webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Freelancers Marketplace Script – Persistent Cross-Site Scripting

Name : Freelancers Marketplace Script Persistent XSS Vulnerability

2010-07-17 Sid3^effects webapps

Group Office – ‘comment_id’ SQL Injection

# Title

2010-07-16 Canberk BOLAT webapps

ActiTime 2.0-MA – Cross-Site Request Forgery

|------------------------------------------------------------------|

2010-07-16 Markot webapps

Group Office – Remote Command Execution

# Title

2010-07-16 ADEO Security webapps

Pre Podcast Portal – Authentication Bypass

#################################################################

2010-07-16 D4rk357 webapps

Pre SoftClones Marketing Management System – Authentication Bypass

#################################################################

2010-07-16 D4rk357 webapps

Pre E-Smart Cart – Authentication Bypass

#################################################################

2010-07-16 D4rk357 webapps

Pre Dynamic Institution – Web Authentication Bypass

#################################################################

2010-07-16 D4rk357 webapps

Pre Web Host System – Authentication Bypass

#################################################################

2010-07-16 D4rk357 webapps

BS Scripts Directory – ‘articlesdetails.php’ SQL Injection

#################################################################

2010-07-16 k4k4shi webapps

Sourcefabric Campsite Articles – HTML Injection

source: https://www.securityfocus.com/bid/41780/info

2010-07-15 D4rk357 webapps

Pligg CMS 1.0.4 – ‘search.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41729/info

2010-07-15 High-Tech Bridge SA webapps

Pixie 1.0.4 – HTML Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/41727/info

2010-07-15 High-Tech Bridge SA webapps

Gekko Web Builder 9.0 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41726/info

2010-07-15 High-Tech Bridge SA webapps

FestOS 2.3 – ‘contents’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41725/info

2010-07-15 High-Tech Bridge SA webapps

DSite CMS 4.81 – ‘modmenu.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41724/info

2010-07-15 High-Tech Bridge SA webapps

PHPWCMS 1.4.5 – ‘PHPwcms.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41720/info

2010-07-15 High-Tech Bridge SA webapps

Spitfire 1.0.381 – Cross-Site Scripting / Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/41701/info

2010-07-15 Nijel the Destroyer webapps

BS Scripts Directory – ‘info.php’ SQL Injection

#################################################################

2010-07-15 D4rk357 webapps

ORACLE Business Process Management (Process Administrator) 5.7-6.0-10.3 – Cross-Site Scripting

|------------------------------------------------------------------|

2010-07-15 Markot webapps

Joomla! Component redSHOP 1.0.23.1 – Blind SQL Injection

RedShop 1.0.23.1 Joomla Component Blind SQL Injection Vulnerability

2010-07-15 Salvatore Fresta webapps

Whizzy CMS 10.01 – Local File Inclusion

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

2010-07-15 Anarchy Angel webapps

Campsite CMS – Remote Persistent Cross-Site Scripting

#################################################################

2010-07-15 D4rk357 webapps

eXtreme Message Board 1.9.11 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Change Admin Password ]=-

2010-07-15 10n1z3d webapps

Nagios3 – ‘statuswml.cgi’ ‘Ping’ Command Execution (Metasploit)

##

2010-07-14 Metasploit webapps

Ad Network Script – Persistent Cross-Site Scripting

1 ########################################## 1

2010-07-14 Sid3^effects webapps

CMSQLite – SQL Injection

# Vulnerability ID: HTB22462

2010-07-14 High-Tech Bridge SA webapps

ZenPhoto CMS 1.3 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Change Admin Password ]=-

2010-07-14 10n1z3d webapps

2DayBiz Businesscard Script – Authentication Bypass

# Exploit Title: 2daybiz Businesscard Script Authentication bypass

2010-07-14 D4rk357 webapps

Diem 5.1.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41587/info

2010-07-13 High-Tech Bridge SA webapps

CustomCMS – Persistent Cross-Site Scripting

1 ########################################## 1

2010-07-13 Sid3^effects webapps

dotDefender 4.02 – Authentication Bypass

dotDefender is prone to a XSS because it doesn't satinate the input vars

2010-07-13 David K webapps

AJ Article 3.0 – Cross-Site Scripting

1 ########################################## 1

2010-07-13 Sid3^effects webapps

Diferior CMS 8.03 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Change Admin Password ]=-

2010-07-13 10n1z3d webapps

I-net Enquiry Management Script – SQL Injection

Name : I-net Enquiry management Script SQL Injection Vulnerability

2010-07-13 D4rk357 webapps

Joomla! Component com_qcontacts – SQL Injection

# Exploit Title: Joomla Component QContacts (com_qcontacts) - SQL Injection Vulnerability

2010-07-13 _mlk_ webapps

dotDefender 4.02 – ‘clave’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41541/info

2010-07-12 David K webapps

Grafik CMS 1.1.2 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Change Admin Password ]=-

2010-07-12 10n1z3d webapps

Campsite CMS 3.4.0 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Create Admin User ]=-

2010-07-12 10n1z3d webapps

Getsimple CMS 2.01 – Multiple Vulnerabilities

-=[ CSRF PoC 1 - Change Admin Password ]=-

2010-07-12 10n1z3d webapps

TheHostingTool 1.2.2 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Create Staff Account ]=-

2010-07-12 10n1z3d webapps

Joomla! Component EasyBlog – Persistent Cross-Site Scripting

Name : Joomla EasyBlog Persistent XSS Vulnerability

2010-07-12 Sid3^effects webapps

Joomla! Component healthstats – Persistent Cross-Site Scripting

Name : Joomla Health & Fitness Stats Persistent XSS Vulnerability

2010-07-12 Sid3^effects webapps

CMS Made Simple Module Antz Toolkit 1.02 – Arbitrary File Upload

source: https://www.securityfocus.com/bid/41569/info

2010-07-11 John Leitch webapps

CMS Made Simple 1.8 – ‘default_cms_lang’ Local File Inclusion

source: https://www.securityfocus.com/bid/41565/info

2010-07-11 John Leitch webapps

CMS Made Simple Module Download Manager 1.4.1 – Arbitrary File Upload

source: https://www.securityfocus.com/bid/41564/info

2010-07-11 John Leitch webapps

RunCMS 2.1 – ‘magpie_debug.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41551/info

2010-07-11 John Leitch webapps

CSSTidy 1.3 – ‘css_optimiser.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41552/info

2010-07-11 John Leitch webapps

Mac’s CMS 1.1.4 – ‘SearchString’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41529/info

2010-07-11 10n1z3d webapps

Orbis CMS 1.0.2 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Change Admin Password ]=-

2010-07-11 10n1z3d webapps