webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Realmarketing CMS – Multiple SQL Injections

#(+)Exploit Title: Realmarketing CMS System Sensitive Database Disclosure Vulnerability

2011-04-22 ^Xecuti0N3r webapps

4Images 1.7.9 – Multiple Vulnerabilities

================================

2011-04-22 High-Tech Bridge SA webapps

DynMedia Pro Web CMS 4.0 – Local File Disclosure

|||[!]===========================================================================[!]

2011-04-22 Mbah_Semar webapps

Web2Project 2.3 – SQL Injection

# ------------------------------------------------------------------------

2011-04-22 AutoSec Tools webapps

Dolibarr ERP/CRM 3.0.0 – Multiple Vulnerabilities

------------------------------------------------------------------------

2011-04-22 AutoSec Tools webapps

ZenPhoto 1.4.0.3 – x-forwarded-for HTTP Header Persistent Cross-Site Scripting

# Exploit Title: ZenPhoto 1.4.0.3 patched 2011-4-19 x-forwarded-for HTTP

2011-04-22 Saif webapps

360 Web Manager 3.0 – Multiple Vulnerabilities

# Exploit Title: Multiple vulnerabilities in 360 Web Manager 3.0

2011-04-22 Ignacio Garrido webapps

First Escort Marketing CMS – Multiple SQL Injections Vulnerabilities

# PoC Title: First Escort Marketing CMS Multiple SQL Injection

2011-04-22 NoNameMT webapps

Nuke Evolution Xtreme 2.0 – Local File Inclusion / SQL Injection

source: https://www.securityfocus.com/bid/47552/info

2011-04-22 KedAns-Dz webapps

Dolibarr ERP/CRM 3.0 – Local File Inclusion / Cross-Site Scripting

source: https://www.securityfocus.com/bid/47542/info

2011-04-22 AutoSec Tools webapps

todoyu 2.0.8 – ‘lang’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47540/info

2011-04-22 AutoSec Tools webapps

LightNEasy 3.2.3 – ‘userhandle’ Cookie SQL Injection

source: https://www.securityfocus.com/bid/47541/info

2011-04-21 AutoSec Tools webapps

ZenPhoto 1.4.0.3 – ‘_zp_themeroot’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47528/info

2011-04-21 High-Tech Bridge SA webapps

SyCtel Design – ‘menu’ Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/47526/info

2011-04-21 Ashiyane Digital Security Team webapps

Automagick Tube Script 1.4.4 – ‘module’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47519/info

2011-04-20 Kurd-Team webapps

SocialCMS 1.0.2 – Multiple Cross-Site Request Forgery Vulnerabilities

[+] Greetings :[ mywisdom - kiddies - kamtiez - r3m1ck - aciz_n1nj4 | mozartklik |syafm0vic-

2011-04-20 vir0e5 webapps

docuFORM Mercury WebApp 6.16a/5.20 – Multiple Cross-Site Scripting Vulnerabilities

docuFORM Mercury WebApp 6.16a Multiple Cross-Site Scripting Vulnerabilities

2011-04-20 LiquidWorm webapps

Ultimate eShop – Error-Based SQL Injection

# Exploit Title: Ultimate eShop Error Based SQL Injection Vulnerability

2011-04-20 Romka webapps

dalbum 1.43 – Multiple Vulnerabilities

===============================

2011-04-19 High-Tech Bridge SA webapps

webSPELL 4.2.2a – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47500/info

2011-04-19 High-Tech Bridge SA webapps

ChatLakTurk PHP Botlu Video – ‘ara.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47428/info

2011-04-19 kurdish hackers team webapps

Dalbum 1.43 – ‘editini.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47427/info

2011-04-19 High-Tech Bridge SA webapps

WordPress Plugin WP-StarsRateBox 1.1 – ‘j’ SQL Injection

source: https://www.securityfocus.com/bid/47423/info

2011-04-19 High-Tech Bridge SA webapps

Ultra Marketing Enterprises CMS and Cart – Multiple SQL Injections

source: https://www.securityfocus.com/bid/47421/info

2011-04-19 eXeSoul webapps

CRESUS – ‘recette_detail.php’ SQL Injection

source: https://www.securityfocus.com/bid/47416/info

2011-04-19 GrayHatz Security Group webapps

XOOPS 2.5 – ‘imagemanager.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/47418/info

2011-04-18 KedAns-Dz webapps

Joomla! Component com_phocadownload – Local File Inclusion

source: https://www.securityfocus.com/bid/47399/info

2011-04-18 KedAns-Dz webapps

osPHPSite – SQL Injection

# Exploit Title: osPHPSite SQL Injection Vulnerability

2011-04-17 vir0e5 webapps

Shape Web Solutions CMS – SQL Injection

#####################################################################################

2011-04-16 Ashiyane Digital Security Team webapps

Bedder CMS – Blind SQL Injection

#(+)Exploit Title: Bedder CMS Blind SQL Injection Vulnerability

2011-04-16 ^Xecuti0N3r webapps

Blue Hat – Sensitive Database Disclosure / SQL Injection

#(+)Exploit Title: Powered by Blue Hat Sensitive Database Disclosure Vulnerability

2011-04-16 ^Xecuti0N3r webapps

SoftXMLCMS – Arbitrary File Upload

###########################################################################

2011-04-16 Alexander webapps

ChillyCMS 1.2.1 – Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/47395/info

2011-04-16 KedAns-Dz webapps

4Images 1.7.9 – Multiple Remote File Inclusions / SQL Injections

source: https://www.securityfocus.com/bid/47394/info

2011-04-16 KedAns-Dz webapps

PhoenixCMS 1.7 – Local File Inclusion / SQL Injection

source: https://www.securityfocus.com/bid/47389/info

2011-04-15 KedAns-Dz webapps

RunCMS Module Partners – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/47388/info

2011-04-15 KedAns-Dz webapps

Agahi Advertisement CMS 4.0 – ‘view_ad.php’ SQL Injection

source: https://www.securityfocus.com/bid/47371/info

2011-04-15 Sepehr Security Team webapps

SQL-Ledger 2.8.33 – (Authenticated) Local File Inclusion / Edit

# Exploit Title: SQL-Ledger

2011-04-15 bitform webapps

TextAds 2.08 Script – Cross-Site Scripting

===========================================================================

2011-04-15 Ashiyane Digital Security Team webapps

cPassMan 1.82 – Arbitrary File Download

Sense of Security - Security Advisory - SOS-11-004

2011-04-15 Sense of Security webapps

EZ-Shop 1.02 – Lateral SQL Injection

[Security Advisory Details: 14/04/2011]

2011-04-14 Osirys webapps

Qianbo Enterprise Web Site Management System – ‘Keyword’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47375/info

2011-04-14 d3c0der webapps

PhpAlbum.net 0.4.1-14_fix06 – ‘var3’ Remote Command Execution

source: https://www.securityfocus.com/bid/47369/info

2011-04-14 High-Tech Bridge SA webapps

TinyBB 1.4 – Blind SQL Injection / Full Path Disclosure

# Exploit Title : TinyBB 1.4 Sql Injection + Path Disclosure

2011-04-13 swami webapps

Website Baker 2.8.1 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/47332/info

2011-04-12 High-Tech Bridge SA webapps

Plogger 1.0 RC1 – ‘gallery_name’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47329/info

2011-04-12 High-Tech Bridge SA webapps

WordPress Theme The Gazette Edition 2.9.4 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/47320/info

2011-04-12 MustLive webapps

WordPress Plugin Spellchecker 3.1 – ‘/general.php’ Local/Remote File Inclusion

source: https://www.securityfocus.com/bid/47317/info

2011-04-12 Dr Trojan webapps

WordPress Theme Live Wire 2.3.1 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/47299/info

2011-04-11 MustLive webapps

Etki Video PRO 2.0 – ‘kategori.asp?cat’ SQL Injection

source: https://www.securityfocus.com/bid/47298/info

2011-04-11 Kurd-Team webapps