webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Esvon Classifieds 4.0 – Multiple Vulnerabilities
1 ########################################## 1
pecio CMS 2.0.5 – Multiple Remote File Inclusions
======================================================================
CompuCMS – Multiple SQL Injections / Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/42773/info
Valarsoft WebMatic 3.0.5 – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/42767/info
TCMS – Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/42766/info
Joomla! Component com_remository – Arbitrary File Upload
#################################################################
Gaestebuch 1.2 – Remote File Inclusion
########################################################
kontakt formular 1.1 – Remote File Inclusion
########################################################
Mini-CMS / News Script Light 1.0 – Remote File Inclusion
#!/usr/bin/perl
Prometeo 1.0.65 – SQL Injection
=================================
Hycus CMS 1.0.1 – Multiple Cross-Site Request Forgery Vulnerabilities
-=[ CSRF PoC 1 - Change Admin Password ]=-
Atomic Photo Album 1.0.2 – Multiple Vulnerabilities
[~] Atomic Photo Album 1.0.2 (SQL/XSS) Multiple Remote Vulnerabilities
osCommerce Online Merchant – Remote File Inclusion
# Exploit Title: [oscommerce-3.0a5 Remote File Inclusion ]
BlastChat Client 3.3 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/42734/info
Acunetix Web Vulnerability Scanner – DLL Loading Arbitrary Code Execution
// source: https://www.securityfocus.com/bid/42697/info
ClanSphere 2010 – Multiple Vulnerabilities
############################################################################
Simple Forum PHP – Multiple Vulnerabilities
# Exploit Title: Simple Forum PHP (XSS/HTML Injection Vulnerabilities)
Joomla! 1.5 – URL Redirecting
============================================
Auto CMS 1.6 – ‘autocms.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42764/info
AneCMS 1.0/1.3 – ‘register/next’ SQL Injection
source: https://www.securityfocus.com/bid/42615/info
Joomla! Component com_zoomportfolio – SQL Injection
---------------------------------------------------------------------------------
Link CMS – SQL Injection
# Exploit Title: LINK CMS.SQL Injection Vulnerability
AneCMS – ‘/registre/next’ SQL Injection
############################################################################
Gazelle CMS – Multiple Vulnerabilities
############################################################################
4Images 1.7.8 – Remote File Inclusion
# Exploit Title: [4images1.7.8 Remote File Include ]
netStartEnterprise 4.0 – SQL Injection
=======================================
Joomla! Component Fabrik – SQL Injection
$##################################################################$
T-dreams Announcement Script – SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Joomla! Component Biblioteca 1.0 Beta – Multiple SQL Injections
Biblioteca 1.0 Beta Joomla Component Multiple SQL Injection Vulnerabilities
Joomla! Component com_zina – SQL Injection
# Exploit Title: Joomla Component com_zina SQL Injection Vulnerability
Joomla! Component com_extcalendar – Blind SQL Injection
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
Cacti 0.8.7 (RedHat High Performance Computing [HPC]) – ‘utilities.php?Filter’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42575/info
Syntax Highlighter 3.0.83 – ‘index.html’ HTML Injection
source: https://www.securityfocus.com/bid/42572/info
vbbuletin 4.0.4 – Multiple Vulnerabilities
|| #################################################################### ||
Joomla! Component com_dirfrm – Multiple SQL Injections
source: https://www.securityfocus.com/bid/42512/info
Open-Realty 2.5.7 – Local File Disclosure
include the image and sh.php will be generated.
Free Simple Software 1.0 – Remote File Inclusion
########################################################
123 Flash Chat 7.8 – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/42478/info
CMSimple 3.3 – Cross-Site Scripting / Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/42470/info
Joomla! Component com_ongallery – SQL Injection
===================================================
Joomla! Component com_jgrid 1.0 – Local File Inclusion
Jgrid 1.0 Joomla Component Local File Inclusion Vulnerability
Joomla! Component com_equipment – SQL Injection
# Exploit Title : Joomla "com_equipment" Sql Injection Vulnerability
Joomla! Component com_fireboard – ‘Itemid’ SQL Injection
source: https://www.securityfocus.com/bid/42460/info
Zomplog 3.9 – ‘message’ Cross-Site Scripting
souce: https://www.securityfocus.com/bid/42457/info
Joomla! Component Weblinks – ‘Itemid’ SQL Injection
source: https://www.securityfocus.com/bid/42455/info
CMSQLite 1.2 / CMySQLite 1.3.1 – Remote Code Execution
#!/usr/bin/php -q -d short_open_tag=on
Zomplog 3.9 – Cross-Site Scripting / Cross-Site Request Forgery
-=[ CSRF PoC 1 - Change Admin Password ]=-
Guestbook Script PHP – Cross-Site Scripting / HTML Injection
=======================================================================
PHP-Fusion – Local File Inclusion
# Exploit Title: PHP-Fusion Local File Includes Vulnerability