webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

AWCM 2.2 Final – Persistent Cross-Site Scripting

# Exploit Title: AWCM v2.2 final Persistent Cross Site Script

2011-02-14 _84kur10_ webapps

PixelPost 1.7.3 – Multiple POST SQL Injections

--------------------------------------------------------------------

2011-02-12 LiquidWorm webapps

Escort Agency CMS – Blind SQL Injection

# Exploit Title: Escort Agency CMS Blind SQL Injection Vunerability

2011-02-12 NoNameMT webapps

TaskFreak! 0.6.4 – Multiple Cross-Site Scripting Vulnerabilities

################################################################

2011-02-12 LiquidWorm webapps

Dokeos 1.8.6 2 – ‘style’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46370/info

2011-02-12 AutoSec Tools webapps

TaskFreak! 0.6.4 – ‘rss.php’ HTTP Referer Header Cross-Site Scripting

source: https://www.securityfocus.com/bid/46350/info

2011-02-12 LiquidWorm webapps

TaskFreak! 0.6.4 – ‘print_list.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46350/info

2011-02-12 LiquidWorm webapps

TaskFreak! 0.6.4 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46350/info

2011-02-12 LiquidWorm webapps

Drupal Module CAPTCHA – Security Bypass

source: https://www.securityfocus.com/bid/46344/info

2011-02-11 anonymous webapps

Openedit 5.1294 – Remote Code Execution

#!/usr/bin/python

2011-02-11 mr_me webapps

Kunena < 1.5.13 / < 1.6.3 - SQL Injection

Vendor/Product: Kunena

2011-02-11 Red Matter webapps

Geomi CMS 1.2/3.0 – SQL Injection

#########################################################################

2011-02-11 ThunDEr HeaD webapps

Horde – Horde_Image::factory driver Argument Local File Inclusion

# Exploit Title: Horde Horde_Image::factory driver Argument Local File

2011-02-11 skysbsb webapps

LocatePC 1.05 (Ligatt Version + Others) – SQL Injection

#Affected Software:

2011-02-10 anonymous webapps

RunCMS 2.2.2 – ‘register.php’ SQL Injection

source: https://www.securityfocus.com/bid/46342/info

2011-02-10 High-Tech Bridge SA webapps

webERP 4.0.1 – ‘InputSerialItemsFile.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/46341/info

2011-02-10 AutoSec Tools webapps

Dolphin 7.0.4 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46337/info

2011-02-10 AutoSec Tools webapps

ManageEngine ADSelfService Plus 4.4 – ‘EmployeeSearch.cc’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46331/info

2011-02-10 Core Security webapps

ManageEngine ADSelfService Plus 4.4 – POST Manipulation Security Question

source: https://www.securityfocus.com/bid/46331/info

2011-02-10 Core Security webapps

Smarty Template Engine 2.6.9 – ‘$smarty.template’ PHP Code Injection

source: https://www.securityfocus.com/bid/46366/info

2011-02-09 jonieske webapps

PHPXref 0.7 – ‘nav.html’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46302/info

2011-02-09 MustLive webapps

SourceBans 1.4.7 – Cross-Site Scripting

# Exploit Title: SourceBans Version 1.4.7 XSS

2011-02-09 Sw1tCh webapps

WordPress Plugin Enable Media Replace – Multiple Vulnerabilities

PRODUCT NAME: Enable Media Replace WordPress Plugin

2011-02-09 Ulf Harnhammar webapps

MihanTools Script 1.3.3 – SQL Injection

# Exploit Title: MihanTools Script SQL Injection Vunerability

2011-02-09 WHITE_DEVIL webapps

Web 2.0 Social Network Freunde Community – SQL Injection

# Exploit Title: Web 2.0 Social Network Freunde Community SQL Injection

2011-02-09 NoNameMT webapps

Auto Database System 1.0 Infusion Addon – SQL Injection

# Exploit Title: PHP-Fusion Auto Database System 1.0 Infusion SQL injection

2011-02-09 Saif webapps

AIOCP 1.4.001 – Cross-Site Request Forgery

Source: http://packetstormsecurity.org/files/view/98247/AIOCP-1.4.001-xsrf.txt

2011-02-08 AutoSec Tools webapps

dotProject 2.1.5 – Cross-Site Request Forgery

Source: http://packetstormsecurity.org/files/view/98245/dotProject2.1.5-xsrf.txt

2011-02-08 AutoSec Tools webapps

Model Agentur Script – SQL Injection

# Exploit Title: Model Agentur Script SQL Injection Vunerability

2011-02-08 NoNameMT webapps

UMI CMS 2.8.1.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46280/info

2011-02-08 High-Tech Bridge SA webapps

CiviCRM 3.3.3 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46275/info

2011-02-08 AutoSec Tools webapps

ViArt Shop 4.0.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46256/info

2011-02-08 High-Tech Bridge SA webapps

WebAsyst Shop-Script – Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/46250/info

2011-02-08 High-Tech Bridge SA webapps

Escortservice 1.0 – ‘custid’ SQL Injection

source: https://www.securityfocus.com/bid/46171/info

2011-02-07 NoNameMT webapps

SWFupload 2.5.0 Beta 3 – Arbitrary File Upload

# Exploit Title: SWFUpload v2.5.0 Beta 3 File Arbitrary Upload

2011-02-07 Daniel Godoy webapps

MyMarket 1.71 – ‘index.php’ SQL Injection

# Exploit Title: MyMarket version 1.71(index.php) sql Injection

2011-02-07 ahmadso webapps

jakcms 2.0 pro rc5 – Persistent Cross-Site Scripting via useragent http header Injection

# Exploit Title: JAKCMS 2.0 PRO RC5 stored XSS via useragent HTTP header

2011-02-07 Saif El-Sherei webapps

T-Content Managment System – Multiple Vulnerabilities

# Exploit Title: T-Content Managment Multiple Vulnerability

2011-02-07 Daniel Godoy webapps

Dew-NewPHPLinks 2.1b – ‘index.php’ SQL Injection

Dew-NewPHPLinks v.2.1b (index.php) Sql Injection Vulnerability

2011-02-06 AtT4CKxT3rR0r1ST webapps

Escort und Begleitservice Agentur Script – SQL Injection

# Exploit Title: Escort und Begleitservice Agentur Script SQL Injection

2011-02-05 NoNameMT webapps

Qcodo Development Framework 0.3.3 – Full Information Disclosure

# Exploit Title: Qcodo Development Framework 0.3.3 Full Info

2011-02-05 Daniel Godoy webapps

Chamilo 1.8.7 / Dokeos 1.8.6 – Remote File Disclosure

# Title: Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure

2011-02-05 beford webapps

osCommerce – Authentication Bypass

This is a bug on old oscommerce / creloaded i just didn't find it in the

2011-02-04 Nicolas Krassas webapps

reos 2.0.5 – Multiple Vulnerabilities

=====================================

2011-02-04 High-Tech Bridge SA webapps

Podcast Generator 1.3 – Multiple Vulnerabilities

========================================

2011-02-04 High-Tech Bridge SA webapps

OemPro 3.6.4 – Multiple Vulnerabilities

# Exploit title: Multiple vulnerabilities on OemPro

2011-02-03 Ignacio Garrido webapps

Islam Sound IV2 – ‘details.php’ SQL Injection

# Lab : ZxH-Lab's

2011-02-03 ZxH-Labs webapps

Firebook – ‘index.html’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46143/info

2011-02-03 MustLive webapps

Octeth Oempro 3.6.4 – SQL Injection / Information Disclosure

source: https://www.securityfocus.com/bid/46135/info

2011-02-03 Ignacio Garrido webapps

Betsy 4.0 – ‘page’ Local File Inclusion

source: https://www.securityfocus.com/bid/46124/info

2011-02-02 MizoZ webapps