webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Lead Capture – ‘login.php’ Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/51785/info

2012-01-21 HashoR webapps

Raven 1.0 – ‘connector.asp’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/51631/info

2012-01-21 HELLBOY webapps

Joomla! Component com_kp – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/51623/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component com_bulkenquery – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/51622/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component com_some – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/51621/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component com_car – Multiple SQL Injections

source: https://www.securityfocus.com/bid/51620/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component com_boss – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/51619/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component Vik Real Estate 1.0 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/51617/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component Full – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/51616/info

2012-01-21 the_cyber_nuxbie webapps

Tribiq CMS – ‘index.php’ SQL Injection

source: https://www.securityfocus.com/bid/51614/info

2012-01-21 Skote Vahshat webapps

Acidcat ASP CMS 3.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51608/info

2012-01-21 Avram Marius webapps

Syneto Unified Threat Management 1.3.3/1.4.2 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/51597/info

2012-01-20 Alexander Fuchs webapps

Snitz Forums 2000 – ‘TOPIC_ID’ SQL Injection

source: https://www.securityfocus.com/bid/51596/info

2012-01-20 snup webapps

WhatsApp – Remote Change Status

#!/bin/bash

2012-01-20 emgent webapps

EasyPage – SQL Injection

#

2012-01-20 Red Security TEAM webapps

ICTimeAttendance – Authentication Bypass

) ) ) ( ( ( ( ( ) )

2012-01-20 v3n0m webapps

appRain CMF 0.1.5 – ‘Uploadify.php’ Unrestricted Arbitrary File Upload

2012-01-19 EgiX webapps

WordPress Plugin ucan post 1.0.09 – Persistent Cross-Site Scripting

# Exploit Title: Wordpress uCan Post plugin

2012-01-19 Gianluca Brindisi webapps

Drupal Module CKEditor 3.0 < 3.6.2 - Persistent EventHandler Cross-Site Scripting

# Exploit Title: Drupal CKEditor 3.0 - 3.6.2 - Persistent EventHandler XSS

2012-01-19 MaXe webapps

Vastal EzineShop – ‘view_mags.php’ SQL Injection

source: https://www.securityfocus.com/bid/51571/info

2012-01-19 Lazmania61 webapps

PostNuke pnAddressbook Module – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/51566/info

2012-01-19 Robert Cooper webapps

OneOrZero AIMS – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51549/info

2012-01-18 High-Tech Bridge SA webapps

Freelance Zone – ‘show_code.php’ SQL Injection

source: https://www.securityfocus.com/bid/51533/info

2012-01-18 Lazmania61 webapps

MMORPG Zone – ‘view_news.php’ SQL Injection

source: https://www.securityfocus.com/bid/51532/info

2012-01-18 Lazmania61 webapps

Toner Cart – ‘show_series_ink.php’ SQL Injection

source: https://www.securityfocus.com/bid/51530/info

2012-01-18 Lazmania61 webapps

DZCP (deV!L`z Clanportal) 1.5.5 Moviebase Addon – Blind SQL Injection

========================================================================================

2012-01-18 Easy Laster webapps

DZCP (deV!L`z Clanportal) Gamebase Addon – SQL Injection

========================================================================================

2012-01-18 Easy Laster webapps

PHPBridges Blog System – ‘members.php’ SQL Injection

# Exploit Title: PhpBridges Blog System SQL Injection Vulnerability

2012-01-18 3spi0n webapps

pGB 2.12 – ‘kommentar.php’ SQL Injection

# Exploit Title: pGB 2.12 SQL Injection Vulnerability

2012-01-18 3spi0n webapps

Joomla! Component com_discussions – SQL Injection

#

2012-01-17 Red Security TEAM webapps

PHPDomainRegister 0.4a-RC2-dev – Multiple Vulnerabilities

Title = PHPDomainRegister v0.4a-RC2-dev => [SQL Auth][SQL Inject][XSS]

2012-01-16 Or4nG.M4N webapps

Annuaire PHP – ‘sites_inscription.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51434/info

2012-01-16 Atmon3r webapps

Giveaway Manager – ‘members.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51431/info

2012-01-16 Am!r webapps

phpVideoPro 0.8.x/0.9.7 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51428/info

2012-01-16 Stefan Schurtz webapps

Beehive Forum 101 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51424/info

2012-01-16 Stefan Schurtz webapps

ATutor 2.0.3 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51423/info

2012-01-16 Stefan Schurtz webapps

BoltWire 3.4.16 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51422/info

2012-01-16 Stefan Schurtz webapps

PHP Membership Site Manager Script 2.1 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51416/info

2012-01-16 Atmon3r webapps

PHP Ringtone Website – ‘ringtones.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51418/info

2012-01-15 Atmon3r webapps

Cloupia End-to-end FlexPod Management – Directory Traversal

Advisory ID: KUSTODIAN-2011-011

2012-01-15 Chris Rock webapps

phpMyAdmin 3.3.x/3.4.x – Local File Inclusion via XML External Entity Injection (Metasploit)

# Exploit Title: poc-phpmyadmin-local-file-inclusion-via-xxe-injection

2012-01-14 Marco Batista webapps

WordPress Plugin Evarisk – ‘uploadPhotoApres.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/53994/info

2012-01-14 Sammy FORGIT webapps

Contus Job Portal – ‘Category’ SQL Injection

source: https://www.securityfocus.com/bid/51404/info

2012-01-13 Lazmania61 webapps

MailEnable Webmail – Cross-Site Scripting

ME020567: MailEnable webmail cross-site scripting vulnerability (CWE-79)

2012-01-13 Sajjad Pourali webapps

Pragyan CMS 2.6.1 – Arbitrary File Upload

==========================================

2012-01-13 Dr.KroOoZ webapps

Tine 2.0 – Maischa Multiple Cross-Site Scripting Vulnerabilities

Title:

2012-01-13 Vulnerability-Lab webapps

WordPress Plugin Count Per Day – Multiple Vulnerabilities

#Exploit Title: Count-per-day Wordpress plugin Arbitrary file download and XSS

2012-01-12 6Scan webapps

WordPress Plugin wp-autoyoutube – Blind SQL Injection

######################################################

2012-01-12 longrifle0x webapps

Advanced Image Hosting Script – SQL Injection

# Exploit Title: AIHS (Advanced Image Hosting Script) SQL Injection Vulnerability

2012-01-12 Robert Cooper webapps

Joomla! Component com_contushdvideoshare 1.3 – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/51411/info

2012-01-12 Lazmania61 webapps