webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Wolfcms 0.75 – Cross-Site Request Forgery / Cross-Site Scripting
+--------------------------------------------------------------------------------------------------------------------...
Sitecom WLM-2501 – Multiple Cross-Site Request Forgery Vulnerabilities
+--------------------------------------------------------------------------------------------------------------------...
FreePBX 2.10.0 / Elastix 2.2.0 – Remote Code Execution
#!/usr/bin/python
Apache Struts 2.0 – ‘XSLTResult.java’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/52702/info
FreePBX 2.9.0/2.10.0 – Multiple Vulnerabilities
Product: FreePBX
phpMoneyBooks 1.0.2 – Local File Inclusion
'phpMoneyBooks' Local File Inclusion (CVE-2012-1669)
PHP Grade Book 1.9.4 – SQL Database Export
'PHP Grade Book' Unauthenticated SQL Database Export (CVE-2012-1670)
Cyberoam UTM – Multiple Vulnerabilities
SECURITY ADVISORY: cyberoam-utm-command-executaion
vBShout – Persistent Cross-Site Scripting
# Exploit Title: vBShout persistent XSS 0day
phpList 2.10.17 – SQL Injection / Cross-Site Scripting
phpList 2.10.17 Remote SQL Injection and XSS Vulnerability
D-Link DIR-605 – Cross-Site Request Forgery
# Exploit Title: D-Link DIR-605 CSRF Vulnerability
Minify 2.1.x – ‘g’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52672/info
Open Journal Systems (OJS) 2.3.6 – ‘rfiles.php’ Traversal Arbitrary File Manipulation
source: https://www.securityfocus.com/bid/52666/info
Open Journal Systems (OJS) 2.3.6 – Multiple Script Arbitrary File Upload
source: https://www.securityfocus.com/bid/52666/info
Open Journal Systems (OJS) 2.3.6 – ‘/lib/pkp/classes/core/String.inc.php?String::stripUnsafeHtml()’ Method Cross-Site Scripting
source: https://www.securityfocus.com/bid/52666/info
Open Journal Systems (OJS) 2.3.6 – ‘index.php?authors[][url]’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52666/info
CMSimple 3.3 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52661/info
WebGlimpse 2.14.1/2.18.8 – ‘webglimpse.cgi’ Remote Command Injection
source: https://www.securityfocus.com/bid/52627/info
GNUBoard 4.34.20 – ‘download.php’ HTML Injection
source: https://www.securityfocus.com/bid/52622/info
OneFileCMS – Failure to Restrict URL Access
# Exploit Title: OneFileCMS - Failure to Restrict URL Access
ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet – Directory Traversal
ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet Unauthenticated
Joomla! 2.5.0 < 2.5.1 - Blind SQL Injection
#!/usr/bin/perl
ClassifiedsGeek.com Vacation Packages – ‘listing_search’ SQL Injection
source: https://www.securityfocus.com/bid/52637/info
WebGlimpse 2.x – ‘wgarcmin.cgi’ Full Path Disclosure
source: https://www.securityfocus.com/bid/52646/info
JavaBB 0.99 – ‘userId’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/52545/info
Pre Printing Press – ‘product_desc.php?pid’ SQL Injection
========================================================================================
PRE PRINTING STUDIO – SQL Injection
# Exploit Title: PRE PRINTING STUDIO Sql Injection
ASP Classifieds – SQL Injection
# Exploit Title: ASP Classifieds Sql Injection
FlexCMS 3.2.1 – Multiple Cross-Site Request Forgery Vulnerabilities
+--------------------------------------------------------------------------------------------------------------------...
FlexCMS 3.2.1 – Persistent Cross-Site Scripting
#Persistent XSS in FLEXCMS 3.2.1
OneFileCMS 1.1.5 – Local File Inclusion
# Exploit Title: OneFileCMS v.1.1.5 Local File Inclusion Vulnerability
JPM Article Script 6 – ‘page2’ SQL Injection
source: https://www.securityfocus.com/bid/52528/info
sockso 1.5 – Directory Traversal
#######################################################################
TVersity 1.9.7 – Arbitrary File Download
#######################################################################
asaanCart – Cross-Site Scripting / Local File Inclusion
______________________________________________________________________________________
Encaps PHP Gallery – SQL Injection
# Exploit Title: Encaps PHP Gallery SQL Injection
Sitecom WLM-2501 – Cross-Site Request Forgery
+--------------------------------------------------------------------------------------------------------------------...
Max Guestbook 1.0 – Multiple Vulnerabilities
# Exploit Title: Maxs Guestbook
Simple Posting System – Multiple Vulnerabilities
# Exploit Title: Simple Posting System [Multple]
ModX 2.2.0 – Multiple Vulnerabilities
# Exploit Title: Modx 2.2.0 LFI and Full Path Disclosure
Max’s PHP Photo Album 1.0 – ‘id’ Local File Inclusion
source: https://www.securityfocus.com/bid/52474/info
Max’s Guestbook 1.0 – Multiple Remote Vulnerabilities
source: https://www.securityfocus.com/bid/52471/info
Omnistar Live – Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/52438/info
4Images Image Gallery Management System – Cross-Site Request Forgery
########################################################################################################
Cycade Gallery – SQL Injection
# Exploit Title: Cycade Gallery SQL Injection Exploit
PBLang Bulletin Board System – Local File Inclusion
||\\ || || || |-\\ //-| ____ ________ __________
Acal Calendar 2.2.6 – Cross-Site Request Forgery
# Exploit Title: [Acal calendar 2.2.6 CSRF Vulnerability]