webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Endpoint Protector 4.0.4.0 – Multiple Vulnerabilities

Title:

2012-10-09 Vulnerability-Lab webapps

Web Help Desk by SolarWinds – Persistent Cross-Site Scripting

# Author: loneferret of Offensive Security

2012-10-08 loneferret webapps

Interspire Email Marketer – Cross-Site Scripting / HTML Injection / SQL Injection

source: https://www.securityfocus.com/bid/55829/info

2012-10-08 Ibrahim El-Sayed webapps

MyAuth3 – Blind SQL Injection

# Exploit Title: MyAuth3 Blind SQL Injection / Root Shell Access 0day exploit

2012-10-07 Marcio Almeida webapps

Blog Mod 0.1.9 – ‘index.php?month’ SQL Injection

2012-10-07 WhiteCollarGroup webapps

Open Realty – ‘select_users_lang’ Local File Inclusion

source: https://www.securityfocus.com/bid/55834/info

2012-10-06 L0n3ly-H34rT webapps

WordPress Plugin Shopp – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/55817/info

2012-10-05 T0x!c webapps

Novell Sentinel Log Manager 1.2.0.2 – Retention Policy

Novell Sentinel Log Manager ver.

2012-10-04 Piotr Chmylkowski webapps

phpMyBitTorrent 2.04 – Multiple Vulnerabilities

[waraxe-2012-SA#091] - Multiple Vulnerabilities in phpMyBitTorrent 2.04

2012-10-04 waraxe webapps

Template CMS 2.1.1 – Multiple Vulnerabilities

Advisory ID: HTB23115

2012-10-04 High-Tech Bridge SA webapps

phpMyChat Plus 1.94 RC1 – Multiple Vulnerabilities

############################################

2012-10-04 L0n3ly-H34rT webapps

Omnistar Mailer 7.2 – Multiple Vulnerabilities

Title:

2012-10-03 Vulnerability-Lab webapps

WordPress Plugin spider Calendar – Multiple Vulnerabilities

Exploit Title: Wordpress spider calendar Plugin Multiple Vulnerabilities

2012-10-03 D4NB4R webapps

phptax 0.8 – Remote Code Execution

-----------------------------------------------------

2012-10-02 Jean Pascal Pereira webapps

ZenPhoto – ‘admin-news-articles.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55755/info

2012-10-02 Scott Herbert webapps

Switchvox – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/55739/info

2012-10-02 Ibrahim El-Sayed webapps

Omnistar Mailer – Multiple SQL Injections / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/55760/info

2012-10-01 Vulnerability Laboratory webapps

WordPress Plugin Akismet – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55749/info

2012-10-01 Tapco Security webapps

WordPress Theme Archin 3.2 – Configuration Access

# Exploit Title: Archin WordPress Theme Unauthenticated Configuration Access

2012-10-01 bwall webapps

AlamFifa CMS – ‘user_name_cookie’ SQL Injection

source: https://www.securityfocus.com/bid/55746/info

2012-09-30 L0n3ly-H34rT webapps

Trend Micro Control Manager 5.5/6.0 AdHocQuery – (Authenticated) Blind SQL Injection

#!/usr/bin/env python

2012-09-27 otoy webapps

JAMF Casper Suite MDM – Cross-Site Request Forgery

CVE-2012-4051 - JAMF Casper Suite MDM CSRF Vulnerability

2012-09-27 Jacob Holcomb webapps

ViArt Shop Evaluation 4.1 – Multiple Remote File Inclusions

############################################

2012-09-26 L0n3ly-H34rT webapps

WordPress Plugin ABC Test – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55689/info

2012-09-26 Scott Herbert webapps

WordPress Plugin Token Manager – ‘tid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55664/info

2012-09-25 TheCyberNuxbie webapps

ViArt Shop Enterprise 4.1 – Arbitrary Command Execution

2012-09-25 LiquidWorm webapps

ZEN Load Balancer – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/55638/info

2012-09-24 Brendan Coles webapps

WordPress Plugin Sexy Add Template – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/55666/info

2012-09-22 the_cyber_nuxbie webapps

WordPress Core 3.4.2 – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/55660/info

2012-09-22 AkaStep webapps

YCommerce – Multiple SQL Injections

source: https://www.securityfocus.com/bid/55653/info

2012-09-21 Ricardo Almeida webapps

WordPress Plugin MF Gig Calendar – Cross-Site Scripting

source: https://www.securityfocus.com/bid/55622/info

2012-09-20 Chris Cooper webapps

Poweradmin – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55619/info

2012-09-20 Siavash webapps

Manhali 1.8 – Local File Inclusion

############################################

2012-09-20 L0n3ly-H34rT webapps

Thomson Wireless VoIP Cable Modem – Authentication Bypass

# Exploit Title: Thomson Wireless VoIP Cable Modem Auth Bypass

2012-09-20 Glafkos Charalambous webapps

torrenttrader 2.08 – Multiple Vulnerabilities

[waraxe-2012-SA#089] - Multiple Vulnerabilities in TorrentTrader 2.08

2012-09-19 waraxe webapps

SonicWALL email security 7.3.5 – Multiple Vulnerabilities

Title:

2012-09-19 Vulnerability-Lab webapps

Fortigate UTM WAF Appliance – Multiple Vulnerabilities

Title:

2012-09-19 Vulnerability-Lab webapps

WordPress Plugin wp-topbar 4.02 – Multiple Vulnerabilities

# Exploit Title: WP-TopBar 4.02 CSRF

2012-09-19 Blake Entrekin webapps

SpiceWorks 6.0.00993 – Multiple Script Injection Vulnerabilities

Spiceworks 6.0.00993 Multiple Script Injection Vulnerabilities

2012-09-19 LiquidWorm webapps

WordPress Core 3.4.2 – Multiple Path Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/55597/info

2012-09-18 AkaStep webapps

vBulletin 4.1.12 – ‘blog_plugin_useradmin.php’ SQL Injection

source: https://www.securityfocus.com/bid/55592/info

2012-09-18 Am!r webapps

AxisInternet VoIP Manager – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55589/info

2012-09-18 Benjamin Kunz Mejri webapps

TAGWORX.CMS – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/55586/info

2012-09-18 Crim3R webapps

minimal Gallery – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55577/info

2012-09-17 ayastar webapps

Netsweeper WebAdmin Portal – Multiple Vulnerabilities

# Exploit Title: Netsweeper WebAdmin Portal CSRF, Reflective XSS, and SQL Injection ("The later")\

2012-09-17 Jacob Holcomb webapps

Auxilium PetRatePro – Multiple Vulnerabilities

##########################################

2012-09-17 DaOne webapps

webERP 4.08.4 – ‘WorkOrderEntry.php’ SQL Injection

# Exploit Title: webERP

2012-09-17 modpr0be webapps

luxcal 2.7.0 – Multiple Vulnerabilities

#################################################

2012-09-17 L0n3ly-H34rT webapps

IFOBS – ‘regclientprint.jsp’ Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/55561/info

2012-09-15 MustLive webapps

Trend Micro Interscan Messaging Security Suite – Persistent Cross-Site Scripting / Cross-Site Request Forgery

# Exploit Title: Trend Micro InterScan Messaging Security Suite Stored XSS and CSRF

2012-09-14 modpr0be webapps