webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Bitweaver 2.8.1 – Multiple Vulnerabilities

Trustwave SpiderLabs Security Advisory TWSL2012-016:

2012-10-24 Trustwave's SpiderLabs webapps

ClanSphere 2011.3 – ‘cs_lang’ Cookie Local File Inclusion

Exploit Title: ClanSphere 2011.3 (cs_lang cookie parameter) Local File Include Vulnerability

2012-10-23 blkhtc0rp webapps

SMF – ‘view’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56223/info

2012-10-23 Am!r webapps

WHMCompleteSolution (WHMCS) 4.5.2 – ‘googlecheckout.php’ SQL Injection

source: https://www.securityfocus.com/bid/56173/info

2012-10-22 Starware Security Team webapps

ATutor 1.2 – Multiple Vulnerabilities

Advisory ID: HTB23117

2012-10-22 High-Tech Bridge SA webapps

subrion CMS 2.2.1 – Multiple Vulnerabilities

Advisory ID: HTB23113

2012-10-22 High-Tech Bridge SA webapps

WordPress Plugin social discussions 6.1.1 – Multiple Vulnerabilities

[waraxe-2012-SA#093] - Multiple Vulnerabilities in Wordpress Social Discussions Plugin

2012-10-22 waraxe webapps

Schoolhos CMS Beta 2.29 – ‘id’ SQL Injection

# Exploit Title: Schoolhos CMS SQL Injetions

2012-10-22 Cumi webapps

WordPress Plugin White Label CMS 1.5 – Cross-Site Request Forgery / Persistent Cross-Site Scripting

# Exploit Title: White Label CMS v 1.5 CSRF w/ persistent XSS

2012-10-22 pcsjj webapps

Joomla! Component com_kunena – ‘search’ SQL Injection

#!/usr/bin/perl

2012-10-22 D35m0nd142 webapps

Movable Type Pro 5.13en – Persistent Cross-Site Scripting

-----BEGIN PGP SIGNED MESSAGE-----

2012-10-22 sqlhacker webapps

Joomla! Component com_commedia – ‘task’ SQL Injection

Exploit Title: Joomla commedia Remote Exploit

2012-10-22 D4NB4R webapps

WebTitan – ‘logs-x.php’ Directory Traversal

source: https://www.securityfocus.com/bid/55904/info

2012-10-20 Richard Conner webapps

CMS Mini 0.2.2 – ‘index.php’ Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/56148/info

2012-10-19 Netsparker webapps

CMSQLite 1.3.2 – Multiple Vulnerabilities

Title:

2012-10-19 Vulnerability-Lab webapps

Joomla! Component com_tag – ‘tag’ SQL Injection

Exploit Title: Joomla tag Remote Sql Exploit

2012-10-19 D4NB4R webapps

Joomla! Component com_fss 1.9.1.1447 – SQL Injection

Exploit Title: Joomla Freestyle Support com_fss sqli

2012-10-19 D4NB4R webapps

ManageEngine Security Manager Plus 5.5 build 5505 – Directory Traversal

#!/usr/bin/python

2012-10-19 xistence webapps

WordPress Plugin FireStorm Professional Real Estate 2.06.01 – SQL Injection

# Exploit Title: Wordpress FireStorm Professional Real Estate 2.06.01 SQL Injection Vulnerability

2012-10-18 Ashiyane Digital Security Team webapps

OTRS 3.1 – Persistent Cross-Site Scripting

#!/usr/bin/python

2012-10-18 Mike Eduard webapps

WordPress Plugin Wordfence Security – Cross-Site Scripting

source: https://www.securityfocus.com/bid/56159/info

2012-10-18 MustLive webapps

Amateur Photographer’s Image Gallery – ‘fullscreen.php?albumid’ SQL Injection

source: https://www.securityfocus.com/bid/56110/info

2012-10-18 cr4wl3r webapps

Amateur Photographer’s Image Gallery – ‘plist.php?albumid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56110/info

2012-10-18 cr4wl3r webapps

Amateur Photographer’s Image Gallery – ‘plist.php?albumid’ SQL Injection

source: https://www.securityfocus.com/bid/56110/info

2012-10-18 cr4wl3r webapps

Amateur Photographer’s Image Gallery – ‘force-download.php?File’ Information Disclosure

source: https://www.securityfocus.com/bid/56110/info

2012-10-18 cr4wl3r webapps

BSW Gallery – ‘uploadpic.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/56109/info

2012-10-18 cr4wl3r webapps

jCore – ‘/admin/index.php?path’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56102/info

2012-10-17 High-Tech Bridge webapps

WordPress Plugin Slideshow – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56090/info

2012-10-17 waraxe webapps

Oracle WebCenter Sites (FatWire Content Server) – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20121017-2 >

2012-10-17 SEC Consult webapps

ManageEngine Support Center Plus 7908 – Multiple Vulnerabilities

+--------------------------------------------------------------------------------------------------------------------...

2012-10-17 xistence webapps

Symphony CMS 2.3 – Multiple Vulnerabilities

Symphony cms 2.3 multiple vulnerabilities

2012-10-17 Wireghoul webapps

Sisfokol 4.0 – Arbitrary File Upload

Undergroundthalo Hacking Team - Security Advisory

2012-10-17 cr4wl3r webapps

Visual Tools DVR3.0.6.16, vx series 4.2.19.2 – Multiple Vulnerabilities

# Exploit Title: Visual Tools DVR multiple vulnerabilities

2012-10-16 Andrea Fabrizi webapps

Joomla! Component com_icagenda – ‘id’ Multiple Vulnerabilities

# Souhail Hammou - Independant Security Researcher & Penetration Tester .

2012-10-16 Dark-Puzzle webapps

MyBB Profile Albums Plugin 0.9 – ‘albums.php?album’ SQL Injection

# Exploit Title: Profile Albums MyBB plugin SQL Injection 0day

2012-10-16 Zixem webapps

Project Pier – Arbitrary File Upload (Metasploit)

##

2012-10-16 Metasploit webapps

WANem – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56326/info

2012-10-16 Brendan Coles webapps

WordPress Plugin Crayon Syntax Highlighter – ‘wp_load’ Remote File Inclusion

source: https://www.securityfocus.com/bid/55919/info

2012-10-15 Charlie Eriksen webapps

SilverStripe CMS 2.4.x – ‘BackURL’ Open Redirection

source: https://www.securityfocus.com/bid/55915/info

2012-10-15 Aung Khant webapps

BigPond 3G21WB – Multiple Vulnerabilities

Hard-coded credentials and command-injection vulnerabilities on BigPond 3G21WB

2012-10-15 Roberto Paleari webapps

airVisionNVR 1.1.13 – ‘readfile()’ Disclosure / SQL Injection

Exploit Title: airVisionNVR readfile() disclosure and sql injection

2012-10-15 pennyGrit webapps

Cartweaver 3 – Local File Inclusion

# Exploit Title: Cartweaver 3 LFI exploit

2012-10-15 HaxOr webapps

vOlk Botnet Framework 4.0 – Multiple Vulnerabilities

Title:

2012-10-11 Vulnerability-Lab webapps

Omnistar Document Manager 8.0 – Multiple Vulnerabilities

Title:

2012-10-11 Vulnerability-Lab webapps

ServersCheck Monitoring Software 9.0.12/9.0.14 – Persistent Cross-Site Scripting

# Author: loneferret of Offensive Security

2012-10-10 loneferret webapps

Auxilium RateMyPet – Arbitrary File Upload (Metasploit)

##

2012-10-10 Metasploit webapps

qdPM 7.0 – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2012-10-10 Metasploit webapps

phpMyAdmin 3.5.2.2 – ‘server_sync.php’ Backdoor (Metasploit)

##

2012-10-10 Metasploit webapps

PhpTax – ‘pfilez’ Execution Remote Code Injection (Metasploit)

##

2012-10-10 Metasploit webapps

OpenX 2.8.10 – ‘plugin-index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55860/info

2012-10-10 High-Tech Bridge webapps