webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

TomatoCMS 2.0.5 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Change Administrator Password ]=-

2010-07-11 10n1z3d webapps

TomatoCart 1.0.1 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Create Admin User ]=-

2010-07-11 10n1z3d webapps

Frog CMS 0.9.5 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Create Admin User ]=-

2010-07-11 10n1z3d webapps

Macs CMS 1.1.4 – Cross-Site Scripting / Cross-Site Request Forgery

-=[ CSRF PoC 1 - Create Admin User ]=-

2010-07-11 10n1z3d webapps

eliteCMS 1.01 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41537/info

2010-07-10 10n1z3d webapps

Joomla! Component Rapid-Recipe – HTML Injection

source: https://www.securityfocus.com/bid/41531/info

2010-07-10 Sid3^effects webapps

Joomla! Component Rapid-Recipe – Persistent Cross-Site Scripting

1 ########################################## 1

2010-07-10 Sid3^effects webapps

My Kazaam Address & Contact ORGanizer – SQL Injection

) ) ) ( ( ( ( ( ) )

2010-07-10 v3n0m webapps

My Kazaam Notes Management System – Multiple Vulnerabilities

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]

2010-07-10 L0rd CrusAd3r webapps

Sillaj time tracking tool – Authentication Bypass

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]

2010-07-10 L0rd CrusAd3r webapps

Edgephp ClickBank Affiliate Marketplace Script – Multiple Vulnerabilities

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]

2010-07-10 L0rd CrusAd3r webapps

PHP-Nuke 8.1.0.3.5b (Your_Account Module) – Blind SQL Injection (Benchmark Mode)

# PHP-Nuke new;

2010-07-10 yawn webapps

PHP-Nuke 8.1.0.3.5b – Remote Command Execution

# PHP-Nuke

2010-07-10 yawn webapps

Elite CMS 1.01 – Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities

# Name: Elite CMS 1.01 Multiple XSS/CSRF Vulnerabilities

2010-07-10 10n1z3d webapps

PHP-Nuke 8.0 -Web_Links Module – Blind SQL Injection

# PHP-Nuke new;

2010-07-10 yawn webapps

Joomla! Component MySMS – Arbitrary File Upload

1 ########################################## 1

2010-07-10 Sid3^effects webapps

Joomla! Component MyHome – Blind SQL Injection

Name : Joomla com_myhome BSQLi Vulnerability

2010-07-10 Sid3^effects webapps

Joomla! Component redSHOP 1.0 – ‘pid’ SQL Injection

) ) ) ( ( ( ( ( ) )

2010-07-10 v3n0m webapps

WordPress Plugin Firestats 1.6.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41548/info

2010-07-09 Jelmer de Hen webapps

Yappa 3.1.2 – ‘yappa.php’ Multiple Remote Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/41521/info

2010-07-09 Sn!pEr.S!Te Hacker webapps

SimpNews 2.47.3 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41517/info

2010-07-09 MustLive webapps

Real Estate Manager 1.0.1 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41507/info

2010-07-09 bi0 webapps

dotDefender 3.8-5 – Remote Code Execution (via Cross-Site Scripting)

DotDefender

2010-07-09 rAWjAW webapps

WordPress Plugin Firestats – Remote Configuration File Download

# Exploit Title: Wordpress firestats remote configuration file download

2010-07-09 Jelmer de Hen webapps

HoloCMS 9.0.47 – ‘news.php’ SQL Injection

##############################################################################

2010-07-09 GlaDiaT0R webapps

CMS Contentia – ‘news.php’ SQL Injection

##############################################################################

2010-07-09 GlaDiaT0R webapps

Joomla! Component QuickFAQ 1.0.3 – Blind SQL Injection

-----------------------------------------------------------------------------------------

2010-07-09 RoAd_KiLlEr webapps

sphider 1.3.5 – Remote File Inclusion

--##----------##------######--------------------------------########----------------##--------|

2010-07-09 Li0n-PaL webapps

Joomla! Component Minify4Joomla! – Arbitrary File Upload / Persistent Cross-Site Scripting

=======================================================

2010-07-09 Sid3^effects webapps

Joomla! Component IXXO Cart – SQL Injection

1 ########################################## 1

2010-07-09 Sid3^effects webapps

b2evolution 3.3.3 – Cross-Site Request Forgery

----------------------------------------------------------------------------

2010-07-09 saudi0hacker webapps

osCSS 1.2.2 – ‘page’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41510/info

2010-07-08 High-Tech Bridge SA webapps

Outlook Web Access 2007 – Cross-Site Request Forgery

Source:

2010-07-08 Rosario Valotta webapps

i-Gallery – Multiple Vulnerabilities

==============================================================

2010-07-08 SONIC webapps

ClickGallery Server – SQL Injection

==============================================================

2010-07-08 SONIC webapps

KMSoft GB – SQL Injection

==============================================================

2010-07-08 SONIC webapps

PG Social Networking – Arbitrary File Upload

==============================================================

2010-07-08 SONIC webapps

Inout Ad server Ultimate – Arbitrary File Upload

==============================================================

2010-07-08 SONIC webapps

Inout Article Base Ultimate – Arbitrary File Upload

==============================================================

2010-07-08 SONIC webapps

Inout Music 1.0 – Arbitrary File Upload

==============================================================

2010-07-08 SONIC webapps

Joomla! Component Music Manager – Local File Inclusion

Critical Level : HIGH

2010-07-08 Sid3^effects webapps

Pithcms – ‘theme’ Local/Remote File Inclusion

Title: pithcms (theme) Local / remote File inclusion VUlnerability

2010-07-08 eidelweiss webapps

Zylone IT – Multiple Blind SQL Injections

# Exploit Title: Zylone IT Multiple Blind SQL Injection Vulnerability

2010-07-08 Callo webapps

Worxware DCP-Portal 7.0 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41453/info

2010-07-07 Andrei Rimsa Alvares webapps

RunCMS 2.1 – ‘check.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41448/info

2010-07-07 Andrei Rimsa Alvares webapps

Exponent CMS 0.97 – ‘Slideshow.js.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41447/info

2010-07-07 Andrei Rimsa Alvares webapps

DD-WRT HTTPd Daemon/Service – Arbitrary Command Execution (Metasploit)

##

2010-07-07 Metasploit webapps

Joomla! Component PaymentsPlus 2.1.5 – Blind SQL Injection

Critical Level : HIGH

2010-07-07 Sid3^effects webapps

Harris Stratex StarMAX 2100 WIMAX Subscriber Station – Running Configuration Cross-Site Request Forgery

I found CSRF vulnerability in Harris Stratex WIMAX 2100 subscriber

2010-07-07 kalyanakumar webapps

Joomla! Component ArtForms 2.1b7.2 rc2 – Multiple Vulnerabilities

ArtForms 2.1b7.2 RC2 Joomla Component Multiple Remote Vulnerabilities

2010-07-07 Salvatore Fresta webapps