webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Banana Dance – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/55153/info

2012-08-22 Canberk BOLAT webapps

OrderSys 1.6.4 – Multiple SQL Injections / Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55147/info

2012-08-22 Canberk BOLAT webapps

Jara 1.6 – Multiple SQL Injections / Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55145/info

2012-08-22 Canberk BOLAT webapps

XODA 0.4.5 – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2012-08-22 Metasploit webapps

E-Mail Security Virtual Appliance – ‘learn-msg.cgi’ Command Injection (Metasploit)

##

2012-08-22 Metasploit webapps

VamCart 0.9 – Cross-Site Request Forgery

# Exploit Title: VamCart v0.9 CSRF Vulnerability

2012-08-22 DaOne webapps

OpenDocMan 1.2.6.1 – Cross-Site Request Forgery (Password Change)

# Exploit Title: OpenDocMan Password Change CSRF

2012-08-22 Shai rod webapps

Clipbucket 2.5 – Blind SQL Injection

# Author: loneferret of Offensive Security

2012-08-21 loneferret webapps

Symantec Web Gateway 5.0.3.18 – Arbitrary Password Change

#!/usr/bin/python

2012-08-21 Kc57 webapps

Symantec Web Gateway 5.0.3.18 – Arbitrary Password Change (Metasploit)

##

2012-08-21 Kc57 webapps

Clipbucket 2.5 – Directory Traversal

# Author: loneferret of Offensive Security

2012-08-21 loneferret webapps

XODA Document Management System 0.4.5 – Cross-Site Scripting / Arbitrary File Upload

# Exploit Title: XODA Document Management System Stored XSS & Arbitrary File Upload Vulnerability.

2012-08-21 Shai rod webapps

JPM Article Blog Script 6 – ‘tid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55112/info

2012-08-21 Mr.0c3aN webapps

IOServer 1.0.18.0 – Directory Traversal

=====================================================================

2012-08-20 hinge webapps

uebimiau webmail 2.7.2 – Persistent Cross-Site Scripting

#!/usr/bin/python

2012-08-20 Shai rod webapps

YourArcadeScript 2.4 – ‘index.php?id’ SQL Injection

##########################################

2012-08-20 DaOne webapps

Hivemail Webmail – Multiple Persistent Cross-Site Scripting Vulnerabilities

#!/usr/bin/python

2012-08-20 Shai rod webapps

PG Portal Pro – Cross-Site Request Forgery

###########################################################

2012-08-20 Noxious webapps

GWebmail 0.7.3 – Cross-Site Scripting / Local File Inclusion / Remote Code Execution

#!/usr/bin/python

2012-08-20 Shai rod webapps

hupa webmail 0.0.2 – Persistent Cross-Site Scripting

#!/usr/bin/python

2012-08-20 Shai rod webapps

Alpha Networks ADSL2/2+ Wireless Router ASL-26555 – Password Disclosure

- Title:

2012-08-20 Alberto Ortega webapps

Clipbucket 2.5 – Cross-Site Request Forgery

##########################################

2012-08-20 DaOne webapps

T-dah Webmail – Cross-Site Request Forgery / Persistent Cross-Site Scripting

# -----------------------------------------------------------

2012-08-20 Yakir Wizman webapps

ManageEngine OpUtils 6.0 – Persistent Cross-Site Scripting

# Author: loneferret of Offensive Security

2012-08-18 loneferret webapps

IlohaMail Webmail – Persistent Cross-Site Scripting

#!/usr/bin/python

2012-08-18 Shai rod webapps

SaltOS – ‘download.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55117/info

2012-08-18 Stefan Schurtz webapps

LISTSERV 16 – ‘SHOWTPL’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55082/info

2012-08-17 Jose Carlos de Arriba webapps

Elastix 2.2.0 – ‘graph.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/55078/info

2012-08-17 cheki webapps

Jaow CMS 2.3 – Blind SQL Injection

# Author: loneferret of Offensive Security

2012-08-17 loneferret webapps

webid 1.0.4 – Multiple Vulnerabilities

:::::::-. ... ::::::. :::.

2012-08-17 dun webapps

T-dah Webmail Client – Multiple Persistent Cross-Site Scripting Vulnerabilities

#!/usr/bin/python

2012-08-17 Shai rod webapps

hastymail2 webmail 1.1 rc2 – Persistent Cross-Site Scripting

#!/usr/bin/python

2012-08-17 Shai rod webapps

Inferno vBShout 2.5.2 – SQL Injection

====================================================================

2012-08-17 Luit webapps

Social Engine 4.2.5 – Multiple Vulnerabilities

Title:

2012-08-17 Vulnerability-Lab webapps

ManageEngine OpStor 7.4 – Multiple Vulnerabilities

Title:

2012-08-17 Vulnerability-Lab webapps

Jaow CMS 2.3 – Cross-Site Request Forgery

##########################################

2012-08-17 DaOne webapps

ProQuiz 2.0.2 – Cross-Site Request Forgery

##########################################

2012-08-16 DaOne webapps

Roundcube Webmail 0.8.0 – Persistent Cross-Site Scripting

#!/usr/bin/python

2012-08-16 Shai rod webapps

sphpforum 0.4 – Multiple Vulnerabilities

# Author: loneferret of Offensive Security

2012-08-15 loneferret webapps

Cyclope Employee Surveillance Solution 6.0 6.1.0 6.2.0 – Multiple Vulnerabilities

# Author: loneferret of Offensive Security

2012-08-15 loneferret webapps

xt:Commerce 3.04 SP2.1 – Blind SQL Injection

+---------------------------------+

2012-08-15 stoffline.com webapps

MobileCartly 1.0 – Arbitrary File Upload

# Exploit Title: MobileCartly 1.0 Remote File Upload Vulnerability

2012-08-15 ICheer_No0M webapps

MaxForum 1.0.0 – Local File Inclusion

+---------------------------------------+

2012-08-15 ahwak2000 webapps

IBM Websphere MQ File Transfer Edition Web Gateway – Insufficient Access Control

WebSphereMQ File Transfer

2012-08-13 Nir Valtman webapps

IBM Websphere MQ File Transfer Edition Web Gateway – Cross-Site Request Forgery

on existing userspace and add MQMD (MQ Message Descriptor) user IDs. All of

2012-08-13 Nir Valtman webapps

Hotel Booking Portal 0.1 – Multiple Vulnerabilities

# -----------------------------------------------------------

2012-08-13 Yakir Wizman webapps

WordPress Plugin RSVPMaker 2.5.4 – Persistent Cross-Site Scripting

# Exploit Title: WordPress RSVPMaker v2.5.4 Persistent XSS

2012-08-13 Chris Kellum webapps

Total Shop UK eCommerce CodeIgniter – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54985/info

2012-08-13 Chris Cooper webapps

FileContral – Local File Inclusion / Local File Disclosure

source: https://www.securityfocus.com/bid/55891/info

2012-08-11 Ashiyane Digital Security Team webapps

MindTouch DekiWiki – Multiple Local/Remote File Inclusions

source: https://www.securityfocus.com/bid/54991/info

2012-08-11 L0n3ly-H34rT webapps