webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Posse Softball Director CMS – ‘team.php’ Blind SQL Injection

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-=--=-=--=-.

2012-01-04 Easy Laster webapps

Posse Softball Director CMS – SQL Injection

############################################################################

2012-01-04 H4ckCity Security Team webapps

Typo3 4.5 < 4.7 - Remote Code Execution / Local File Inclusion / Remote File Inclusion

# Exploit Title: Typo3 v4.5-4.7 - Remote Code Execution (RFI/LFI)

2012-01-04 MaXe webapps

OpenKM Document Management System 5.1.7 – Command Execution

########################################################################

2012-01-03 Cyrill Brunschwiler webapps

WordPress Plugin WHOIS 1.4.2 3 – ‘domain’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51244/info

2012-01-03 Atmon3r webapps

WordPress Plugin Comment Rating 2.9.20 – ‘path’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51241/info

2012-01-03 The Evil Thinker webapps

Tienda Virtual – ‘art_detalle.php’ SQL Injection

source: https://www.securityfocus.com/bid/51240/info

2012-01-03 Arturo Zamora webapps

FuseTalk Forums 3.2 – ‘windowed’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51227/info

2012-01-02 sonyy webapps

MyPHPDating 1.0 – SQL Injection

MyPHPDating 1.0 SQL Injection Vulnerability \

2012-01-02 ITTIHACK webapps

PHP-X-Links Script – SQL Injection

############################################################################

2012-01-02 H4ckCity Security Team webapps

WSN Links Script 2.3.4 – SQL Injection

############################################################################

2012-01-02 H4ckCity Security Team webapps

WordPress Plugin WP Live.php 1.2.1 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51220/info

2012-01-01 H4ckCity Security Team webapps

Siena CMS 1.242 – ‘err’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51218/info

2012-01-01 Net.Edit0r webapps

WordPress Plugin TheCartPress 1.6 – ‘OptionsPostsList.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51216/info

2011-12-31 6Scan webapps

WordPress Plugin The Welcomizer 1.3.9.4 – ‘twiz-index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51037/info

2011-12-31 Am!r webapps

Neturf eCommerce Shopping Cart – ‘searchFor’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55667/info

2011-12-30 farbodmahini webapps

Akiva WebBoard 8.x – SQL Injection

# Exploit Title: Akiva Webboard 8.x SQL Injection + Plaintext Passwords

2011-12-30 Alexander Fuchs webapps

Dede CMS – SQL Injection

# Dede Cms All Versions Sql Vulnerability Exploit

2011-12-30 CWH & Nafsh webapps

Winn Guestbook 2.4.8c – Persistent Cross-Site Scripting

# Exploit Title: Winn Guestbook v2.4.8c Stored XSS

2011-12-29 G13 webapps

DIY-CMS blog mod – SQL Injection

# Exploit Title: DIY-CMS blog mod SQL Injection

2011-12-29 snup webapps

Pligg CMS 1.1.4 – ‘SERVER[php_self]’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51274/info

2011-12-29 SiteWatch webapps

Pligg CMS 1.1.2 – ‘status’ SQL Injection

source: https://www.securityfocus.com/bid/51273/info

2011-12-29 SiteWatch webapps

Joomla! Component Module Simple File Upload 1.3 – Remote Code Execution

2011-12-28 gmda webapps

Free Image Hosting Script – Arbitrary File Upload

============================================

2011-12-26 ySecurity webapps

WordPress Plugin Mailing List – Arbitrary File Download

#Exploit Title: Mailing List plugin for Wordpress Arbitrary file download

2011-12-26 6Scan webapps

OpenEMR 4 – Multiple Vulnerabilities

OpenEMR 4 (Level @ Smash The Stack)

2011-12-25 Level webapps

Open Conference/Journal/Harvester Systems 2.3.x – Multiple Remote Code Execution Vulnerabilities

#!/usr/bin/python

2011-12-23 mr_me webapps

Tiki Wiki CMS Groupware 8.2 – ‘snarf_ajax.php’ Remote PHP Code Injection

-------------------------------------------------------------------------

2011-12-22 EgiX webapps

Plone and Zope – Remote Command Execution

# Exploit Title: Plone - Remote Command Execution

2011-12-21 Nick Miles webapps

SpamTitan 5.08 – Multiple Vulnerabilities

Title:

2011-12-21 Vulnerability-Lab webapps

Barracuda Control Center 620 – Multiple Web Vulnerabilities

Title:

2011-12-21 Vulnerability-Lab webapps

Infoproject Business Hero – Multiple Vulnerabilities

Infoproject Biznis Heroj (login.php) Authentication Bypass Vulnerability

2011-12-21 LiquidWorm webapps

epesi BIM 1.2 rev 8154 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51149/info

2011-12-21 High-Tech Bridge SA webapps

Cyberoam UTM 10 – ‘tableid’ SQL Injection

source: https://www.securityfocus.com/bid/51143/info

2011-12-20 Benjamin Kunz Mejri webapps

Joomla! Component com_caproductprices – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/51141/info

2011-12-20 CoBRa_21 webapps

PHPShop CMS 3.4 – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/51130/info

2011-12-20 High-Tech Bridge SA webapps

Tiki Wiki CMS Groupware 8.1 – ‘show_errors’ HTML Injection

source: https://www.securityfocus.com/bid/51128/info

2011-12-20 Stefan Schurtz webapps

Joomla! Component com_tsonymf – ‘idofitem’ SQL Injection

source: https://www.securityfocus.com/bid/51125/info

2011-12-20 CoBRa_21 webapps

PHP Booking Calendar 10e – ‘page_info_message’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51119/info

2011-12-19 G13 webapps

Joomla! Component com_dshop – SQL Injection

################################################################################################

2011-12-19 CoBRa_21 webapps

DotA OpenStats 1.3.9 – SQL Injection

=============

2011-12-19 HvM17 webapps

appRain CMF 0.1.5 – Multiple Web Vulnerabilities

Title:

2011-12-19 Vulnerability-Lab webapps

novell sentinel log manager 1.2.0.1 – Directory Traversal

# Exploit Title: Novell Sentinel Log Manager directory traversal

2011-12-18 Andrea Fabrizi webapps

Video Community Portal – ‘userID’ SQL Injection

source: https://www.securityfocus.com/bid/51108/info

2011-12-18 Lazmania61 webapps

Social Network Community 2 – ‘userID’ SQL Injection

source: https://www.securityfocus.com/bid/51107/info

2011-12-17 Lazmania61 webapps

Flirt-Projekt 4.8 – ‘rub’ SQL Injection

source: https://www.securityfocus.com/bid/51106/info

2011-12-17 Lazmania61 webapps

Fork CMS 3.1.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51045/info

2011-12-16 Avram Marius webapps

mPDF 5.3 – File Disclosure

# Exploit Title: mPDF = 2);

2011-12-16 ZadYree webapps

Capexweb 1.1 – SQL Injection

# Exploit Title: Capexweb Sql Vulnerable

2011-12-16 D1rt3 Dud3 webapps

Seotoaster – SQL Injection

#################################################################################

2011-12-16 Stefan Schurtz webapps