webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

glFusion 1.1.x/1.2.1 – ‘users.php’ SQL Injection

source: https://www.securityfocus.com/bid/46575/info

2011-02-25 H3X webapps

phpShop 0.8.1 – ‘page’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46561/info

2011-02-25 Aung Khant webapps

WordPress Plugin IWantOneButton 3.0.1 – Multiple Vulnerabilities

Vulnerability ID: HTB22846

2011-02-24 High-Tech Bridge SA webapps

WordPress Plugin Forum Server 1.6.5 – SQL Injection

Vulnerability ID: HTB22851

2011-02-24 High-Tech Bridge SA webapps

WordPress Plugin Relevanssi 2.7.2 – Persistent Cross-Site Scripting

# Exploit Title: Relevanssi User Searches WordPress plugin Stored XSS

2011-02-24 Saif El-Sherei webapps

WordPress Plugin GigPress 2.1.10 – Persistent Cross-Site Scripting

# Exploit Title: GigPress 2.1.10 wordpress plugin Stored XSS

2011-02-24 Saif El-Sherei webapps

Alcassoft’s SOPHIA CMS – SQL Injection

Title : Alcassoft's SOPHIA CMS Vulnerable to SQL Injection

2011-02-24 p0pc0rn webapps

VidiScript – SQL Injection

======================================

2011-02-23 ThEtA.Nu webapps

course registration management system 2.1 – Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98650/CourseMS2.1-LFI.txt

2011-02-23 AutoSec Tools webapps

WordPress Plugin Comment Rating 2.9.23 – Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98660/commentrating-sqldisclose.txt

2011-02-23 High-Tech Bridge SA webapps

ProQuiz 2.0.0b – Arbitrary File Upload

Source: http://packetstormsecurity.org/files/view/98669/ProQuiz-Shell.py.txt

2011-02-23 AutoSec Tools webapps

WordPress Plugin Z-Vote 1.1 – SQL Injection

Source: http://packetstormsecurity.org/files/view/98671/zvote-sql.txt

2011-02-23 High-Tech Bridge SA webapps

Bitweaver 2.8.1 – Persistent Cross-Site Scripting

# exploit title: persistant xss in bitweaver2.8.1

2011-02-23 lemlajt webapps

tplSoccerStats – ‘player.php’ SQL Injection

tplSoccerStats (player.php) Sql Injection Vulnerability

2011-02-23 AtT4CKxT3rR0r1ST webapps

Hyena Cart – ‘index.php’ SQL Injection

Hyena Cart (index.php) Sql Injection Vulnerability

2011-02-23 AtT4CKxT3rR0r1ST webapps

Drupal Module Cumulus 5.x-1.1/6.x-1.4 – ‘tagcloud’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46594/info

2011-02-23 MustLive webapps

WordPress Plugin YT-Audio 1.7 – ‘v’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46591/info

2011-02-23 AutoSec Tools webapps

WordPress Plugin ComicPress Manager 1.4.9 – ‘lang’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46590/info

2011-02-23 AutoSec Tools webapps

WordPress Plugin IGIT Posts Slider Widget 1.0 – ‘src’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46589/info

2011-02-23 AutoSec Tools webapps

Vanilla Forums 2.0.17.x – ‘p’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46486/info

2011-02-22 Aung Khant webapps

IBM Lotus Sametime Server 8.0 – ‘stcenter.nsf’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46481/info

2011-02-22 andrew webapps

WordPress Plugin GD Star Rating 1.9.7 – ‘wpfn’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46480/info

2011-02-22 High-Tech Bridge SA webapps

dotProject 2.1.5 – Multiple Vulnerabilities

# exploit title: sql injection in dotproject 2.1.5

2011-02-22 lemlajt webapps

Galilery 1.0 – Local File Inclusion

$ cat 15_lfi_galilery.1.0.txt

2011-02-22 lemlajt webapps

DIY Web CMS – Multiple Vulnerabilities

SQL and XSS in DIY Web CMS

2011-02-22 p0pc0rn webapps

Woltlab Burning Board 2.3.6 Addon – ‘hilfsmittel.php’ SQL Injection

#####################################################################################

2011-02-21 Crazyball webapps

Batavi 1.0 – Multiple Local File Inclusion / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46467/info

2011-02-21 AutoSec Tools webapps

JAKCMS 2.01 RC1 – Blind SQL Injection

#!/usr/bin/python

2011-02-20 mr_me webapps

JAKCMS 2.01 – Code Execution

#!/usr/bin/python

2011-02-20 mr_me webapps

Icy Phoenix 1.3.0.53a – HTTP Referer Persistent Cross-Site Scripting

# Exploit Title: Icy Phoenix 1.3.0.53a http referer stored XSS

2011-02-20 Saif El-Sherei webapps

Independent Escort CMS – Blind SQL Injection

# Exploit Title: Independent Escort CMS Blind SQL Injection Vunerability

2011-02-19 NoNameMT webapps

Escort Directory CMS – SQL Injection

# Exploit Title: Escort Directory CMS SQL Injection Vunerability

2011-02-19 NoNameMT webapps

eventum issue tracking system 2.3.1 – Persistent Cross-Site Scripting

# Exploit Title: Eventum 2.3.1 stored XSS

2011-02-19 Saif El-Sherei webapps

WSN Guest 1.24 – ‘wsnuser’ Cookie SQL Injection

source: https://www.securityfocus.com/bid/46444/info

2011-02-18 Aliaksandr Hartsuyeu webapps

GAzie 5.10 – ‘Login’ Multiple Vulnerabilities

GAzie 5.10 (Login parameter) Multiple Remote Vulnerabilities

2011-02-17 LiquidWorm webapps

WordPress Plugin User Photo Component – Arbitrary File Upload

# Exploit Title: WordPress User Photo Component Remote File Upload Vulnerability

2011-02-17 ADVtools webapps

Rae Media Real Estate Multi Agent – SQL Injection

source: https://www.securityfocus.com/bid/45212/info

2011-02-16 R4dc0re webapps

Rae Media Real Estate Single Agent – SQL Injection

source: https://www.securityfocus.com/bid/45211/info

2011-02-16 R4dc0re webapps

mySeatXT 0.164 – ‘lang’ Local File Inclusion

source: https://www.securityfocus.com/bid/46507/info

2011-02-16 AutoSec Tools webapps

Getsimple CMS 2.03 – ‘upload-ajax.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/46427/info

2011-02-15 s3rg3770 & Chuzz webapps

Photopad 1.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46385/info

2011-02-15 High-Tech Bridge SA webapps

Wikipad 1.6.0 – Cross-Site Scripting / HTML Injection / Information Disclosure

source: https://www.securityfocus.com/bid/46383/info

2011-02-15 High-Tech Bridge SA webapps

Gollos 2.8 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46379/info

2011-02-15 High-Tech Bridge SA webapps

MG2 0.5.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46378/info

2011-02-15 LiquidWorm webapps

Seo Panel 2.2.0 – SQL Injection

Vulnerability ID: HTB22824

2011-02-15 High-Tech Bridge SA webapps

omegabill 1.0 build 6 – Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98480/OmegaBillv1.0Build6-php.txt

2011-02-15 AutoSec Tools webapps

Lingxia I.C.E CMS – Blind SQL Injection

#!/usr/bin/python

2011-02-15 mr_me webapps

phpMyBitTorrent 2.0.4 – SQL Injection

# Exploit Title: phpMyBitTorrent 2.0.4 SQL injection

2011-02-15 #forkbombers webapps

RunCMS 2.2.2 – Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98472/runcms-sqlxss.txt

2011-02-14 High-Tech Bridge SA webapps

jSchool Advanced – SQL Injection

-----------------------------------------------------------------------

2011-02-14 eXa.DisC webapps