webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

TinyMCE MCFileManager 2.1.2 – Arbitrary File Upload

==============================================

2010-10-03 Hackeri-AL webapps

TradeMC E-Ticaret – SQL Injection / Cross-Site Scripting

===================================================

2010-10-02 KnocKout webapps

SmarterMail < 7.2.3925 - LDAP Injection

########################################################################

2010-10-02 sqlhacker webapps

SmarterMail < 7.2.3925 - Persistent Cross-Site Scripting

Source URL

2010-10-02 sqlhacker webapps

Bka Haber 1.0 (Tr) – File Disclosure

#!/usr/bin/env python

2010-10-02 ZoRLu webapps

Intellicom Netbiter webSCADA Products – ‘read.cgi’ Multiple Remote Security Vulnerabilities

source: https://www.securityfocus.com/bid/43636/info

2010-10-01 Eugene Salov webapps

iGaming CMS 1.5 – Blind SQL Injection

#!/usr/bin/env perl

2010-10-01 plucky webapps

Chipmunk Board 1.3 – ‘index.php?forumID’ SQL Injection

# Exploit Title: Chipmunk Board (index.php?forumID) Remote SQL Injection Vulnerability

2010-10-01 Shamus webapps

Tiki Wiki CMS Groupware 5.2 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/43507/info

2010-10-01 John Leitch webapps

phpMyShopping 1.0.1505 – Multiple Vulnerabilities

####################################################################

2010-10-01 Metropolis webapps

jCart 1.1 – Multiple Cross-Site Scripting / Cross-Site Request Forgery/Open Redirect Vulnerabilities

2010-10-01 p0deje webapps

Evaria Content Management System 1.1 – File Disclosure

# Exploit Title: local file include / File Disclosure

2010-10-01 khayeye shotor webapps

Zen Cart 1.3.9f – ‘typefilter’ Local File Inclusion

Zen Cart v1.3.9f (typefilter) Local File Inclusion Vulnerability

2010-10-01 LiquidWorm webapps

zen cart 1.3.9f – Multiple Vulnerabilities

Zen Cart v1.3.9f Multiple Remote Vulnerabilities

2010-10-01 LiquidWorm webapps

JomSocial 1.8.8 – Arbitrary File Upload

There is a file upload vulnerability in version 1.8.8 and earlier of

2010-09-30 Jeff Channell webapps

Joomla! Component JE Directory 1.0 – SQL Injection

----------------------------Information------------------------------------------------

2010-09-30 Easy Laster webapps

Joomla! Component JE Job – SQL Injection

----------------------------Information------------------------------------------------

2010-09-30 Easy Laster webapps

ASPMass Shopping Cart – Arbitrary File Upload / Cross-Site Request Forgery

'''

2010-09-30 Abysssec webapps

Joomla! Component JE Guestbook 1.0 – Multiple Vulnerabilities

JE Guestbook 1.0 Joomla Component Multiple Remote Vulnerabilities

2010-09-30 Salvatore Fresta webapps

Getsimple CMS 2.01 – ‘changedata.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43593/info

2010-09-29 High-Tech Bridge SA webapps

Pluck CMS 4.6.3 – ‘cont1’ HTML Injection

source: https://www.securityfocus.com/bid/43597/info

2010-09-29 High-Tech Bridge SA webapps

MODx 2.0.2-pl – ‘/manager/index.php?modahsh’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43577/info

2010-09-29 John Leitch webapps

MODx manager – ‘/controllers/default/resource/tvs.php?class_key’ Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/43577/info

2010-09-29 John Leitch webapps

MyPhpAuction 2010 – ‘id’ SQL Injection

==

2010-09-29 h4ck3r webapps

Webspell 4.x – safe_query Bypass

################# INFORMATION ##################################################

2010-09-29 silent vapor webapps

Webspell wCMS-Clanscript4.01.02net – static Blind SQL Injection

#----------------------------Information------------------------------------------------

2010-09-29 Easy Laster webapps

Webspell 4.2.1 – ‘asearch.php’ SQL Injection

################# INFORMATION ##################################################

2010-09-29 silent vapor webapps

PHPMyFAQ 2.6.x – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43560/info

2010-09-28 Yam Mesicka webapps

Micro CMS 1.0 – ‘name’ HTML Injection (1)

source: https://www.securityfocus.com/bid/43556/info

2010-09-28 Veerendra G.G webapps

Micro CMS 1.0 b1 – Persistent Cross-Site Scripting

##############################################################################

2010-09-28 SecPod Research webapps

Achievo 1.4.3 – Cross-Site Request Forgery

Advisory Name: Cross Site Request Forgery in Achievo 1.4.3

2010-09-28 Pablo Milano webapps

Achievo 1.4.3 – Multiple Authorisation Vulnerabilities

Advisory Name: Multiple Authorization Flaws in Achievo 1.4.3

2010-09-28 Pablo Milano webapps

Aleza Portal 1.6 – Insecure SQL Injection / Cookie Handling

Aleza Portal v1.6 - Insecure (SQLi) Cookie Handling

2010-09-28 KnocKout webapps

e107 0.7.23 – SQL Injection

Vulnerability ID: HTB22604

2010-09-28 High-Tech Bridge SA webapps

JE CMS 1.0.0 – Authentication Bypass

'''

2010-09-28 Abysssec webapps

AtomatiCMS – Upload Arbitrary File

'''

2010-09-28 Abysssec webapps

NetArt Media Car Portal 2.0 – ‘car’ SQL Injection

source: https://www.securityfocus.com/bid/43536/info

2010-09-27 RoAd_KiLlEr webapps

Horde IMP Webmail 4.3.7 – ‘fetchmailprefs.php’ HTML Injection

source: https://www.securityfocus.com/bid/43515/info

2010-09-27 Moritz Naumann webapps

MySITE – SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/43510/info

2010-09-27 MustLive webapps

Car Portal 2.0 – Blind SQL Injection

[+]Title Car Portal v2.0 BLIND SQL Injection Vulnerability

2010-09-27 **RoAd_KiLlEr** webapps

Barracuda Networks Spam & Virus Firewall 4.1.1.021 – Remote Configuration Retrieval

#!/bin/bash

2010-09-27 ShadowHatesYou webapps

Allpc 2.5 osCommerce – SQL Injection / Cross-Site Scripting

[+]Title Allpc 2.5 osCommerce SQL-i/XSS Multiple Vulnerabilities

2010-09-27 **RoAd_KiLlEr** webapps

Entrans – SQL Injection

# Exploit Title: Entrans SQLi vulnerablility

2010-09-27 keracker webapps

ndCMS – SQL Injection

'''

2010-09-27 Abysssec webapps

pbboard 2.1.1 – Multiple Vulnerabilities

==================================================

2010-09-27 JIKO webapps

Blue River Mura CMS – Directory Traversal

Sep 24, 2010

2010-09-26 mr_me webapps

PEEL Premium 5.71 – SQL Injection

============================================

2010-09-26 KnocKout webapps

gokhun asp stok 1.0 – Multiple Vulnerabilities

============================================

2010-09-26 KnocKout webapps

ZenPhoto – Config Update / Command Execution

2010-09-26 Abysssec webapps

E-Xoopport Samsara 3.1 (eCal Module) – Blind SQL Injection

#!/usr/bin/perl

2010-09-25 _mRkZ_ webapps