webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Easy Hosting Control Panel – Admin Authentication Bypass

# Exploit Title: Easy Hosting Control Panel Admin Auth Bypass

2011-10-04 Jasman webapps

Concrete5 CMS < 5.4.2.1 - Multiple Vulnerabilities

# Exploit Title: Concrete5 setQuery(

2011-10-04 Ryan Dewhurst webapps

vTiger CRM 5.2.1 – ‘PHPrint.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49927/info

2011-10-04 Aung Khant webapps

vTiger CRM 5.2.1 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities (1)

source: https://www.securityfocus.com/bid/49927/info

2011-10-04 Aung Khant webapps

Phorum 5.2.18 – ‘/admin/index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49920/info

2011-10-03 Stefan Schurtz webapps

Netvolution 2.5.8 – ‘referer’ Header SQL Injection

source: https://www.securityfocus.com/bid/49918/info

2011-10-03 Patroklos Argyroudis webapps

JBoss & JMX Console – Misconfigured Deployment Scanner

#!/usr/bin/perl

2011-10-03 y0ug webapps

GotoCode Online Bookstore – Multiple Vulnerabilities

###############################################################################

2011-10-03 Nathaniel Carew webapps

CA Total Defense Suite – reGenerateReports Stored procedure SQL Injection (Metasploit)

##

2011-10-02 Metasploit webapps

Vivvo CMS – Local File Inclusion

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

2011-10-02 JaBrOtxHaCkEr webapps

Banana Dance CMS and Wiki – SQL Injection

+-----------------------+

2011-10-02 Aodrulez webapps

ContaoCMS 2.10.1 – Cross-Site Scripting

source: https://www.securityfocus.com/bid/50061/info

2011-10-02 Stefan Schurtz webapps

SonicWALL Viewpoint 6.0 – ‘scheduleID’ SQL Injection

source: https://www.securityfocus.com/bid/49906/info

2011-10-02 Rem0ve webapps

ezCourses – ‘admin.asp’ Security Bypass

source: https://www.securityfocus.com/bid/49907/info

2011-10-01 J.O webapps

ProjectForum 7.0.1 3038 – ‘more’ Object HTML Injection

source: https://www.securityfocus.com/bid/49895/info

2011-09-30 Paul Davis webapps

WordPress Plugin WP Bannerize 2.8.7 – ‘ajax_sorter.php’ SQL Injection

source: https://www.securityfocus.com/bid/49893/info

2011-09-30 Miroslav Stampar webapps

WordPress Theme RedLine 1.65 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49880/info

2011-09-30 SiteWatch webapps

WordPress Theme Black-LetterHead 1.5 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49879/info

2011-09-30 SiteWatch webapps

WordPress Theme Morning Coffee 3.5 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49878/info

2011-09-30 SiteWatch webapps

Feed on Feeds 0.5 – Remote PHP Code Injection

2011-09-30 EgiX webapps

Marinet CMS – ‘room.php’ Blind SQL Injection

====================================================

2011-09-30 BHG Security Center webapps

WordPress Plugin Bannerize 2.8.7 – SQL Injection

# Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)

2011-09-30 Miroslav Stampar webapps

Typo3 – File Disclosure

________________________________________________________________________________________

2011-09-29 Number 7 webapps

WordPress Theme Pixiv Custom Theme 2.1.5 – ‘cpage’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49875/info

2011-09-29 SiteWatch webapps

WordPress Theme EvoLve 1.2.5 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49872/info

2011-09-29 SiteWatch webapps

WordPress Theme Elegant Grunge 1.0.3 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49869/info

2011-09-29 SiteWatch webapps

WordPress Theme Atahualpa 3.6.7 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49865/info

2011-09-29 SiteWatch webapps

Bitweaver 2.8.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49864/info

2011-09-29 Stefan Schurtz webapps

Joomla! < 1.7.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49853/info

2011-09-29 Aung Khant webapps

A2CMS – ‘index.php’ Local File Disclosure

source: https://www.securityfocus.com/bid/49883/info

2011-09-28 St493r webapps

Traq 2.2 – Multiple SQL Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/49835/info

2011-09-28 High-Tech Bridge SA webapps

timelive time and expense tracking 4.1.1 – Multiple Vulnerabilities

###############################################################################

2011-09-28 Nathaniel Carew webapps

redmind Online-Shop / E-Commerce-System – SQL Injection

[#] Exploit Title : redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability

2011-09-27 Indonesian BlackCoder webapps

Omnidocs – Multiple Vulnerabilities

--------------------------------------------------------------------

2011-09-27 Sohil Garg webapps

Jarida 1.0 – Multiple Vulnerabilities

# Exploit Title: Jarida 1.0 SQL Injection

2011-09-27 Ptrace Security webapps

WordPress Plugin Mingle Forum 1.0.31 – SQL Injection

# Exploit Title: WordPress Mingle Forum plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)

2011-09-27 Miroslav Stampar webapps

Vanira CMS – ‘vtpidshow’ SQL Injection

source: https://www.securityfocus.com/bid/49789/info

2011-09-27 kurdish hackers team webapps

Adobe ColdFusion 7 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49787/info

2011-09-27 MustLive webapps

Joomla! Component Biitatemplateshop – ‘groups’ SQL Injection

source: https://www.securityfocus.com/bid/49786/info

2011-09-26 BHG Security Group webapps

S9Y Serendipity Freetag-plugin 3.23 – ‘serendipity[tagview]’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49771/info

2011-09-26 Stefan Schurtz webapps

AdaptCMS 2.0.1 – Cross-Site Scripting / Information Disclosure

source: https://www.securityfocus.com/bid/49769/info

2011-09-26 Stefan Schurtz webapps

WordPress Plugin BuddyPress 1.2.10 / WordPress Theme DEV Blogs Mu 1.2.6 (WordPress 3.1.4) – Regular Subscriber HTML Injection

source: https://www.securityfocus.com/bid/49765/info

2011-09-26 knull webapps

WordPress Plugin CevherShare 2.0 – SQL Injection

=> WordPress CevherShare 2.0 plugin SQL Injection Vulnerability

2011-09-26 bd0rk webapps

WordPress Plugin AdRotate 3.6.5 – SQL Injection

# Exploit Title: WordPress AdRotate plugin

2011-09-24 Miroslav Stampar webapps

WordPress Plugin Link Library 5.2.1 – SQL Injection

# Exploit Title: WordPress Link Library plugin

2011-09-24 Miroslav Stampar webapps

WordPress Theme Trending 0.1 – ‘cpage’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49896/info

2011-09-24 SiteWatch webapps

WordPress Theme Web Minimalist 1.1 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49874/info

2011-09-24 SiteWatch webapps

WordPress Theme Cover WP 1.6.5 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49873/info

2011-09-24 jabdah webapps

WordPress Theme F8 Lite 4.2.1 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49867/info

2011-09-24 SiteWatch webapps

WordPress Theme Hybrid 0.9 – ‘cpage’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49866/info

2011-09-24 SiteWatch webapps