webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

spidaNews 1.0 – ‘news.php?id’ SQL Injection

----------------------------Information------------------------------------------------

2011-04-02 Easy Laster webapps

Feng Office 1.7.3.3 – Cross-Site Request Forgery

Vulnerability ID: HTB22910

2011-04-01 High-Tech Bridge SA webapps

InTerra Blog Machine 1.84 – Cross-Site Scripting

Vulnerability ID: HTB22931

2011-04-01 High-Tech Bridge SA webapps

Allomani Super MultiMedia Library 2.5.0 – Cross-Site Request Forgery (Add Admin)

Super Multimedia Library 2.5.0 XSRF Vulnerability (Add Admin)

2011-04-01 AtT4CKxT3rR0r1ST webapps

Allomani Audio and Video Library 2.7.0 – Cross-Site Request Forgery (Add Admin)

Audio & Video Library 2.7.0 XSRF Vulnerability (Add Admin)

2011-04-01 AtT4CKxT3rR0r1ST webapps

Allomani Web Links 1.0 – Cross-Site Request Forgery (Add Admin)

Web Links 1.0 XSRF Vulnerability (Add Admin)

2011-04-01 AtT4CKxT3rR0r1ST webapps

Allomani Movies Library 2.0 – Cross-Site Request Forgery (Add Admin)

Movies Library 2.0 XSRF Vulnerability (Add Admin)

2011-04-01 AtT4CKxT3rR0r1ST webapps

Allomani News 1.0 – Cross-Site Request Forgery (Add Admin)

News 1.0 XSRF Vulnerability (Add Admin)

2011-04-01 AtT4CKxT3rR0r1ST webapps

Allomani E-Store 1.0 – Cross-Site Request Forgery (Add Admin) (2)

E-Store 1.0 XSRF Vulnerability (Add Admin)

2011-04-01 AtT4CKxT3rR0r1ST webapps

AWCM 2.x – ‘search.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47126/info

2011-04-01 Antu Sanadi webapps

Collabtive 0.6.5 – Multiple Remote Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/47105/info

2011-03-31 High-Tech Bridge SA webapps

InTerra Blog Machine 1.84 – ‘subject’ HTML Injection

source: https://www.securityfocus.com/bid/47104/info

2011-03-31 High-Tech Bridge SA webapps

PHPBoost 3.0 – Remote Download Backup

###

2011-03-31 KedAns-Dz webapps

Andy’s PHP KnowledgeBase 0.95.2 – ‘viewusers.php’ SQL Injection

'Andy's PHP Knowledgebase' SQL Injection Vulnerability (CVE-2011-1546)

2011-03-30 Mark Stanislav webapps

CosmoQuest – Authentication Bypass

==========================================

2011-03-30 Net.Edit0r webapps

BigACE 2.7.5 – Arbitrary File Upload

==========================================

2011-03-30 Net.Edit0r webapps

IrIran Shoping Script – SQL Injection

==========================================

2011-03-30 Net.Edit0r webapps

Pligg CMS 1.1.3 – Multiple Vulnerabilities

####

2011-03-30 Jelmer de Hen webapps

YaCOMAS 0.3.6 Alpha – Multiple Vulnerabilities

===================================================================

2011-03-30 Pr@fesOr X webapps

ICJobSite 1.1 – ‘pid’ SQL Injection

source: https://www.securityfocus.com/bid/47100/info

2011-03-30 RoAd_KiLlEr webapps

YaCOMAS 0.3.6 OpenCMS – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47089/info

2011-03-30 Pr@fesOr X webapps

GuppY 4.6.14 – ‘lng’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/47086/info

2011-03-30 kurdish hackers team webapps

XOOPS – ‘view_photos.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47085/info

2011-03-29 KedAns-Dz webapps

Tracks 1.7.2 – URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/47078/info

2011-03-29 Mesut Timur webapps

Spitfire 1.0.3x – ‘cms_username’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47077/info

2011-03-29 High-Tech Bridge SA webapps

osCSS 2.1 – Multiple Cross-Site Scripting / Local File Inclusions

source: https://www.securityfocus.com/bid/47074/info

2011-03-29 AutoSec Tools webapps

oscss2 2.1.0 rc12 – Multiple Vulnerabilities

------------------------------------------------------------------------

2011-03-29 AutoSec Tools webapps

Claroline 1.10 – Persistent Cross-Site Scripting

------------------------------------------------------------------------

2011-03-29 AutoSec Tools webapps

Andy’s PHP KnowledgeBase 0.95.4 – SQL Injection

------------------------------------------------------------------------

2011-03-29 AutoSec Tools webapps

webEdition CMS – Local File Inclusion

===================================================================

2011-03-28 eidelweiss webapps

WordPress Plugin BackWPup – Remote Code Execution / Local Code Execution

Sense of Security - Security Advisory - SOS-11-003

2011-03-28 Sense of Security webapps

Honey Soft Web Solution – Multiple Vulnerabilities

-----------------------------------------------------------------------------------------

2011-03-28 **RoAd_KiLlEr** webapps

Claroline 1.10 – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/47073/info

2011-03-28 AutoSec Tools webapps

webEdition CMS 6.1.0.2 – ‘DOCUMENT_ROOT’ Local File Inclusion

source: https://www.securityfocus.com/bid/47065/info

2011-03-28 eidelweiss webapps

Alkacon OpenCMS 7.5.x – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47055/info

2011-03-28 antisnatchor webapps

OrangeHRM 2.6.2 – ‘jobVacancy.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47046/info

2011-03-27 AutoSec Tools webapps

Cetera eCommerce – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/47044/info

2011-03-27 MustLive webapps

webEdition CMS 6.1.0.2 – Multiple Vulnerabilities

------------------------------------------------------------------------

2011-03-27 AutoSec Tools webapps

SimplisCMS 1.0.3.0 – Multiple Vulnerabilities

##########################################################

2011-03-27 NassRawI webapps

Family Connections CMS 2.3.2 – Persistent Cross-Site Scripting / XML Injection

Family Connections CMS 2.3.2 Stored XSS And XPath Injection

2011-03-26 LiquidWorm webapps

Family Connections 2.3.2 – ‘subject’ HTML Injection

source: https://www.securityfocus.com/bid/47037/info

2011-03-25 Zero Science Lab webapps

netjukebox 4.01B/5.25 – ‘skin’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47027/info

2011-03-24 AutoSec Tools webapps

Ripe Website Manager 1.1 – Cross-Site Scripting / Multiple SQL Injections

source: https://www.securityfocus.com/bid/47017/info

2011-03-24 High-Tech Bridge SA webapps

GrapeCity Data Dynamics Reports 1.6.2084.14 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47015/info

2011-03-24 Dionach webapps

MC Content Manager 10.1.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47014/info

2011-03-24 MustLive webapps

SyndeoCMS 2.8.02 – Multiple Vulnerabilities (2)

Vulnerability ID: HTB22901

2011-03-24 High-Tech Bridge SA webapps

Web Wiz Forum – Injection

##################################################################

2011-03-23 eXeSoul webapps

Constructr CMS 3.03 – Arbitrary File Upload

#!/usr/bin/env perl

2011-03-23 plucky webapps

Symantec LiveUpdate Administrator Management GUI – HTML Injection

source: https://www.securityfocus.com/bid/46856/info

2011-03-23 Nikolas Sotiriu webapps

Web Wiz Forums 9.5 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/46131/info

2011-03-23 eXeSoul webapps