8.0 – Multiple Vulnerabilities

Title:

2012-11-21 Vulnerability-Lab webapps

Yii Framework 1.1.8 – Search SQL Injection

# Exploit Title: Yii Framework - Search SQL Injection Vulnerability

2012-11-21 Juno_okyo webapps

WordPress Plugin Facebook Survey 1.0 – SQL Injection

Title:

2012-11-20 Vulnerability Research Laboratory webapps

SonicWALL CDP 5040 6.x – Multiple Vulnerabilities

Title:

2012-11-20 Vulnerability-Lab webapps

WordPress Theme Madebymilk – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56608/info

2012-11-20 Ashiyane Digital Security Team webapps

openSIS 5.1 – ‘ajax.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/56598/info

2012-11-20 Julian Horoszkiewicz webapps

Omni-Secure – ‘dir’ Multiple File Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/56575/info

2012-11-19 HaCkeR_EgY webapps

weBid 1.0.5 – Directory Traversal

# Author: loneferret of Offensive Security

2012-11-19 loneferret webapps

WeBid 1.0.5 – Cross-Site Scripting

# Exploit Title: WeBid

2012-11-19 Woody Hughes webapps

friendsinwar FAQ Manager – ‘view_faq.php?question’ SQL Injection

# Exploit Title: friendsinwar FAQ Manager SQL Injection (URL) Vulnerability

2012-11-16 unsuprise webapps

ATutor 2.1 – ‘tool_file’ Local File Inclusion

source: https://www.securityfocus.com/bid/56600/info

2012-11-16 Julian Horoszkiewicz webapps

Open-Realty 2.5.8 – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/56580/info

2012-11-16 Aung Khant webapps

Friends in War The FAQ Manager – ‘question’ SQL Injection

source: https://www.securityfocus.com/bid/56576/info

2012-11-16 unsuprise webapps

WordPress Plugin Tagged Albums – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56569/info

2012-11-16 Ashiyane Digital Security Team webapps

WordPress Theme Dailyedition-mouss – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56568/info

2012-11-16 Ashiyane Digital Security Team webapps

ReciPHP 1.1 – SQL Injection

\#'#/

2012-11-15 cr4wl3r webapps

BabyGekko 1.2.2e – Multiple Vulnerabilities

Advisory ID: HTB23122

2012-11-15 High-Tech Bridge SA webapps

Friends in War Make or Break 1.3 – Authentication Bypass

# Exploit Title: friendsinwar Make or break V1.3 SQL Injection (authbypass) Vulnerability

2012-11-15 d3b4g webapps

iDev Rentals 1.0 – Multiple Vulnerabilities

Title:

2012-11-15 Vulnerability-Lab webapps

MYRE Realty Manager – Multiple Vulnerabilities

# Exploit Title:MYRE Realty Manager Multiple Vulnerabilities

2012-11-14 d3b4g webapps