webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

OpenEMR 4.1 – ‘/contrib/acog/print_form.php?formname’ Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/51788/info

2012-02-01 High-Tech Bridge SA webapps

OpenEMR 4.1 – ‘/Interface/patient_file/encounter/load_form.php?formname’ Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/51788/info

2012-02-01 High-Tech Bridge SA webapps

OpenEMR 4.1 – ‘/Interface/patient_file/encounter/trend_form.php?formname’ Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/51788/info

2012-02-01 High-Tech Bridge SA webapps

4Images 1.7.10 – ‘/admin/index.php?redirect’ Arbitrary Site Redirect

source: https://www.securityfocus.com/bid/51774/info

2012-01-31 RandomStorm webapps

4Images 1.7.10 – ‘/admin/categories.php?cat_parent_id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51774/info

2012-01-31 RandomStorm webapps

4Images 1.7.10 – ‘/admin/categories.php?cat_parent_id’ SQL Injection

source: https://www.securityfocus.com/bid/51774/info

2012-01-31 RandomStorm webapps

Joomla! Component com_crhotels – ‘catid’ SQL Injection

source: https://www.securityfocus.com/bid/51728/info

2012-01-31 the_cyber_nuxbie webapps

Vastal I-Tech Agent Zone – ‘search.php’ Blind SQL Injection

Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability

2012-01-31 Cagri Tepebasili webapps

PragmaMX 1.2.10 – Persistent Cross-Site Scripting

# TITLE ... # Persistent XSS in PragmaMX 1.12.0 for logged in users #

2012-01-31 HauntIT webapps

Ez Album – Blind SQL Injection

#

2012-01-31 Red Security TEAM webapps

phpShowtime – Directory Traversal

#

2012-01-31 Red Security TEAM webapps

Snort Report 1.3.2 – SQL Injection

# Exploit Title: Snort Report

2012-01-31 a.kadir altan webapps

phux Download Manager – Blind SQL Injection

#

2012-01-30 Red Security TEAM webapps

Ajax Upload – Arbitrary File Upload

# Exploit Title: Ajax Upload Arbitrary File Upload

2012-01-30 Daniel Godoy webapps

Campaign Enterprise 11.0.421 – SQL Injection

########################################################################################

2012-01-30 Craig Freyman webapps

4Images 1.7.6-9 – Cross-Site Request Forgery / PHP Code Injection

#!/usr/bin/perl

2012-01-30 Or4nG.M4N webapps

HostBill App 2.3 – Remote Code Injection

=-=-=-=-=-=-=-=-=-=-=-=-=-=-{In The Name Of Allah, The Most Beneficent, The Most Merciful}-=-=-=-=-=-=-=-=-=-=-=-=-=-...

2012-01-30 Dr.DaShEr webapps

Joomla! Component com_bbs – Multiple SQL Injections

source: https://www.securityfocus.com/bid/51730/info

2012-01-30 the_cyber_nuxbie webapps

Joomla! Component com_propertylab – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/51729/info

2012-01-30 the_cyber_nuxbie webapps

Joomla! Component com_firmy – ‘Id’ SQL Injection

source: https://www.securityfocus.com/bid/51727/info

2012-01-30 the_cyber_nuxbie webapps

Joomla! Component com_cmotour – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/51779/info

2012-01-28 the_cyber_nuxbie webapps

Joomla! Component com_visa – Local File Inclusion / SQL Injection

source: https://www.securityfocus.com/bid/51726/info

2012-01-28 the_cyber_nuxbie webapps

vBSEO 3.6.0 – ‘proc_deutf()’ Remote PHP Code Injection (Metasploit)

require 'msf/core'

2012-01-27 EgiX webapps

Peel Shopping 2.8/ 2.9 – Cross-Site Scripting / SQL Injections

+-------------------------------------------------------------------------+

2012-01-26 Cyber-Crystal webapps

phpList 2.10.9 – Cross-Site Request Forgery / Cross-Site Scripting

+-------------------------------------------------------------------------+

2012-01-26 Cyber-Crystal webapps

VR GPub 4.0 – Cross-Site Request Forgery

+-------------------------------------------------------------------------+

2012-01-26 Cyber-Crystal webapps

xClick Cart 1.0.x – ‘shopping_url’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51699/info

2012-01-26 sonyy webapps

WordPress Plugin Slideshow Gallery 1.1.x – ‘border’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51678/info

2012-01-26 Bret Hawk webapps

Joomla! Component com_products – Multiple SQL Injections

source: https://www.securityfocus.com/bid/51674/info

2012-01-26 the_cyber_nuxbie webapps

Joomla! Component com_motor – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/51673/info

2012-01-26 the_cyber_nuxbie webapps

vBadvanced CMPS 3.2.2 – ‘vba_cmps_include_bottom.php’ Remote File Inclusion

source: https://www.securityfocus.com/bid/51672/info

2012-01-25 PacketiK webapps

DClassifieds 0.1 final – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/51671/info

2012-01-25 High-Tech Bridge SA webapps

OSClass 2.3.3 – ‘index.php?getParam()’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51662/info

2012-01-25 High-Tech Bridge SA webapps

OSClass 2.3.3 – ‘index.php?sCategory’ SQL Injection

source: https://www.securityfocus.com/bid/51662/info

2012-01-25 High-Tech Bridge SA webapps

WordPress Core 3.3.1 – Multiple Vulnerabilities

Trustwave's SpiderLabs Security Advisory TWSL2012-002:

2012-01-25 Trustwave's SpiderLabs webapps

stoneware webnetwork6 – Multiple Vulnerabilities

Stoneware WebNetwork6 Vulnerability Assessment

2012-01-24 Jacob Holcomb webapps

Joomla! Component JE Story Submit – ‘index.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/51657/info

2012-01-24 Robert Cooper webapps

Ultimate Locator – ‘radius’ SQL Injection

source: https://www.securityfocus.com/bid/51653/info

2012-01-24 Robert Cooper webapps

glFusion 1.x – SQL Injection

source: https://www.securityfocus.com/bid/51650/info

2012-01-24 KedAns-Dz webapps

WordPress Plugin YouSayToo auto-publishing 1.0 – ‘submit’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51649/info

2012-01-24 H4ckCity Security Team webapps

Joomla! Component com_xball – ‘team_id’ SQL Injection

source: https://www.securityfocus.com/bid/51618/info

2012-01-23 CoBRa_21 webapps

Joomla! Component com_br – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/51613/info

2012-01-23 the_cyber_nuxbie webapps

SpamTitan Application 5.08x – SQL Injection

Title:

2012-01-23 Vulnerability-Lab webapps

WordPress Plugin Kish Guest Posting 1.0 – Arbitrary File Upload

2012-01-23 EgiX webapps

MiniCMS 1.0/2.0 – PHP Code Injection

########################################################################

2012-01-22 Or4nG.M4N webapps

WordPress Plugin AllWebMenus < 1.1.9 Menu Plugin - Arbitrary File Upload

#Exploit Title: AllWebMenus WordPress Menu Plugin Arbitrary file upload

2012-01-22 6Scan webapps

ARYADAD – Multiple Vulnerabilities

#

2012-01-21 Red Security TEAM webapps

iSupport 1.x – Cross-Site Request Forgery / HTML Code Injection (Add Admin)

#!/usr/bin/perl

2012-01-21 Or4nG.M4N webapps

Nova CMS – Directory Traversal

#

2012-01-21 Red Security TEAM webapps

PHP iReport 1.0 – Remote Html Code Injection

#!/usr/bin/perl

2012-01-21 Or4nG.M4N webapps