webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

PHPaaCMS 0.3.1 – ‘show.php?id’ SQL Injection

#Exploit Title: phpaaCms (show.php?id=) SQL injection Vulnerable

2010-07-04 Shafiq-Ur-Rehman webapps

WordPress Plugin Simple:Press 4.3.0 – SQL Injection

# Title: Simple:Press Wordpress Plugin SQL Injection Vulnerability

2010-07-04 ADEO Security webapps

FuseTalk 3.2/4.0 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/42157/info

2010-07-03 Juan Manuel Garcia webapps

cPanel 11.25 – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/41391/info

2010-07-03 G0D-F4Th3r webapps

Dogfood CRM – ‘spell.php’ Remote Command Execution (Metasploit)

##

2010-07-03 Metasploit webapps

The Matt Wright Guestbook.pl – Arbitrary Command Execution (Metasploit)

##

2010-07-03 Metasploit webapps

phpMyAdmin – Config File Code Injection (Metasploit)

##

2010-07-03 Metasploit webapps

Coppermine Photo Gallery 1.4.14 – ‘picEditor.php’ Command Execution (Metasploit)

##

2010-07-03 Metasploit webapps

osCommerce 2.2 – Arbitrary PHP Code Execution (Metasploit)

##

2010-07-03 Metasploit webapps

WordPress Core 1.5.1.3 – ‘cache_lastpostdate’ Arbitrary Code Execution (Metasploit)

##

2010-07-03 Metasploit webapps

TWiki – Search Function Arbitrary Command Execution (Metasploit)

##

2010-07-03 Metasploit webapps

TWiki History TWikiUsers – ‘rev’ Command Execution (Metasploit)

##

2010-07-03 Metasploit webapps

QuickTime Streaming Server – ‘parse_xml.cgi’ Remote Execution (Metasploit)

##

2010-07-03 Metasploit webapps

phpBB – ‘viewtopic.php’ Arbitrary Code Execution (Metasploit)

##

2010-07-03 Metasploit webapps

AWStats 6.4 < 6.5 - migrate Remote Command Execution (Metasploit)

##

2010-07-03 Metasploit webapps

Cacti – ‘graph_view.php’ Remote Command Execution (Metasploit)

##

2010-07-03 Metasploit webapps

iScripts MultiCart 2.2 – Multiple SQL Injections

iScripts MultiCart 2.2 Multiple SQL Injection Vulnerability

2010-07-03 Salvatore Fresta webapps

Joomla! Component Techjoomla SocialAds – Persistent Cross-Site Scripting

1 ########################################## 1

2010-07-03 Sid3^effects webapps

iscripts Socialware 2.2.x – Multiple Vulnerabilities

Name iScripts SocialWare

2010-07-03 Salvatore Fresta webapps

Ziggurat Farsi CMS – SQL Injection

Hello.

2010-07-03 Arash Saadatfar webapps

cPanel 11.25 – Cross-Site Request Forgery (Add FTP Account)

# Exploit Title: Cpanel 11.25 - [CSRF] Add FTP Account

2010-07-03 G0D-F4Th3r webapps

Joomla! Component eventCal 1.6.4 – Blind SQL Injection

[~] Founded by **RoAd_KiLlEr**

2010-07-03 RoAd_KiLlEr webapps

Family Connections Who is Chatting AddOn – Remote File Inclusion

Who is Chatting 2.2.3 Remote File Include Vulnerability

2010-07-03 lumut-- webapps

SweetRice < 0.6.4 - 'FCKeditor' Arbitrary File Upload

##############################################################################

2010-07-03 ITSecTeam webapps

Joomla! Component com_seyret – Local File Inclusion

# Exploit Title: Joomla Component Seyret (com_seyret)

2010-07-03 Cooler_ unix webapps

Xplico 0.5.7 – ‘add.ctp’ Cross-Site Scripting (2)

source: https://www.securityfocus.com/bid/41322/info

2010-07-02 Marcos Garcia & Maximiliano Soler webapps

Xplico 0.5.7 – ‘add.ctp’ Cross-Site Scripting (1)

Xplico v0.5.7 (add.ctp) Remote XSS Vulnerability

2010-07-02 Marcos Garcia & Maximiliano Soler webapps

iScripts Socialware 2.2.x – Arbitrary File Upload

Name iScripts SocialWare

2010-07-02 Salvatore Fresta webapps

Joomla! Component com_seyret – Blind SQL Injection

1 ########################################### 1

2010-07-02 RoAd_KiLlEr webapps

Iphone Pointter Social Network – Local File Inclusion

1 ########################################## 1

2010-07-02 Sid3^effects webapps

Pointter Social Network – Local File Inclusion

1 ########################################## 1

2010-07-02 Sid3^effects webapps

MooreAdvice – ‘productlist.asp’ SQL Injection

# Exploit Title: MooreAdvice (productlist.asp) SQL injection Vulnerable

2010-07-02 Th3 RDX webapps

VGM Forbin – ‘article.asp’ SQL Injection

# Exploit Title: VGM Forbin (article.asp) SQL injection Vulnerable

2010-07-02 Th3 RDX webapps

Bit Weaver 2.7 – Local File Inclusion

------------------------------------------------------------------------

2010-07-02 John Leitch webapps

iScripts EasyBiller – Cross-Site Scripting

$-------------------------------------------------------------------------------------------------------------------

2010-07-02 Sangteamtham webapps

iScripts CyberMatch 1.0 – Blind SQL Injection

iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability

2010-07-02 Salvatore Fresta webapps

ReCMS – ‘users_lang’ Directory Traversal

source: https://www.securityfocus.com/bid/41310/info

2010-07-01 Locu webapps

Wiki Web Help 0.2.7 – Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/41306/info

2010-07-01 John Leitch webapps

Flatnux 2010-06.09 – ‘find’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41282/info

2010-07-01 ITSecTeam webapps

DPScms – ‘q’ SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/41273/info

2010-07-01 Ariko-Security webapps

Google Appliance ProxyStyleSheet – Command Execution (Metasploit)

##

2010-07-01 Metasploit webapps

iScripts ReserveLogic 1.0 – SQL Injection

iScripts ReserveLogic 1.0 SQL Injection Vulnerability

2010-07-01 Salvatore Fresta webapps

iScripts EasySnaps 2.0 – Multiple SQL Injections

iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities

2010-07-01 Salvatore Fresta webapps

Interscan Web Security 5.0 – Persistent Cross-Site Scripting

####################################################################################

2010-07-01 Ivan Huertas webapps

SIDA University System – SQL Injection

# Author: K053

2010-07-01 K053 webapps

Joomla! Component com_dateconverter 0.1 – SQL Injection

-----------------------------------------------------------------------------------------

2010-07-01 RoAd_KiLlEr webapps

Oxygen2PHP 1.1.3 – ‘forumdisplay.php’ Blind SQL Injection

#!/usr/bin/perl

2010-07-01 Dante90 webapps

Oxygen2PHP 1.1.3 – ‘post.php’ Blind SQL Injection

#!/usr/bin/perl

2010-07-01 Dante90 webapps

Setiran CMS – Blind SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

2010-07-01 Th3 RDX webapps

NinkoBB – Cross-Site Request Forgery

# Title: NinkoBB CSRF Vulnerability

2010-07-01 ADEO Security webapps