webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Symphony 2.2.3 – ‘/symphony/publish/comments?filter’ SQL Injection

source: https://www.securityfocus.com/bid/50470/info

2011-11-01 Mesut Timur webapps

Symphony 2.2.3 – ‘/symphony/publish/images?filter’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50470/info

2011-11-01 Mesut Timur webapps

eFront 3.6.10 Build 11944 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50469/info

2011-11-01 Netsparker Advisories webapps

IBSng B1.34(T96) – ‘str’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50468/info

2011-11-01 Isfahan webapps

Hyperic HQ Enterprise 4.5.1 – Cross-Site Scripting / Multiple Security Vulnerabilities

source: https://www.securityfocus.com/bid/50456/info

2011-11-01 Benjamin Kunz Mejri webapps

vBulletin 4.1.7 – Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/50455/info

2011-11-01 indoushka webapps

Domain Shop – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50454/info

2011-11-01 Mr.PaPaRoSSe webapps

ZTE ZXDSL 831IIV7.5.0a_Z29_OV – Multiple Vulnerabilities

# Exploit Title: ZTE ZXDSL 831IIV7.5.0a_Z29_OV Multiple vulnerabilities

2011-11-01 mehdi boukazoula webapps

Joomla! Component Alameda 1.0 – SQL Injection

[~] Joomla Component Alameda (com_alameda) SQL Injection Vulnerability

2011-10-31 kaMtiEz webapps

jbShop e107 7 CMS Plugin – SQL Injection

# Exploit Title: jbShop - e107 v7 CMS plugin - SQL Injection vulnerability

2011-10-31 Robert Cooper webapps

WordPress Plugin Glossary – SQL Injection

######################################################

2011-10-31 longrifle0x webapps

WordPress Theme classipress 3.1.4 – Persistent Cross-Site Scripting

# Exploit Title: WordPress Classipress Theme

2011-10-31 Paul Loftness webapps

Joomla! Component HM Community – Multiple Vulnerabilities

_00000__00000__00000__00000__0___0__00000____0___0___000___0___0_

2011-10-31 599eme Man webapps

Joomla! Component Vik Real Estate 1.0 – Multiple Vulnerabilities

###################################################################

2011-10-29 Chris Russell webapps

Joomla! Component com_jeemasms 3.2 – Multiple Vulnerabilities

###################################################################

2011-10-29 Chris Russell webapps

Joomla! Component Barter Sites 1.3 – Multiple Vulnerabilities

####################################################################################

2011-10-29 Chris Russell webapps

PHP Photo Album 0.4.1.16 – Multiple Disclosure Vulnerabilities

----------------------------------------------------------------

2011-10-29 BHG Security Center webapps

Joomla! Component Techfolio 1.0 – SQL Injection

###################################################################

2011-10-28 Chris Russell webapps

Plici Search 2.0.0.Stable.r.1878 – ‘p48-search.html’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50428/info

2011-10-28 599eme Man webapps

SjXjV 2.3 – ‘post.php’ SQL Injection

source: https://www.securityfocus.com/bid/50426/info

2011-10-28 599eme Man webapps

eFront 3.6.10 – ‘professor.php’ Script Multiple SQL Injections

source: https://www.securityfocus.com/bid/50419/info

2011-10-28 Vulnerability Research Laboratory webapps

WordPress Plugin wptouch – SQL Injection

# Exploit Title: WordPress wptouch plugin SQL Injection Vulnerability

2011-10-27 longrifle0x webapps

eFront 3.6.10 (build 11944) – Multiple Vulnerabilities

----------------------------------------------------------------

2011-10-27 EgiX webapps

phpScheduleIt 1.2.10 – ‘reserve.php’ Arbitrary Code Injection (Metasploit)

##

2011-10-26 Metasploit webapps

Online Subtitles Workshop – Cross-Site Scripting

===================================================================================

2011-10-26 M.Jock3R webapps

vTiger CRM 5.2.1 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities (2)

source: https://www.securityfocus.com/bid/50364/info

2011-10-26 LiquidWorm webapps

Alsbtain Bulletin 1.5/1.6 – Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/50350/info

2011-10-25 Null H4ck3r webapps

Joomla! Component com_yjcontactus – Local File Inclusion

================================================================================

2011-10-25 MeGo webapps

phpLDAPadmin 1.2.1.1 – Remote PHP Code Injection (Metasploit) (2)

##

2011-10-25 Metasploit webapps

SAP Management Console – OSExecute Payload Execution (Metasploit)

##

2011-10-24 Metasploit webapps

InverseFlow 2.4 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50344/info

2011-10-24 Amir Expl0its webapps

e107 0.7.24 – ‘cmd’ Remote Command Execution

source: https://www.securityfocus.com/bid/50339/info

2011-10-24 Matt Bergin webapps

InverseFlow 2.4 – Cross-Site Request Forgery (Add Admin)

#(+) Exploit Title: InverseFlow v2.4 CSRF Vulnerabilities (Add Admin User)

2011-10-23 EjRaM HaCkEr webapps

phpLDAPadmin 1.2.1.1 – Remote PHP Code Injection (1)

2011-10-23 EgiX webapps

Jara 1.6 – SQL Injection

jara 1.6 sql injection vulnerability

2011-10-23 muuratsalo webapps

SportsPHool 1.0 – Remote File Inclusion

2011-10-21 cr4wl3r webapps

Cyclope Internet Filtering Proxy 4.0 – Persistent Cross-Site Scripting

#!/usr/bin/python

2011-10-20 loneferret webapps

Metasploit Web UI 4.1.0 – Persistent Cross-Site Scripting

Advisory: Metasploit 4.1.0 Web UI stored XSS vulnerability

2011-10-20 Stefan Schurtz webapps

Pre Studio Business Cards Designer – SQL Injection

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

2011-10-20 dr_zig webapps

OCS Inventory NG 2.0.1 – Persistent Cross-Site Scripting

OCS Inventory NG 2.0.1 - Persistent XSS (CVE-2011-4024)

2011-10-20 Nicolas DEROUET webapps

Simple Free PHP Forum Script – SQL Injection

# Exploit Title: Simple Free PHP Forum Script Set("cat_id",$get_id);

2011-10-20 Skraps webapps

fims File Management System 1.2.1a – Multiple Vulnerabilities

# Exploit Title: fims - File Management System execute("select * from fims_user where email='$email' and password=md5...

2011-10-20 Skraps webapps

Uiga Personal Portal – Multiple Vulnerabilities

# Exploit Title: Uiga Personal Portal Multiple Vulnerability

2011-10-20 Eyup CELIK webapps

CMS mini 0.2.2 – Local File Inclusion

# Exploit Title: [CMSmini 0.2.2 Local File Inclusion]

2011-10-20 BeopSeong/I2Sec webapps

Tine 2.0 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50307/info

2011-10-20 High-Tech Bridge SA webapps

osCommerce – Arbitrary File Upload / File Disclosure

source: https://www.securityfocus.com/bid/50301/info

2011-10-20 indoushka webapps

Innovate Portal 2.0 – ‘cat’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50295/info

2011-10-20 Eyup CELIK webapps

Boonex Dolphin 6.1 – ‘get_list.php’ SQL Injection

source: https://www.securityfocus.com/bid/50286/info

2011-10-19 Yuri Goltsev webapps

1024 CMS 1.1.0 Beta – ‘force_download.php’ Local File Inclusion

# Exploit Title: [1024 CMS Version 1.1.0 beta(/complete-modules/modules/forcedownload/force_download.php) Local File ...

2011-10-19 Sangyun YOO webapps

WHMCompleteSolution (WHMCS) 3.x < 4.0.x - 'cart.php' Local File Disclosure

# Title : WHMCompleteSolution (cart.php) Local File Disclosure

2011-10-19 Lagripe-Dz & Mca-Crb webapps