webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Web Professional – ‘default.php’ SQL Injection

source: https://www.securityfocus.com/bid/49399/info

2011-08-31 The_Exploited webapps

S9Y Serendipity 1.5.1 – ‘research_display.php’ SQL Injection

source: https://www.securityfocus.com/bid/49395/info

2011-08-31 The_Exploited webapps

TinyWebGallery 1.8.4 – Local File Inclusion / SQL Injection

source: https://www.securityfocus.com/bid/49393/info

2011-08-31 KedAns-Dz webapps

CS-Cart 2.2.1 – ‘products.php’ SQL Injection

source: https://www.securityfocus.com/bid/49378/info

2011-08-30 Net.Edit0r webapps

IBM Open Admin Tool 2.71 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49364/info

2011-08-30 Sumit Kumar Soni webapps

WordPress Plugin Crawl Rate Tracker 2.0.2 – SQL Injection

# Exploit Title: WordPress Crawl Rate Tracker plugin

2011-08-30 Miroslav Stampar webapps

WordPress Plugin Couponer 1.2 – SQL Injection

# Exploit Title: WordPress Couponer plugin

2011-08-30 Miroslav Stampar webapps

WordPress Plugin PureHTML 1.0.0 – SQL Injection

# Exploit Title: WordPress PureHTML plugin

2011-08-30 Miroslav Stampar webapps

WordPress Plugin yolink Search 1.1.4 – SQL Injection

# Exploit Title: WordPress yolink Search plugin get_results( $wpdb->prepare( "SELECT ID,GUID FROM $wpdb->posts WHERE ...

2011-08-30 Miroslav Stampar webapps

WordPress Plugin Audio Gallery Playlist 0.12 – SQL Injection

# Exploit Title: WordPress wp audio gallery playlist plugin

2011-08-30 Miroslav Stampar webapps

FileBox File Hosting & Sharing Script 1.5 – SQL Injection

# Exploit Title: FileBox - File Hosting & Sharing Script 1.5 SQL Injection

2011-08-30 SubhashDasyam webapps

vAuthenticate 3.0.1 – Authentication Bypass

-----------------------------------------------------------------------

2011-08-30 bd0rk webapps

WordPress Plugin Event Registration 5.4.3 – SQL Injection

# Exploit Title: WordPress Event Registration plugin

2011-08-30 Miroslav Stampar webapps

WordPress Plugin Advertizer 1.0 – SQL Injection

# Exploit Title: WordPress Advertizer plugin

2011-08-30 Miroslav Stampar webapps

WordPress Plugin iCopyright(R) Article Tools 1.1.4 – SQL Injection

# Exploit Title: WordPress iCopyright(R) Article Tools plugin

2011-08-29 Miroslav Stampar webapps

WordPress Plugin SH Slideshow 3.1.4 – SQL Injection

# Exploit Title: WordPress SH Slideshow plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)--%20

2011-08-29 Miroslav Stampar webapps

ClickCMS – Denial of Service / CAPTCHA Bypass

source: https://www.securityfocus.com/bid/49361/info

2011-08-29 MustLive webapps

LifeSize Room – Command Injection (Metasploit)

require 'msf/core'

2011-08-28 Spencer McIntyre webapps

Omnistar Mailer – Multiple Vulnerabilities

1 ########################################## 1

2011-08-28 Sid3^effects webapps

WordPress Plugin mySTAT 2.6 – SQL Injection

# Exploit Title: WordPress mySTAT plugin

2011-08-28 Miroslav Stampar webapps

WordPress Plugin Profiles 2.0 RC1 – SQL Injection

# Exploit Title: WordPress Profiles plugin

2011-08-28 Miroslav Stampar webapps

WordPress Plugin Evarisk 5.1.3.6 – SQL Injection

# Exploit Title: WordPress Evarisk plugin

2011-08-28 Miroslav Stampar webapps

WordPress Plugin Facebook Promotions 1.3.3 – SQL Injection

# Exploit Title: WordPress Facebook Promotions plugin

2011-08-28 Miroslav Stampar webapps

Joomla! Component mod_simpleFileLister 1.0 – Directory Traversal

# Exploit Title: Joomla Simple File Lister module

2011-08-28 evilsocket webapps

Joomla! Component joomlacontenteditor 2.0.10 – Multiple Vulnerabilities

########################## www.BugReport.ir

2011-08-28 AmnPardaz webapps

Ferdows CMS Pro 1.1.0 – Multiple Vulnerabilities

########################## www.BugReport.ir

2011-08-28 AmnPardaz webapps

WordPress Plugin Photoracer 1.0 – Multiple Vulnerabilities

##########################################################################

2011-08-27 Yakir Wizman webapps

WordPress Plugin oQey Headers 0.3 – SQL Injection

# Exploit Title: WordPress oQey Headers plugin

2011-08-27 Miroslav Stampar webapps

WordPress Plugin Collision Testimonials 3.0 – SQL Injection

# Exploit Title: WordPress Collision Testimonials plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)

2011-08-27 Miroslav Stampar webapps

WordPress Plugin Super CAPTCHA 2.2.4 – SQL Injection

# Exploit Title: WordPress Super CAPTCHA plugin

2011-08-27 Miroslav Stampar webapps

WordPress Plugin MM Forms Community 1.2.3 – SQL Injection

# Exploit Title: WordPress MM Forms Community plugin

2011-08-27 Miroslav Stampar webapps

WordPress Plugin Js-appointment 1.5 – SQL Injection

# Exploit Title: WordPress Js-appointment plugin

2011-08-27 Miroslav Stampar webapps

phpWebSite 1.7.1 – ‘mod.php’ SQL Injection

source: https://www.securityfocus.com/bid/49354/info

2011-08-27 Ehsan_Hp200 webapps

Mambo 4.6.5 – ‘index.php’ Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/49315/info

2011-08-26 Caddy-Dz webapps

Jcow Social Networking Script 4.2 < 5.2 - Arbitrary Code Execution (Metasploit)

# Exploit Title: Jcow CMS 4.x:4.2 [ 'Aung Khant ' ],

2011-08-26 Aung Khant webapps

WordPress Plugin Photoracer 1.0 – SQL Injection

# Exploit Title: WordPress Photoracer plugin prefix."photoracer where imgid=$imgid";

2011-08-26 evilsocket webapps

WordPress Plugin SendIt 1.5.9 – Blind SQL Injection

# Exploit Title: WordPress SendIt plugin get_var("SELECT COUNT(*) FROM $table_email where email ='$_POST[email_add]' ...

2011-08-25 evilsocket webapps

Simple Machines Forum (SMF) 1.1.14/2.0 – ‘[img]’ BBCode Tag Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/49311/info

2011-08-25 Christian Yerena webapps

Zazavi 1.2.1 – ‘/FileManager/Controller.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/49309/info

2011-08-25 KedAns-Dz webapps

VicBlog – ‘tag’ SQL Injection

source: https://www.securityfocus.com/bid/49304/info

2011-08-24 Eyup CELIK webapps

Tourismscripts Hotel Portal – ‘hotel_city’ HTML Injection

source: https://www.securityfocus.com/bid/49297/info

2011-08-24 Eyup CELIK webapps

CommodityRentals Real Estate Script – ‘txtsearch’ HTML Injection

source: https://www.securityfocus.com/bid/49296/info

2011-08-24 Eyup CELIK webapps

Help Desk Software 1.1g – Cross-Site Request Forgery (Add Admin)

# Exploit Title: Help Request System 1.1g XSRF (add admin)

2011-08-24 G13 webapps

ManageEngine ServiceDesk Plus 8.0 – Multiple Persistent Cross-Site Scripting Vulnerabilities

ManageEngine ServiceDesk Plus 8.0 Multiple Stored XSS Vulnerabilities

2011-08-23 LiquidWorm webapps

Open Classifieds 1.7.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49292/info

2011-08-23 Yassin Aboukir webapps

Concrete 5.4.1 1 – ‘rcID’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49276/info

2011-08-22 Aung Khant webapps

TotalShopUK 1.7.2 – ‘index.php’ SQL Injection

source: https://www.securityfocus.com/bid/49263/info

2011-08-22 Eyup CELIK webapps

Pandora FMS 3.x – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49261/info

2011-08-22 mehdi boukazoula webapps

Redlab CMS – Multiple SQL Injections

[~]Title : Site by Redlab Multiple Vulnerabilities

2011-08-22 tempe_mendoan webapps

DV Cart Shopping Cart software – SQL Injection

# Exploit Title: DV Cart (E-Commerce System) SQL Injection

2011-08-22 Eyup CELIK webapps