webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

freediscussionforums 1.0 – Multiple Vulnerabilities

'''

2010-09-14 Abysssec webapps

Joomla! Component JGen 0.9.33 – SQL Injection

[+]Title Joomla JGen Component (com_jgen) SQL-i Vulnerability

2010-09-14 **RoAd_KiLlEr** webapps

UCenter Home 2.0 – SQL Injection

__--==UCenter Home 2.0 -(0day) Remote SQL Injection Vulnerability==--__

2010-09-13 KnocKout webapps

Storyteller CMS – ‘var’ Local File Inclusion

==

2010-09-13 h4ck3r webapps

Joomla! Component com_mtree 2.1.5 – Arbitrary File Upload

# Exploit Title: Joomla Component Mosets Tree 2.1.5 Shell Upload

2010-09-13 jdc webapps

Luftguitar CMS – Upload Arbitrary File

'''

2010-09-13 Abysssec webapps

osDate – ‘uploadvideos.php’ Arbitrary File Upload

====================================================

2010-09-13 Xa7m3d webapps

Group Office 3.5.9 – SQL Injection

=====================================================================================

2010-09-13 ViciOuS webapps

Alstrasoft AskMe Pro 2.1 – ‘profile.php’ SQL Injection

########################################################################################

2010-09-12 CoBRa_21 webapps

System Shop – ‘Module aktka’ SQL Injection

_____ ______ _____ _____ ______ _______

2010-09-12 secret webapps

eshtery CMS – SQL Injection

'''

2010-09-12 Abysssec webapps

MyHobbySite 1.01 – SQL Injection / Authentication Bypass

#########################################################################################

2010-09-12 YuGj VN webapps

piwigo-2.1.2 – Multiple Vulnerabilities

--=Sql injection=--

2010-09-11 Sweet webapps

ASP Nuke – SQL Injection

'''

2010-09-11 Abysssec webapps

Datetopia Buy Dating Site – Cross-Site Scripting

source: https://www.securityfocus.com/bid/42973/info

2010-09-10 Moudi webapps

symphony 2.0.7 – Multiple Vulnerabilities

Symphony 2.0.7 Multiple Vulnerabilities

2010-09-10 JosS webapps

fcms 2.2.3 – Remote File Inclusion

[x] Exploit Title: [FCMS_2.2.3 Remote File Inclusion ]

2010-09-10 LoSt.HaCkEr webapps

Joomla! Component Jphone 1.0 Alpha 3 – Local File Inclusion

JPhone 1.0 Alpha 3 Component Joomla Local File Inclusion

2010-09-10 Chip d3 bi0s webapps

SmarterTools SmarterStats 5.3.3819 – ‘frmHelp.aspx’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43110/info

2010-09-09 David Hoyt webapps

CS-Cart 1.3.3 – ‘install.php’ Cross-Site Scripting

# Exploit Title: [CS CART 1.3.3 INSTALL.PHP XSS]

2010-09-09 crmpays webapps

ES Simple Download 1.0. – Local File Inclusion

----------------------------Information------------------------------------------------

2010-09-09 Kazza webapps

aradblog – Multiple Vulnerabilities

'''

2010-09-09 Abysssec webapps

Visitors Google Map Lite 1.0.1 Free mod_visitorsgooglemap Module – SQL Injection

Visitors Google Map Lite 1.0.1 (FREE) (module mod_visitorsgooglemap Remote Sql Injection)

2010-09-09 Chip d3 bi0s webapps

festos CMS 2.3b – Multiple Vulnerabilities

'''

2010-09-09 Abysssec webapps

sirang web-based d-control – Multiple Vulnerabilities

'''

2010-09-08 Abysssec webapps

ZenPhoto 1.3 – ‘/zp-core/admin.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43021/info

2010-09-07 Bogdan Calin webapps

ZenPhoto 1.3 – ‘/zp-core/full-image.php?a’ SQL Injection

source: https://www.securityfocus.com/bid/43021/info

2010-09-07 Bogdan Calin webapps

1024 CMS 2.1.1 – Blind SQL Injection

# Exploit Title: 1024cms 2.1.1 Blind SQL Injection Vulnerability

2010-09-07 Stephan Sattler webapps

ColdUserGroup 1.06 – Blind SQL Injection

#!/usr/bin/python

2010-09-07 mr_me webapps

ColdOfficeView 2.04 – Multiple Blind SQL Injections

# ColdGen - coldofficeview v2.04 Remote Blind SQL Injection vulnerabilities

2010-09-07 mr_me webapps

ColdBookmarks 1.22 – SQL Injection

# ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability

2010-09-07 mr_me webapps

ColdCalendar 2.06 – SQL Injection

#!/usr/bin/python

2010-09-07 mr_me webapps

java Bridge 5.5 – Directory Traversal

Date : Sep 6, 2010

2010-09-07 Saxtor webapps

dynpage 1.0 – Multiple Vulnerabilities

'''

2010-09-07 Abysssec webapps

Santafox 2.0.2 – ‘search’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43237/info

2010-09-06 High-Tech Bridge SA webapps

MySource Matrix – ‘char_map.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43020/info

2010-09-06 Gjoko Krstic webapps

HeffnerCMS 1.22 – ‘index.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/43006/info

2010-09-06 MiND C0re webapps

Horde Application Framework 3.3.8 – ‘icon_browser.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43001/info

2010-09-06 Moritz Naumann webapps

BlueCMS 1.6 – ‘x-forwarded-for’ Header SQL Injection

source: https://www.securityfocus.com/bid/42999/info

2010-09-06 cnryan webapps

WordPress Plugin Events Manager Extended – Persistent Cross-Site Scripting

# Author: Craw

2010-09-06 Craw webapps

Joomla! Component Aardvertiser 2.1 – Blind SQL Injection

# Exploit Title: Joomla Component Aardvertiser 2.1 free Blind SQL Injection Vulnerability

2010-09-06 Stephan Sattler webapps

Micronetsoft Rental Property Management Website – SQL Injection

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]

2010-09-06 L0rd CrusAd3r webapps

InterPhoto Gallery – Multiple Vulnerabilities

'''

2010-09-06 Abysssec webapps

Micronetsoft RV Dealer Website – SQL Injection

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]

2010-09-06 L0rd CrusAd3r webapps

DMXReady Members Area Manager – Persistent Cross-Site Scripting

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]

2010-09-06 L0rd CrusAd3r webapps

ChillyCMS 1.1.3 – Multiple Vulnerabilities

##########################www.BugReport.ir########################################

2010-09-05 AmnPardaz webapps

Joomla! Component Gantry 3.0.10 – Blind SQL Injection

#!/bin/bash

2010-09-05 jdc webapps

Softbiz Article Directory Script – ‘sbiz_id’ Blind SQL Injection

===========================================================

2010-09-05 h4ck3r webapps

DMXready Polling Booth Manager – SQL Injection

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]

2010-09-05 L0rd CrusAd3r webapps

Joomla! Component Clantools 1.2.3 – Multiple Blind SQL Injections

# Exploit Title: Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerability

2010-09-05 Solidmedia webapps