webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Alienvault Open Source SIEM (OSSIM) 3.1 – Reflected Cross-Site Scripting / Blind SQL Injection

#!/usr/bin/python

2012-07-23 muts webapps

MySQL Squid Access Report 2.1.4 – HTML Injection

# Exploit Title: MySQL Squid Access Report 2.1.4 / HTML Injection#

2012-07-23 Daniel Godoy webapps

Symantec Web Gateway 5.0.3.18 – Blind SQL Injection Backdoor via MySQL Triggers

######################################################################################

2012-07-23 muts webapps

Symantec Web Gateway 5.0.2 – ‘blocked.php?id’ Blind SQL Injection

#!/usr/bin/python

2012-07-23 muts webapps

Atmail WebAdmin and Webmail Control Panel – SQL Root Password Disclosure

######################################################################################

2012-07-23 Ciph3r webapps

EGallery – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2012-07-23 Metasploit webapps

Dell SonicWALL Scrutinizer 9.0.1 – ‘statusFilter.php?q’ SQL Injection

#!/usr/bin/python

2012-07-22 muts webapps

ipswitch whatsup gold 15.02 – Persistent Cross-Site Scripting / Blind SQL Injection / Remote Code Execution

######################################################################################

2012-07-22 muts webapps

SolarWinds Orion Network Performance Monitor 10.2.2 – Multiple Vulnerabilities

######################################################################################

2012-07-21 muts webapps

X-Cart Gold 4.5 – ‘products_map.php?symb’ Cross-Site Scripting

######################################################################################

2012-07-21 muts webapps

WordPress Plugin chenpress – Arbitrary File Upload

source: https://www.securityfocus.com/bid/54635/info

2012-07-21 Am!r webapps

Maian Survey – ‘/index.php’ URI redirection / Local File Inclusion

source: https://www.securityfocus.com/bid/54613/info

2012-07-20 PuN!Sh3r webapps

iBoutique 4.0 – ‘key’ SQL Injection

##############################################################################

2012-07-20 SecPod Research webapps

PHP-Nuke module (SPChat) – SQL Injection

## Owner : Pr0T3cT10n

2012-07-20 Yakir Wizman webapps

WebKit Cross-Site Scripting Filter – ‘Cross-Site ScriptingAuditor.cpp’ Security Bypass

source: https://www.securityfocus.com/bid/56570/info

2012-07-19 Tushar Dalvi webapps

CodeIgniter 2.1 – ‘xss_clean()’ Filter Security Bypass

source: https://www.securityfocus.com/bid/54620/info

2012-07-19 Krzysztof Kotowicz webapps

Joomla! Component com_hello – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/54611/info

2012-07-19 AJAX Security Team webapps

Nwahy Articles 2.2 – Cross-Site Request Forgery (Add Admin)

##########################################

2012-07-18 DaOne webapps

Forum Oxalis 0.1.2 – SQL Injection

#################################################

2012-07-17 Jean Pascal Pereira webapps

AVA VoIP – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/54591/info

2012-07-17 Ibrahim El-Sayed webapps

EmbryoCore CMS 1.03 – ‘loadcss.php’ Multiple Directory Traversal Vulnerabilities

source: https://www.securityfocus.com/bid/54470/info

2012-07-16 Sammy FORGIT webapps

Rama Zeiten CMS – ‘download.php’ Remote File Disclosure

source: https://www.securityfocus.com/bid/54467/info

2012-07-16 Sammy FORGIT webapps

web@all – ‘name’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54466/info

2012-07-16 Sammy FORGIT webapps

WordPress Plugin Post Recommendations – ‘abspath’ Remote File Inclusion

source: https://www.securityfocus.com/bid/54459/info

2012-07-16 Sammy FORGIT webapps

Simple Machines 2.0.2 – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/54456/info

2012-07-16 Benjamin Kunz Mejri webapps

Event Calender PHP – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/54455/info

2012-07-16 snup webapps

PBBoard CMS 2.1.4 – Multiple Vulnerabilities

Title:

2012-07-16 Vulnerability-Lab webapps

CakePHP 2.x < 2.2.0-RC2 - XML External Entity Injection

# Exploit title: CakePHP XXE injection

2012-07-16 Pawel Wylecial webapps

VamCart CMS 0.9 – Multiple Vulnerabilities

Title:

2012-07-16 Vulnerability-Lab webapps

Vivotek Cameras – Sensitive Information Disclosure

Exploit Title: Vivotek Full Data Source CONFIG

2012-07-16 GothicX webapps

WordPress Theme Diary/Notebook Site5 – Email Spoofing

#!/usr/bin/perl

2012-07-16 bwall webapps

Elite Bulletin Board – Multiple SQL Injections

source: https://www.securityfocus.com/bid/54452/info

2012-07-15 ToXiC webapps

Joomla! Component com_osproperty 2.0.2 – Unrestricted Arbitrary File Upload

_______________________________________________________________________________________

2012-07-14 D4NB4R webapps

Shopware 3.5 – SQL Injection

#!/usr/bin/php

2012-07-14 Kataklysmos webapps

Magento eCommerce – Local File Disclosure

SEC Consult Vulnerability Lab Security Advisory < 20120712-0 >

2012-07-13 SEC Consult webapps

Joomla! Component com_ksadvertiser – Remote File / Bypass Upload

############################################################################

2012-07-13 D4NB4R webapps

WordPress Plugin Resume Submissions & Job Postings 2.5.1 – Unrestricted Arbitrary File Upload

# Exploit Title: WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload

2012-07-13 Chris Kellum webapps

webpagetest 2.6 – Multiple Vulnerabilities

:::::::-. ... ::::::. :::.

2012-07-13 dun webapps

WordPress Plugin Generic – Arbitrary File Upload

source: https://www.securityfocus.com/bid/54440/info

2012-07-13 KedAns-Dz webapps

Phonalisa – Multiple HTML Injection / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54401/info

2012-07-12 Benjamin Kunz Mejri webapps

Reserve Logic 1.2 Booking CMS – Multiple Vulnerabilities

Title:

2012-07-12 Vulnerability-Lab webapps

TP-Link Gateway 3.12.4 – Multiple Vulnerabilities

Title:

2012-07-12 Vulnerability-Lab webapps

Lc Flickr Carousel 1.0 – Local File Disclosure

# Exploit Title: Lc Flickr Carousel V1.0 => Local File Disclosure Vulnerability

2012-07-12 GoLd_M webapps

eCan 0.1 – Local File Disclosure

# Exploit Title: eCan v0.1 => Local File Disclosure Vulnerability

2012-07-12 GoLd_M webapps

House Style 0.1.2 – ‘readfile()’ Local File Disclosure

# Exploit Title: House Style 0.1.2 => readfile() Local File Disclosure Vulnerability

2012-07-12 GoLd_M webapps

Hastymail 2.1.1 RC1 – Command Injection (Metasploit)

##

2012-07-12 Metasploit webapps

Kajona – ‘getAllPassedParams()’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54391/info

2012-07-11 High-Tech Bridge SA webapps

WordPress Plugin WP-Predict 1.0 – Blind SQL Injection

# Exploit Title: WordPress WP-Predict v1.0 Blind SQL Injection

2012-07-10 Chris Kellum webapps

Umbraco CMS – Remote Command Execution (Metasploit)

##

2012-07-09 Metasploit webapps

Basilic 1.5.14 – ‘diff.php’ Arbitrary Command Execution (Metasploit)

##

2012-07-09 Metasploit webapps