webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

TCExam 11.1.16 – ‘user_password’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46096/info

2011-02-02 AutoSec Tools webapps

Zikula CMS 1.2.4 – Cross-Site Request Forgery

Source: http://packetstormsecurity.org/files/view/98060/zikulacms-xsrf.txt

2011-02-02 Aung Khant webapps

RedaxScript 0.3.2 – Multiple Vulnerabilities

==================================

2011-02-02 High-Tech Bridge SA webapps

Raja Natarajan Guestbook 1.0 – Local File Inclusion

~ Raja Natarajan GUestbook 1.0 Local File Inclusion Exploit

2011-02-02 h0rd webapps

Joomla! 1.5/1.6 – JFilterInput Cross-Site Scripting Bypass

# Exploit Title: Joomla! JFilterInput XSS Bypass

2011-02-01 Jeff Channell webapps

TinyWebGallery 1.8.3 – Multiple Vulnerabilities

Date: 01/02/2011 (dd/MM/yyyy)

2011-02-01 Yam Mesicka webapps

NetLink – Arbitrary File Upload

======================================

2011-02-01 lumut-- webapps

PMB Services 3.4.3 – SQL Injection

888 888 888

2011-02-01 Luchador webapps

ACollab – ‘t’ SQL Injection

source: https://www.securityfocus.com/bid/46095/info

2011-02-01 AutoSec Tools webapps

WordPress Plugin TagNinja 1.0 – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46090/info

2011-02-01 AutoSec Tools webapps

TinyWebGallery 1.8.3 – Cross-Site Scripting / Local File Inclusion

source: https://www.securityfocus.com/bid/46086/info

2011-02-01 Yam Mesicka webapps

Moodle 2.0.1 – ‘PHPCOVERAGE_HOME’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46085/info

2011-02-01 AutoSec Tools webapps

Joomla! Component com_frontenduseraccess – Local File Inclusion

source: https://www.securityfocus.com/bid/46081/info

2011-02-01 wishnusakti webapps

Joomla! Component com_clan_members – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/46080/info

2011-02-01 FL0RiX webapps

All In One Control Panel 1.4.1 – ‘cp_menu_data_file.php’ SQL Injection

source: https://www.securityfocus.com/bid/46097/info

2011-01-31 AutoSec Tools webapps

Joomla! Component com_virtuemart 1.1.6 – SQL Injection

source: https://www.securityfocus.com/bid/46070/info

2011-01-31 Andrea Fabrizi webapps

eSyndiCat Directory Software 2.2/2.3 – ‘preview’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46082/info

2011-01-30 Avram Marius webapps

vBSEO 3.2.2/3.5.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46068/info

2011-01-30 MaXe webapps

RW-Download 4.0.6 – ‘index.php’ SQL Injection

/////////////////////////_Dr.NeT_/////////////////////////////////_Dr.NeT_//////////////////////_Dr.NeT_//////////*

2011-01-30 Dr.NeT webapps

vBSEO Sitemap 2.5/3.0 – Multiple Vulnerabilities

vBSEO Sitemap - Multiple Vulnerabilities

2011-01-30 MaXe webapps

vBSEO 3.2.2/3.5.2 – Persistent Cross-Site Scripting via LinkBacks

vBSEO - Persistent XSS via LinkBacks

2011-01-30 MaXe webapps

MultiCMS – Local File Inclusion

Source: http://packetstormsecurity.org/files/view/97987/multicms-lfi.txt

2011-01-29 R3VAN_BASTARD webapps

PHP Script Directory Software – ‘sbcat_id’ SQL Injection

==

2011-01-28 h4ck3r webapps

PHP Classified ads software – ‘cid’ Blind SQL Injection

==

2011-01-28 h4ck3r webapps

PHP Link Directory Software – ‘sbcat_id’ SQL Injection

==

2011-01-28 h4ck3r webapps

comercioplus 5.6 – Multiple Vulnerabilities

# Exploit Title: Comerciosonline CMS SQLi

2011-01-27 Daniel Godoy webapps

Vanilla Forums 2.0.16 – ‘Target’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46039/info

2011-01-27 YGN Ethical Hacker Group webapps

SimpGB 1.49.2 – ‘Guestbook.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46033/info

2011-01-26 MustLive webapps

Xnova Legacies 2009.2 – Cross-Site Request Forgery

# Exploit Title: Xnova Legacies 2009.2 CSRF

2011-01-26 Xploit A Day webapps

MultiPowUpload 2.1 – Arbitrary File Upload

[#] Exploit Title: MultiPowUpload v 2.1 Remote File Upload Vulnerability

2011-01-26 DIES3L webapps

sap crystal report server 2008 – Directory Traversal

Source: http://packetstormsecurity.org/files/view/97865/DSECRG-11-003.txt

2011-01-26 Dmitriy Chastuhin webapps

Froxlor 0.9.15 – Remote File Inclusion

# Exploit Title: Froxlor v 0.9.15 Remote file include vulnerbility

2011-01-26 DIES3L webapps

class.upload.php 0.30 – Arbitrary File Upload

[#] Exploit Title: class.upload.php v 0.30 Remote File Upload Vulnerability

2011-01-26 DIES3L webapps

AWCM 2.2 Final – Local File Inclusion

[+]Exploit Title: [awcm v2.2 final Local File Inclusion]

2011-01-26 Cucura webapps

PHPDirector Game Edition – ‘game.php’ SQL Injection

PHPDirector Game Edition (game.php) Sql Injection Vulnerability

2011-01-26 AtT4CKxT3rR0r1ST webapps

ab Web CMS 1.35 – Multiple Vulnerabilities

[!] AB WEB CMS V.1.35 Multiple Remote Vulnerabilities

2011-01-25 Dr.0rYX & Cr3W-DZ webapps

WordPress Plugin FCChat Widget 2.1.7 – ‘path’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46009/info

2011-01-25 AutoSec Tools webapps

WordPress Plugin BezahlCode Generator 1.0 – ‘gen_name’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46005/info

2011-01-25 AutoSec Tools webapps

WordPress Plugin Recip.ly 1.1.7 – ‘uploadImage.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/46002/info

2011-01-25 AutoSec Tools webapps

WordPress Plugin Featured Content 0.0.1 – ‘listid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46001/info

2011-01-25 AutoSec Tools webapps

PivotX 2.2 – ‘/pivotx/includes/timwrapper.php?src’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45996/info

2011-01-25 High-Tech Bridge SA webapps

PivotX 2.2 – ‘/pivotx/includes/blogroll.php?color’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45996/info

2011-01-25 High-Tech Bridge SA webapps

WordPress Plugin Videox7 UGC 2.5.3.2 – ‘listid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45990/info

2011-01-25 AutoSec Tools webapps

ActiveWeb Professional 3.0 – Arbitrary File Upload

source: https://www.securityfocus.com/bid/45985/info

2011-01-25 StenoPlasma webapps

PivotX 2.2.2 – ‘module_image.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45983/info

2011-01-25 AutoSec Tools webapps

web@all 1.1 – ‘url’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45976/info

2011-01-25 AutoSec Tools webapps

WordPress Plugin oQey-Gallery 0.2 – ‘tbpv_domain’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46007/info

2011-01-24 AutoSec Tools webapps

WordPress Plugin Powerhouse Museum Collection Image Grid 0.9.1.1 – ‘tbpv_username’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46006/info

2011-01-24 AutoSec Tools webapps

WordPress Plugin Feature Slideshow 1.0.6 – ‘src’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46004/info

2011-01-24 AutoSec Tools webapps

WordPress Plugin Uploader 1.0 – ‘num’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45984/info

2011-01-24 AutoSec Tools webapps