webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

NeoBill CMS 0.8 Alpha – Multiple Vulnerabilities

Title:

2012-09-14 Vulnerability-Lab webapps

ASTPP VoIP Billing (4cf207a) – Multiple Vulnerabilities

Title:

2012-09-14 Vulnerability-Lab webapps

Ezylog Photovoltaic Management Server – Multiple Vulnerabilities

Multiple vulnerabilities in Ezylog photovoltaic management server

2012-09-12 Roberto Paleari webapps

Knowledge Base Enterprise Edition 4.62.0 – SQL Injection

Exploit Author: Vulnerability-Lab

2012-09-12 Vulnerability-Lab webapps

Webify Photo Gallery – Arbitrary File Deletion

#########################################################################################

2012-09-12 JIKO webapps

Webify Business Directory – Arbitrary File Deletion

#########################################################################################

2012-09-12 JIKO webapps

Webify eDownloads Cart – Arbitrary File Deletion

#########################################################################################

2012-09-12 JIKO webapps

Subrion CMS 2.2.1 – Cross-Site Request Forgery (Add Admin)

Subrion CMS 2.2.1 CSRF Add Admin Exploit

2012-09-12 LiquidWorm webapps

Atlassian Confluence 3.4.x – Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/55509/info

2012-09-12 D. Niedermaier webapps

FBDj – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/55504/info

2012-09-11 TUNISIAN CYBER webapps

akcms 4.2.4 – Information Disclosure

############################################

2012-09-11 L0n3ly-H34rT webapps

Webify Blog – Arbitrary File Deletion

#########################################################################################

2012-09-11 JIKO webapps

SiteGo – Remote File Inclusion

############################################

2012-09-10 L0n3ly-H34rT webapps

Joomla! Component RokModule 1.1 – ‘module’ Blind SQL Injection

Titulo: Joomla Component RokModule Blind SQLi [module] Vulnerability

2012-09-10 Yarolinux webapps

VICIDIAL Call Center Suite 2.2.1-237 – Multiple Vulnerabilities

####################################################################################

2012-09-10 Ertebat Gostar Co webapps

DELTAScripts PHP Links – Multiple SQL Injections

source: https://www.securityfocus.com/bid/55478/info

2012-09-10 L0n3ly-H34rT webapps

VICIDIAL Call Center Suite – Multiple SQL Injections

source: https://www.securityfocus.com/bid/55476/info

2012-09-10 Ertebat Gostar Co webapps

Pinterestclones – Security Bypass / HTML Injection

source: https://www.securityfocus.com/bid/55469/info

2012-09-08 DaOne webapps

Pinterest Clone Script – Multiple Vulnerabilities

##########################################

2012-09-08 DaOne webapps

TestLink 1.9.3 – Cross-Site Request Forgery

Advisory ID: HTB23088

2012-09-07 High-Tech Bridge SA webapps

Sitecom Home Storage Center – Authentication Bypass

Security Advisory AA-006: Authorization Bypass Vulnerability in Password Reset Function Sitecom Home Storage Center (...

2012-09-07 Mattijs van Ommeren webapps

Clipster Video – Persistent Cross-Site Scripting

##########################################

2012-09-07 DaOne webapps

Cannonbolt Portfolio Manager 1.0 – Multiple Vulnerabilities

Cannonbolt Portfolio Manager v1.0 Stored XSS and SQL Injection Vulnerabilities

2012-09-07 LiquidWorm webapps

WordPress Theme Purity – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55605/info

2012-09-07 Matan Azugi webapps

OpenFiler 2.3 – Multiple Cross-Site Scripting / Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/55500/info

2012-09-06 Brendan Coles webapps

web@all – Local File Inclusion / Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/55426/info

2012-09-06 KedAns-Dz webapps

Extcalendar 2.0 – Multiple SQL Injections / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/55424/info

2012-09-05 Ashiyane Digital Security Team webapps

Flogr – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55418/info

2012-09-05 High-Tech Bridge webapps

Kayako Fusion – ‘download.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55417/info

2012-09-05 High-Tech Bridge webapps

Cm3 CMS – ‘search.asp’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55395/info

2012-09-05 Crim3R webapps

Ektron CMS 8.5.0 – Multiple Vulnerabilities

Sense of Security - Security Advisory - SOS-12-009

2012-09-05 Sense of Security webapps

ES Job Search Engine 3.0 – SQL Injection

Title:

2012-09-05 Vulnerability-Lab webapps

QNAP Turbo NAS TS-1279U-RP – Multiple Path Injections

# Exploit Title: QNAP Turbo NAS Multiple Path Injection

2012-09-05 Andrea Fabrizi webapps

MobileCartly 1.0 – Arbitrary File Creation (Metasploit)

##

2012-09-05 Metasploit webapps

Group Office Calendar – ‘/calendar/json.php’ SQL Injection

/-------------------------------------\

2012-09-04 Chris Cooper webapps

Support4Arabs Pages 2.0 – SQL Injection

############################################

2012-09-04 L0n3ly-H34rT webapps

Splunk 4.3.3 – Arbitrary File Read

# Exploit Title: Splunk

2012-09-04 Marcio Almeida webapps

jira 4.4.3 / greenhopper < 5.9.8 - Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

2012-09-04 Hoyt LLC Research webapps

PHPFox 3.0.1 – ‘ajax.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55405/info

2012-09-04 Crim3R webapps

Sciretech (Multiple Products) – Multiple SQL Injections

source: https://www.securityfocus.com/bid/55390/info

2012-09-04 AkaStep webapps

Sitemax Maestro – SQL Injection / Local File Inclusion

source: https://www.securityfocus.com/bid/55386/info

2012-09-03 AkaStep webapps

Sitecom Home Storage Center – Directory Traversal

Security Advisory AA-004: Directory Traversal Vulnerability in Sitecom Home Storage Center

2012-09-03 Mattijs van Ommeren webapps

Conceptronic Grab’n’Go Network Storage – Directory Traversal

Security Advisory AA-003: Directory Traversal Vulnerability in Conceptronic Grab’n’Go Network Storage

2012-09-03 Mattijs van Ommeren webapps

AV Arcade Free Edition – ‘add_rating.php?id’ Blind SQL Injection

##########################################

2012-09-02 DaOne webapps

Admidio 2.3.5 – Multiple Vulnerabilities

Advisory: Admidio 2.3.5 Multiple security vulnerabilities

2012-09-02 Stefan Schurtz webapps

Joomla! Component Spider Calendar – SQL Injection

Exploit Title: Joomla spider calendar lite Remote Exploit

2012-09-01 D4NB4R webapps

SugarCRM Community Edition 6.5.2 (Build 8410) – Multiple Vulnerabilities

################################################################################

2012-09-01 Brendan Coles webapps

OTRS Open Technology Real Services 3.1.8/3.1.9 – Cross-Site Scripting

#!/usr/bin/python

2012-08-31 Mike Eduard webapps

vBulletin Yet Another Awards System 4.0.2 – SQL Injection

# Exploit Title: vBulletin Yet Another Awards System 4.0.2 Time Based SQL Injection 0day

2012-08-31 Backsl@sh/Dan webapps

SugarCRM Community Edition – Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/55347/info

2012-08-31 Brendan Coles webapps