webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Bonza Digital Cart Script – SQL Injection

# Exploit Title: Bonzo Cart (E-Commerce System) SQL Injection

2011-08-22 Eyup CELIK webapps

Web Solutions Wcs2u – SQL Injection

[~]Title : Web Solutions Wcs2u SQL Injection Vulnerability

2011-08-22 tempe_mendoan webapps

WordPress Plugin MM Duplicate 1.2 – SQL Injection

# Exploit Title: WordPress MM Duplicate plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)

2011-08-22 Miroslav Stampar webapps

OneFileCMS 1.1.1 – Multiple Vulnerabilities

# Exploit Title: OneFileCMS v.1.1.1 Multiple Remote Vulnerabilities

2011-08-21 mr.pr0n webapps

EasySiteEdit – Remote File Inclusion

# Exploit Title: EasySiteEdit remote file include

2011-08-21 koskesh jakesh webapps

OneFileCMS 1.1.1 – ‘onefilecms.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49257/info

2011-08-21 mr.pr0n webapps

WordPress Plugin UnGallery 1.5.8 – Local File Disclosure

# Exploit Title: WordPress UnGallery plugin

2011-08-20 Miroslav Stampar webapps

Axis Commerce (E-Commerce System) – Persistent Cross-Site Scripting

# Exploit Title: Axis Commerce (E-Commerce System) Stored XSS

2011-08-20 Eyup CELIK webapps

WordPress Plugin Block-Spam-By-Math-Reloaded – Bypass

##

2011-08-20 Tiago Ferreira & Heyder Andrade webapps

Oracle Secure Backup – Authentication Bypass/Command Injection (Metasploit)

##

2011-08-19 Metasploit webapps

PHPMyRealty 1.0.7 – SQL Injection

|=========================================================================================|

2011-08-19 H4T$A webapps

network tracker .95 – Persistent Cross-Site Scripting

# Exploit Title: Network Tracker .95 Stored XSS

2011-08-19 G13 webapps

WordPress Plugin Menu Creator 1.1.7 – SQL Injection

# Exploit Title: WordPress Menu Creator plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)

2011-08-18 Miroslav Stampar webapps

WordPress Plugin Allow PHP in Posts and Pages 2.0.0.RC1 – SQL Injection

# Exploit Title: WordPress Allow PHP in Posts and Pages plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)

2011-08-18 Miroslav Stampar webapps

WordPress Plugin Global Content Blocks 1.2 – SQL Injection

# Exploit Title: WordPress Global Content Blocks plugin 0) { // intval("1a") => 1 :)

2011-08-18 Miroslav Stampar webapps

WordPress Plugin Ajax Gallery 3.0 – SQL Injection

# Exploit Title: WordPress Ajax Gallery plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)

2011-08-18 Miroslav Stampar webapps

Elgg 1.7.10 – Multiple Vulnerabilities

# Exploit Title: Elgg 1.7.10

2011-08-18 Aung Khant webapps

WordPress Plugin Forum 1.7.8 – SQL Injection

# Exploit Title: WordPress WP Forum plugin get_row("SELECT text, author_id, date FROM $table_posts WHERE id = $id");

2011-08-18 Miroslav Stampar webapps

WordPress Plugin DS FAQ 1.3.2 – SQL Injection

# Exploit Title: WordPress WP DS FAQ plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)

2011-08-18 Miroslav Stampar webapps

Mantis Bug Tracker 1.1.8 – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/49235/info

2011-08-18 Net.Edit0r webapps

Adobe ColdFusion – ‘probe.cfm’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49220/info

2011-08-18 G.R0b1n webapps

Code Widgets Multiple Question – Multiple Choice Online Questionnaire SQL Injections

source: https://www.securityfocus.com/bid/49210/info

2011-08-17 L0rd CrusAd3r webapps

Code Widgets DataBound Collapsible Menu – ‘main.asp’ SQL Injection

source: https://www.securityfocus.com/bid/49209/info

2011-08-17 Inj3ct0r webapps

Code Widgets DataBound Index Style Menu – ‘category.asp’ SQL Injection

source: https://www.securityfocus.com/bid/49208/info

2011-08-17 Inj3ct0r webapps

Code Widgets Online Job Application – ‘admin.asp’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/49207/info

2011-08-17 L0rd CrusAd3r webapps

WordPress Plugin WP-Stats-Dashboard 2.6.5.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49197/info

2011-08-17 High-Tech Bridge SA webapps

WordPress Plugin Fast Secure Contact Form 3.0.3.1 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49193/info

2011-08-17 High-Tech Bridge SA webapps

phpWebSite – ‘page_id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49176/info

2011-08-17 Ehsan_Hp200 webapps

Contrexx ShopSystem 2.2 SP3 – ‘catId’ Blind SQL Injection

#!/usr/bin/php

2011-08-17 Penguin webapps

WordPress Plugin OdiHost NewsLetter 1.0 – SQL Injection

# Exploit Title: WordPress OdiHost Newsletter plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)

2011-08-17 Miroslav Stampar webapps

WordPress Plugin Easy Contact Form Lite 1.0.7 – SQL Injection

# Exploit Title: WordPress Easy Contact Form Lite plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)

2011-08-17 Miroslav Stampar webapps

WordPress Plugin Symposium 0.64 – SQL Injection

# Exploit Title: WordPress WP Symposium plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)

2011-08-17 Miroslav Stampar webapps

WordPress Plugin Contus HD FLV Player 1.3 – SQL Injection

# Exploit Title: WordPress Contus HD FLV Player plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)&list...

2011-08-17 Miroslav Stampar webapps

WordPress Plugin File Groups 1.1.2 – SQL Injection

# Exploit Title: WordPress File Groups plugin get_col("select guid from wp_posts where post_parent = $fgid");

2011-08-17 Miroslav Stampar webapps

SoftwareDEP Classified Script 2.5 – SQL Injection (1)

) ) ) ( ( ( ( ( ) )

2011-08-17 v3n0m webapps

Joomla! Component JoomTouch 1.0.2 – Local File Inclusion

================================================================================

2011-08-17 NoGe webapps

WordPress Plugin IP-Logger 3.0 – SQL Injection

# Exploit Title: WordPress IP-Logger plugin

2011-08-16 Miroslav Stampar webapps

phpList 2.10.x – Security Bypass / Information Disclosure

source: https://www.securityfocus.com/bid/49188/info

2011-08-15 Davide Canali webapps

awiki 20100125 – Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/49187/info

2011-08-15 muuratsalo webapps

Contrexx ShopSystem 2.2 SP3 – Blind SQL Injection

Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit

2011-08-14 Penguin webapps

Prediction Football 2.51 – Cross-Site Request Forgery

# Exploit Title: [title]

2011-08-14 Smith Falcon webapps

Mambo 4.6.x < 4.6.5 - SQL Injection

=========================================

2011-08-13 Aung Khant webapps

Kahf Poems 1.0 – Multiple Vulnerabilities

################################################################################################

2011-08-13 Yassin Aboukir webapps

VideoDB 3.1.0 – SQL Injection

DORK:allinurl:borrow.php?diskid=

2011-08-13 seceurityoverun webapps

Adobe RoboHelp 9 – DOM Cross-Site Scripting

Details for the CVE - 2011-2133 - Adobe RoboHelp9 DOM Cross Site

2011-08-11 Roberto Suggi Liverani webapps

PHP Flat File Guestbook 1.0 – ‘ffgb_admin.php’ Remote File Inclusion

source: https://www.securityfocus.com/bid/49138/info

2011-08-11 RiRes Walid webapps

WordPress Plugin eShop 6.2.8 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49117/info

2011-08-10 High-Tech Bridge SA webapps

OpenEMR 4.0 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49090/info

2011-08-09 Houssam Sahli webapps

Joomla! Component Search 3.0.0 – SQL Injection

=========================================================================================

2011-08-09 NoGe webapps

FCKEditor Core – ‘FileManager test.html’ Arbitrary File Upload (2)

In The Name Of GOD

2011-08-09 pentesters.ir webapps