webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

TomatoCart 1.1 – (Authenticated) Local File Inclusion

# Exploit Title: TomatoCart 1.1 PostAuth Local File Include

2011-09-12 brain[pillow] webapps

Orion Network Performance Monitor 10.1.3 – ‘CustomChart.aspx’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49614/info

2011-09-12 Gustavo Roberto webapps

Papoo CMS Light 4.0 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49587/info

2011-09-12 Stefan Schurtz webapps

WordPress Plugin Tune Library 2.17 – SQL Injection

# Exploit Title: WordPress Tune Library plugin

2011-09-10 Miroslav Stampar webapps

WordPress Plugin Event Registration 5.44 – SQL Injection

# Exploit Title: Wordpress Event Registration plugin

2011-09-09 serk webapps

Xataface WebAuction and Xataface Librarian DB – Multiple Vulnerabilities

##############################################################################

2011-09-09 SecPod Research webapps

MYRE Real Estate Software – Multiple Vulnerabilities

##############################################################################

2011-09-09 SecPod Research webapps

WordPress Plugin A to Z Category Listing 1.3 – SQL Injection

# Exploit Title: WordPress A to Z Category Listing plugin

2011-09-09 Miroslav Stampar webapps

WordPress Plugin WP-Filebase Download Manager 0.2.9 – SQL Injection

# Exploit Title: WordPress WP-Filebase Download Manager plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112)))...

2011-09-09 Miroslav Stampar webapps

OpenCart 1.5.1.2 – Blind SQL Injection

====================================================

2011-09-08 RiRes Walid webapps

WordPress Plugin 1 Flash Gallery 1.30 < 1.5.7a - Arbitrary File Upload (Metasploit)

# Exploit Title: 1 Flash Gallery Wordpress Plugin Arbitrary File Upload Exploit

2011-09-08 Ben Schmidt webapps

AM4SS 1.2 – Cross-Site Request Forgery (Add Admin)

#Title : AM4SS Version 1.2 - CSRF add Admin

2011-09-08 red virus webapps

WordPress Plugin Community Events 1.2.1 – SQL Injection

# Exploit Title: WordPress Community Events plugin get_blog_prefix() . "ce_events where event_id = " . $event_id;

2011-09-08 Miroslav Stampar webapps

WordPress Plugin Paid Downloads 2.01 – SQL Injection

# Exploit Title: WordPress Paid Downloads plugin

2011-09-08 Miroslav Stampar webapps

Pluck CMS 4.7 – Multiple Local File Inclusion / File Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/49525/info

2011-09-08 Bl4k3 webapps

In-link 2.3.4/5.1.3 RC1 – ‘cat’ SQL Injection

source: https://www.securityfocus.com/bid/49508/info

2011-09-08 SubhashDasyam webapps

SkaDate – ‘blogs.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49502/info

2011-09-08 sonyy webapps

WordPress Plugin Eventify – Simple Events 1.7.f SQL Injection

# Exploit Title: WordPress Eventify - Simple Events plugin

2011-09-07 Miroslav Stampar webapps

WordPress Plugin SCORM Cloud 1.0.6.6 – SQL Injection

# Exploit Title: WordPress SCORM Cloud plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)-- " http://ww...

2011-09-07 Miroslav Stampar webapps

PlaySms 0.9.5.2 – Remote File Inclusion

=============================================================================================================

2011-09-06 NoGe webapps

WordPress Plugin KNR Author List Widget 2.0.0 – SQL Injection

# Exploit Title: WordPress KNR Author List Widget plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)

2011-09-06 Miroslav Stampar webapps

WordPress Plugin post highlights 2.2 – SQL Injection

# Exploit Title: WordPress post highlights plugin

2011-09-06 Miroslav Stampar webapps

WordPress Plugin Tweet Old Post 3.2.5 – SQL Injection

# Exploit Title: WordPress Tweet Old Post plugin

2011-09-06 sherl0ck_ webapps

Free Help Desk 1.1b – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/49721/info

2011-09-06 High-Tech Bridge SA webapps

GeoClassifieds Lite 2.0.x – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/49475/info

2011-09-06 Yassin Aboukir webapps

Kisanji – ‘gr’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49468/info

2011-09-06 Bl4ck.Viper webapps

Zikula Application Framework 1.2.7/1.3 – ‘themename’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49491/info

2011-09-05 High-Tech Bridge SA webapps

EasyGallery 5 – ‘index.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/49458/info

2011-09-05 Eyup CELIK webapps

Advanced Image Hosting Script 2.3 – ‘report.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49457/info

2011-09-05 R3d-D3V!L webapps

Webmobo WB News System – Blind SQL Injection

# Exploit Title: Webmobo News System Blind SQL Injection

2011-09-05 Eyup CELIK webapps

Elite Gaming Ladders 3.6 – SQL Injection

# Exploit Title: Elite Gaming Ladders v3.6 SQL Injection Vulnerability

2011-09-05 J.O webapps

WordPress Plugin oQey Gallery 0.4.8 – SQL Injection

# Exploit Title: WordPress oQey Gallery plugin

2011-09-05 Miroslav Stampar webapps

WordPress Plugin Zotpress 4.4 – SQL Injection

# Exploit Title: WordPress Zotpress plugin

2011-09-04 Miroslav Stampar webapps

openads-2.0.11 – Remote File Inclusion

# Exploit Title: Openads-2.0.11 Remote File inclusion Vulnerability

2011-09-03 HaCkErS eV!L webapps

WordPress Plugin Facebook Opengraph Meta 1.0 – SQL Injection

# Exploit Title: WordPress Facebook Opengraph Meta Plugin plugin

2011-09-03 Miroslav Stampar webapps

WordPress Plugin VideoWhisper Video Presentation 1.1 – SQL Injection

# Exploit Title: WordPress VideoWhisper Video Presentation plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112...

2011-09-02 Miroslav Stampar webapps

ACal 2.2.6 – ‘calendar.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49442/info

2011-09-02 T0xic webapps

Mambo Component N-Myndir – SQL Injection

source: https://www.securityfocus.com/bid/49424/info

2011-09-02 CoBRa_21 webapps

Mambo Component N-Frettir – SQL Injection

source: https://www.securityfocus.com/bid/49422/info

2011-09-02 CoBRa_21 webapps

KaiBB 2.0.1 – SQL Injection / Arbitrary File Upload

source: https://www.securityfocus.com/bid/49421/info

2011-09-02 KedAns-Dz webapps

Mambo Component N-Press – SQL Injection

source: https://www.securityfocus.com/bid/49420/info

2011-09-02 CoBRa_21 webapps

Mambo Component Ahsshop – SQL Injection

source: https://www.securityfocus.com/bid/49419/info

2011-09-02 CoBRa_21 webapps

Mambo Component N-Gallery – SQL Injection

source: https://www.securityfocus.com/bid/49418/info

2011-09-02 CoBRa_21 webapps

Mambo Component N-Skyrslur – Cross-Site Scripting

source: https://www.securityfocus.com/bid/49415/info

2011-09-02 CoBRa_21 webapps

WordPress Plugin SearchAutocomplete 1.0.8 – SQL Injection

# Exploit Title: WordPress SearchAutocomplete plugin

2011-09-01 Miroslav Stampar webapps

NetSaro Enterprise Messenger 2.0 – Multiple Vulnerabilities

===================================================

2011-09-01 Narendra Shinde webapps

WordPress Plugin Bannerize 2.8.6 – SQL Injection

# Exploit Title: WordPress WP Bannerize plugin prefix ."bannerize_b` SET `clickcount` = `clickcount`+1 WHERE id = " ....

2011-09-01 Miroslav Stampar webapps

WordPress Plugin Donation 1.0 – SQL Injection

# Exploit Title: WordPress Donation plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)--%20

2011-09-01 Miroslav Stampar webapps

WordPress Plugin image Gallery with Slideshow 1.5 – Multiple Vulnerabilities

Title: Wordpress image-gallery-with-slideshow plugin

2011-08-31 Hrvoje Spoljar webapps

WordPress Plugin grapefile 1.1 – Arbitrary File Upload

Title: Wordpress grapefile plugin

2011-08-31 Hrvoje Spoljar webapps