webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Websense 7.6 Products – ‘favorites.exe’ Authentication Bypass

source: https://www.securityfocus.com/bid/51087/info

2011-12-15 Ben Williams webapps

Websense 7.6 Triton – ‘ws_irpt.exe’ Remote Command Execution

source: https://www.securityfocus.com/bid/51086/info

2011-12-15 Ben Williams webapps

Websense 7.6 – Triton Report Management Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/51085/info

2011-12-15 Ben Williams webapps

Owl Intranet Engine 1.00 – ‘userid’ Authentication Bypass

source: https://www.securityfocus.com/bid/51076/info

2011-12-15 RedTeam Pentesting GmbH webapps

BrowserCRM 5.100.1 – ‘login[]’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51060/info

2011-12-14 High-Tech Bridge SA webapps

BrowserCRM 5.100.1 – ‘clients.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51060/info

2011-12-14 High-Tech Bridge SA webapps

BrowserCRM 5.100.1 – ‘framed’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51060/info

2011-12-14 High-Tech Bridge SA webapps

BrowserCRM 5.100.1 – URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/51060/info

2011-12-14 High-Tech Bridge SA webapps

BrowserCRM 5.100.1 – ‘contact_id’ SQL Injection

source: https://www.securityfocus.com/bid/51060/info

2011-12-14 High-Tech Bridge SA webapps

BrowserCRM 5.100.1 – ‘parent_id’ SQL Injection

source: https://www.securityfocus.com/bid/51060/info

2011-12-14 High-Tech Bridge SA webapps

Pulse Pro 1.7.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51056/info

2011-12-14 Avram Marius webapps

PmWiki 2.2.34 – ‘pagelist’ Remote PHP Code Injection (2) (Metasploit)

##

2011-12-14 Metasploit webapps

Traq 2.3 – Authentication Bypass / Remote Code Execution (Metasploit)

##

2011-12-13 Metasploit webapps

WordPress Plugin flash-album-gallery – ‘flagshow.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51031/info

2011-12-13 Am!r webapps

WordPress Plugin GRAND FlAGallery 1.57 – ‘flagshow.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51012/info

2011-12-12 Am!r webapps

Pixie 1.04 – Blog Post Cross-Site Request Forgery

# Exploit Title: Pixie v1.04 blog post CSRF

2011-12-11 hackme webapps

Xoops 2.5.4 – Blind SQL Injection

------------------------------------------

2011-12-11 blkhtc0rp webapps

FCMS CMS 2.7.2 – Multiple Cross-Site Request Forgery Vulnerabilities

FCMS_2.7.2 cms and earlier multiple CSRF Vulnerability

2011-12-11 Ahmed Elhady Mohamed webapps

WordPress Plugin UPM Polls 1.0.4 – Blind SQL Injection

# Exploit Title: BLIND SQL injection UPM-POLLS wordpress plugin 1.0.4

2011-12-11 Saif webapps

Family CMS 2.7.2 – Multiple Persistent Cross-Site Scripting Vulnerabilities

FCMS_2.7.2 cms and earlier multiple stored XSS Vulnerability

2011-12-10 Ahmed Elhady Mohamed webapps

Docebo Lms 4.0.4 – ‘Messages’ Remote Code Execution

2011-12-09 mr_me webapps

SePortal 2.5 – SQL Injection (1)

############################################################################

2011-12-09 Don webapps

Pet Listing – ‘preview.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50996/info

2011-12-09 Mr.PaPaRoSSe webapps

Joomla! Component com_qcontacts 1.0.6 – SQL Injection

############################################################################

2011-12-08 Don webapps

SantriaCMS – SQL Injection

# I Think, I can, But i'm just loser

2011-12-08 Troy webapps

SMF 2.0.1 – SQL Injection / Privilege Escalation

#!/usr/bin/python

2011-12-07 The:Paradox webapps

phpBB MyPage Plugin – SQL Injection

====================================================

2011-12-07 CrazyMouse webapps

SourceBans 1.4.8 – SQL Injection / Local File Inclusion Injection

# Exploit Title: SourceBans

2011-12-07 Havok webapps

Traq 2.3 – Authentication Bypass / Remote Code Execution

2011-12-07 EgiX webapps

PHP City Portal Script Software – SQL Injection

############################################################################

2011-12-07 Don webapps

Family Connections CMS 2.7.1 – ‘less.php’ Remote Command Execution (Metasploit)

##

2011-12-07 Metasploit webapps

Alstrasoft EPay Enterprise 4.0 – Blind SQL Injection

############################################################################

2011-12-06 Don webapps

Simple Machines Forum (SMF) 1.1.15 – ‘fckeditor’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/50925/info

2011-12-06 HELLBOY webapps

WordPress Plugin Pretty Link 1.5.2 – ‘pretty-bar.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50921/info

2011-12-06 Am!r webapps

Elxis CMS 2009 – ‘administrator/index.php’ URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/50910/info

2011-12-05 Ewerson Guimaraes webapps

Elxis CMS 2009 – ‘index.php?task’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50910/info

2011-12-05 Ewerson Guimaraes webapps

Meditate Web Content Editor ‘username_input’ – SQL Injection

Advisory: Meditate Web Content Editor 'username_input' SQL-Injection vulnerability

2011-12-05 Stefan Schurtz webapps

Family Connections CMS 2.5.0/2.7.1 – ‘less.php’ Remote Command Execution

2011-12-04 mr_me webapps

WSN Classifieds 6.2.12/6.2.18 – Multiple Vulnerabilities

################################################################################################

2011-12-02 d3v1l webapps

Joomla! Component com_jobprofile – SQL Injection

[~] Joomla Component Jobprofile (com_jobprofile) SQL Injection Vulnerability

2011-12-02 kaMtiEz webapps

Muster Render Farm Management System – Arbitrary File Download

#Name: Muster Render Farm Management System Arbitrary File Download

2011-12-01 Nick Freeman webapps

Hero 3.69 – ‘month’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50878/info

2011-12-01 Gjoko Krstic webapps

AtMail 1.04 – ‘func’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50877/info

2011-12-01 DognÃ¦dis webapps

SugarCRM Community Edition 6.3.0RC1 – ‘index.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/50870/info

2011-11-30 High-Tech Bridge SA webapps

WordPress Plugin flash-album-gallery – ‘facebook.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50861/info

2011-11-30 Am!r webapps

WordPress Plugin 1-jquery-photo-gallery-Slideshow-flash 1.01 – Cross-Site Scripting

source: https://www.securityfocus.com/bid/50860/info

2011-11-30 Am!r webapps

OrangeHRM 2.6.11 – ‘/lib/controllers/CentralController.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/50857/info

2011-11-30 High-Tech Bridge SA webapps

OrangeHRM 2.6.11 – ‘lib/controllers/CentralController.php’ URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/50857/info

2011-11-30 High-Tech Bridge SA webapps

OrangeHRM 2.6.11 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50857/info

2011-11-30 High-Tech Bridge SA webapps

WikkaWiki 1.3.2 – Multiple Vulnerabilities

----------------------------------------------------

2011-11-30 EgiX webapps