webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

MYREphp Vacation Rental Software – Multiple Vulnerabilities

# Exploit Title: MYREphp Vacation Rental Software Multiple Vulnerabilities

2012-11-14 d3b4g webapps

friendsinwar FAQ Manager – SQL Injection / Authentication Bypass

# Exploit Title: friendsinwar FAQ Manager SQL Injection (authbypass) Vulnerability

2012-11-14 d3b4g webapps

Myrephp Business Directory – Multiple Vulnerabilities

# Exploit Title: Myrephp Business Directory, Multiple Vulnerabilities

2012-11-14 d3b4g webapps

Narcissus – Remote Command Execution

:::::::-. ... ::::::. :::.

2012-11-14 dun webapps

dotProject 2.1.6 – Remote File Inclusion

:::::::-. ... ::::::. :::.

2012-11-14 dun webapps

Eventy CMS 1.8 Plus – Multiple Vulnerabilities

Title:

2012-11-13 Vulnerability-Lab webapps

vBulletin vBay 1.1.9 – Error-Based SQL Injection

#!/usr/bin/env python -W ignore::DeprecationWarning

2012-11-12 Dan UK webapps

Bananadance Wiki b2.2 – Multiple Vulnerabilities

Title:

2012-11-12 Vulnerability-Lab webapps

NetOffice Dwins 1.4p3 – SQL Injection

:::::::-. ... ::::::. :::.

2012-11-09 dun webapps

WordPress Plugin Eco-annu – ‘eid’ SQL Injection

source: https://www.securityfocus.com/bid/56479/info

2012-11-09 Ashiyane Digital Security Team webapps

WordPress Plugin PHP Event Calendar – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/56478/info

2012-11-09 Ashiyane Digital Security Team webapps

WordPress Theme Kakao – ‘ID’ SQL Injection

source: https://www.securityfocus.com/bid/56477/info

2012-11-09 sil3nt webapps

ESRI ArcGIS for Server – ‘where’ SQL Injection

source: https://www.securityfocus.com/bid/56474/info

2012-11-09 anonymous webapps

AR Web Content Manager (AWCM) – ‘cookie_gen.php’ Arbitrary Cookie Generation

source: https://www.securityfocus.com/bid/56465/info

2012-11-08 Sooel Son webapps

WordPress Plugin FLV Player – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56418/info

2012-11-07 Ashiyane Digital Security Team webapps

OrangeHRM – ‘sortField’ SQL Injection

source: https://www.securityfocus.com/bid/56417/info

2012-11-07 High-Tech Bridge webapps

AVerCaster Pro RS3400 Web Server – Directory Traversal

# Exploit Title: AVerCaster Pro RS3400 web server directory traversal

2012-11-07 Patrick Saladino webapps

Xivo 1.2 – Arbitrary File Download

Xivo 1.2 Arbitrary File Download under root privileges

2012-11-07 Mr.Un1k0d3r webapps

Invision Power Board (IP.Board) 3.3.4 – Unserialize Regex Bypass

2012-11-07 webDEViL webapps

ZenPhoto 1.4.3.3 – Multiple Vulnerabilities

[waraxe-2012-SA#096] - Multiple Vulnerabilities in Zenphoto 1.4.3.3

2012-11-06 waraxe webapps

VeriCentre – Multiple SQL Injections

source: https://www.securityfocus.com/bid/56409/info

2012-11-06 Cory Eubanks webapps

CheckPoint/Sofaware Firewall – Multiple Vulnerabilities

ProCheckUp Research

2012-11-05 Procheckup webapps

ZPanel 10.0.1 – Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset

# Exploit Title: ZPanel

2012-11-05 pcsjj webapps

WordPress Plugin Spider Catalog 1.1 – HTML Code Injection / Cross-Site Scripting

1 ######################################### 1

2012-11-04 D4NB4R webapps

AWAuctionScript CMS – Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/56388/info

2012-11-04 X-Cisadane webapps

Joomla! Component Parcoauto – ‘idVeicolo’ SQL Injection

source: https://www.securityfocus.com/bid/56384/info

2012-11-03 Andrea Bocchetti webapps

DCForum – ‘auth_user_file.txt’ File Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/56383/info

2012-11-02 r45c4l webapps

Achievo 1.4.5 – Multiple Vulnerabilities (1)

Information

2012-11-02 Canberk BOLAT webapps

PrestaShop 1.5.1 – Persistent Cross-Site Scripting

PrestaShop

2012-11-02 David Sopas webapps

vBulletin ChangUonDyU Advanced Statistics – SQL Injection

# Exploit Title: vBulletin ChangUonDyU Advanced Statistics - SQL Injection

2012-11-02 Juno_okyo webapps

WordPress Plugin All Video Gallery 1.1 – SQL Injection

# Exploit Title: Wordpress All Video Gallery 1.1 SQL Injection Vulnerability

2012-11-02 Ashiyane Digital Security Team webapps

MyBB Follower User Plugin – SQL Injection

# Exploit Title: Follower User MyBB plugin SQL Injection 0day

2012-11-01 Zixem webapps

Joomla! Component Spider Catalog 1.1 – ‘Product_ID’ SQL Injection

1 ######################################### 1

2012-11-01 D4NB4R webapps

Endpoint Protector 4.0.4.2 – Multiple Persistent Cross-Site Scripting Vulnerabilities

Advisory Name: Multiple Persistent Cross-Site Scripting (XSS) in Endpoint

2012-11-01 CYBSEC Labs webapps

Invision Power Board (IP.Board) 3.3.4 – ‘Unserialize()’ PHP Code Execution

2012-11-01 EgiX webapps

WordPress Plugin bbPress – Multiple Vulnerabilities

# Souhail Hammou - Independant Security Researcher & Penetration Tester .

2012-11-01 Dark-Puzzle webapps

WordPress Plugin foxypress 0.4.2.5 – Multiple Vulnerabilities

[waraxe-2012-SA#095] - Multiple Vulnerabilities in Wordpress FoxyPress Plugin

2012-10-31 waraxe webapps

PG Dating Pro CMS 1.0 – Multiple Vulnerabilities

Title:

2012-10-31 Vulnerability-Lab webapps

vam shop 1.69 – Multiple Vulnerabilities

Product: VaM Shop

2012-10-31 Security Effect Team webapps

BloofoxCMS 0.3.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56353/info

2012-10-31 Canberk BOLAT webapps

SolarWinds Orion IP Address Manager (IPAM) – ‘search.aspx’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56342/info

2012-10-31 Anthony Trummer webapps

NetCat CMS – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56340/info

2012-10-31 Security Effect Team webapps

Joomla! Component com_quiz – SQL Injection

source: https://www.securityfocus.com/bid/56338/info

2012-10-30 Daniel Barragan webapps

TP-Link TL-WR841N Router – Local File Inclusion

source: https://www.securityfocus.com/bid/56320/info

2012-10-29 Matan Azugi webapps

CorePlayer – ‘callback’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56334/info

2012-10-28 MustLive webapps

WordPress Plugin Easy Webinar – Blind SQL Injection

# Exploit Title: Wordpress Easy Webinar Plugin Blind SQL Injection Vulnerability

2012-10-28 Robert Cooper webapps

EasyITSP – ‘customers_edit.php’ Authentication Bypass

source: https://www.securityfocus.com/bid/56321/info

2012-10-26 Michal Blaszczak webapps

VicBlog – Multiple SQL Injections

source: https://www.securityfocus.com/bid/56307/info

2012-10-26 Geek webapps

Inventory – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/56293/info

2012-10-26 G13 webapps

Gramophone – ‘rs’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56299/info

2012-10-25 G13 webapps