webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

WordPress Plugin jetpack – ‘sharedaddy.php’ ID SQL Injection

######################################################

2011-11-19 longrifle0x webapps

WordPress Plugin Flexible Custom Post Type – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50719/info

2011-11-17 Am!r webapps

ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 – Cross-Site Scripting

source: https://www.securityfocus.com/bid/50717/info

2011-11-17 James webb webapps

webERP 4.3.8 – ‘/reportwriter/FormMaker.php?ReportID’ SQL Injection

source: https://www.securityfocus.com/bid/50713/info

2011-11-17 High-Tech Bridge SA webapps

webERP 4.3.8 – ‘/reportwriter/ReportMaker.php?reportid’ SQL Injection

source: https://www.securityfocus.com/bid/50713/info

2011-11-17 High-Tech Bridge SA webapps

webERP 4.3.8 – Multiple Script URI Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50713/info

2011-11-17 High-Tech Bridge SA webapps

Webistry 1.6 – ‘pid’ SQL Injection

source: https://www.securityfocus.com/bid/50689/info

2011-11-16 CoBRa_21 webapps

SonicWALL Aventail SSL-VPN – SQL Injection

================================================================================

2011-11-16 Asheesh kumar webapps

FreeWebShop 2.2.9 R2 – ‘ajax_save_name.php’ Remote Code Execution

2011-11-16 EgiX webapps

QuiXplorer 2.3 – Bugtraq Arbitrary File Upload

# Exploit Title: QuiXplorer 2.3

2011-11-15 PCA webapps

Authenex A-Key/ASAS Web Management Control 3.1.0.2 – Blind SQL Injection

============================================================

2011-11-15 Jose Carlos de Arriba webapps

Pixie CMS 1.01 < 1.04 - Blind SQL Injections

Exploit Title: Pixie CMS 1.01 - 1.04 "pixie_user" Blind SQL Injection

2011-11-14 Piranha webapps

WordPress Plugin AdRotate 3.6.6 – SQL Injection

# Exploit Title: WordPress AdRotate plugin get_var($wpdb->prepare("SELECT `link` FROM `".$prefix."adrotate` WHERE `id...

2011-11-14 Miroslav Stampar webapps

Joomla! Component Content – ‘year’ SQL Injection

source: https://www.securityfocus.com/bid/50656/info

2011-11-14 E.Shahmohamadi webapps

Search Plugin for Hotaru CMS 1.4.2 – ‘admin_index.php?site_name’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50657/info

2011-11-13 Gjoko Krstic webapps

WordPress Plugin Zingiri 2.2.3 – ‘ajax_save_name.php’ Remote Code Execution

2011-11-13 EgiX webapps

Mambo 4.x – ‘Zorder’ SQL Injection

[+] Exploit Title : CMS 4.x.x Zorder (SQL Injection Vul)

2011-11-13 KraL BeNiM webapps

Support Incident Tracker 3.65 – Remote Command Execution (Metasploit)

##

2011-11-13 Metasploit webapps

Infoblox NetMRI 6.2.1 – Admin Login Page Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50646/info

2011-11-11 Jose Carlos de Arriba webapps

Joomla! Component com_alfcontact 1.9.3 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50637/info

2011-11-10 Jose Carlos de Arriba webapps

AShop – Open Redirection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/50616/info

2011-11-09 Infoserve Security Team webapps

COMTREND CT-5624 Router – Root/Support Password Disclosure/Change

#!/usr/bin/perl

2011-11-09 Todor Donev webapps

labwiki 1.1 – Multiple Vulnerabilities

------------------------------------------------------------------------

2011-11-09 muuratsalo webapps

osCSS2 – ‘_ID’ Local file Inclusion

Advisory: osCSS2 "_ID" parameter Local file inclusion

2011-11-09 Stefan Schurtz webapps

11in1 CMS 1.0.1 – ‘do.php’ CRLF Injection

11in1 CMS v1.0.1 (do.php) CRLF Injection Vulnerability

2011-11-08 LiquidWorm webapps

PBCS Technology – ‘articlenav.php’ SQL Injection

source: https://www.securityfocus.com/bid/50577/info

2011-11-08 Kalashinkov3 webapps

Oracle NoSQL 11g 1.1.100 R2 – ‘log’ Directory Traversal

source: https://www.securityfocus.com/bid/50567/info

2011-11-07 BuherÃ¡tor webapps

Admin Bot – ‘news.php’ SQL Injection

source: https://www.securityfocus.com/bid/50562/info

2011-11-07 baltazar webapps

SmartJobBoard – ‘keywords’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50552/info

2011-11-07 Mr.PaPaRoSSe webapps

OrderSys 1.6.4 – SQL Injection

------------------------------------------------------------------------

2011-11-07 muuratsalo webapps

LabStoRe 1.5.4 – SQL Injection

------------------------------------------------------------------------

2011-11-07 muuratsalo webapps

WHMCompleteSolution 3.x/4.x – Multiple Vulnerabilities

$b0x# WHMCS ( WHMCompleteSolution ) 3.x / 4.x Multiple Vulnerability !

2011-11-07 ZxH-Labs webapps

aidiCMS 3.55 – ‘ajax_create_folder.php’ Remote Code Execution

2011-11-05 EgiX webapps

PHPMyFAQ 2.7.0 – ‘ajax_create_folder.php’ Remote Code Execution

2011-11-05 EgiX webapps

ZenPhoto 1.4.1.4 – ‘ajax_create_folder.php’ Remote Code Execution

2011-11-05 EgiX webapps

WHMCompleteSolution (WHMCS) 3.x – ‘clientarea.php’ Local File Disclosure

# Title : WHMCS (clientarea.php) Local File Disclosure

2011-11-04 red virus webapps

HP Data Protector Media Operations 6.20 – Directory Traversal

#######################################################################

2011-11-04 Luigi Auriemma webapps

Advanced Poll 2.02 – SQL Injection

##############################################################################################################

2011-11-04 Yassin Aboukir webapps

Ajax File and Image Manager 1.0 Final – Remote Code Execution

--------------------------------------------------------------------------

2011-11-04 EgiX webapps

Centreon 2.3.1 – ‘command_name’ Remote Command Execution

source: https://www.securityfocus.com/bid/50568/info

2011-11-04 Christophe de la Fuente webapps

WordPress Theme Bonus 1.0 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50527/info

2011-11-04 3spi0n webapps

DreamBox DM800 – ‘file’ Local File Disclosure

source: https://www.securityfocus.com/bid/50520/info

2011-11-04 Todor Donev webapps

CmyDocument – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50512/info

2011-11-03 demonalex webapps

S9Y Serendipity 1.5.5 – ‘serendipity[filter][bp.ALT]’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50502/info

2011-11-03 Stefan Schurtz webapps

Web File Browser 0.4b14 – File Download

Exploit Title: [Web File Browser 0.4b14 File Download Vulnerability]

2011-11-03 Sangyun YOO webapps

Jara 1.6 – Multiple Vulnerabilities

#!/Mohammed/bin/YahYa

2011-11-03 Or4nG.M4N webapps

CaupoShop Pro (2.x < 3.70) Classic 3.01 - Local File Inclusion

CaupoShop Pro (2.x/

2011-11-02 Rami Salama webapps

SetSeed CMS 5.8.20 – ‘loggedInUser’ SQL Injection

SetSeed CMS 5.8.20 (loggedInUser) Remote SQL Injection Vulnerability

2011-11-02 LiquidWorm webapps

BST (BestShopPro) – ‘nowosci.php’ Multiple Vulnerabilities

################################################################################################

2011-11-02 CoBRa_21 webapps

eFront 3.6.x – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/50492/info

2011-11-02 High-Tech Bridge SA webapps