webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Joomla! Component Q-Personel 1.0 – SQL Injection
#!/usr/bin/python
interuse Website Builder & design – ‘index2.php’ SQL Injection
-------------------------------------------------------------------------------------------
Apache Axis2 1.4.1 – Local File Inclusion
# Exploit Title: Apache Axis2(1.4.1) Local File Inclusion Vulnerability
Schaf-CMS 1.0 – SQL Injection
Schaf-CMS 1.0 SQL Injection Vulnerability
PHP Graphy 0.9.7 – ‘index.php’ Remote Command Execution
# ----------------------oOO---(_)---OOo-----------------------
BBMedia Design’s – ‘news_more.php’ SQL Injection
#################################################################################################
Telia Web Design – ‘index.php’ SQL Injection
-------------------------------------------------------------------------------------------
runt-communications Design – ‘property_more.php’ SQL Injection
-------------------------------------------------------------------------------------------
e107 – Code Exection
# Exploit Title: e107 Code Exec
infoware – SQL Injection
===============================================
OpenForum 2.2 b005 – ‘saveAsAttachment()’ Method Arbitrary File Creation
# source: https://www.securityfocus.com/bid/40364/info
eCreo – SQL Injection
===============================================
goffgrafix Design’s – SQL Injection
=========================================================
BBMedia Design’s – SQL Injection
=========================================================
webperformance eCommerce – SQL Injection
===============================================
runt-communications Design – SQL Injection
=========================================================
MMA Creative Design – SQL Injection
=========================================================
cyberhost – ‘default.asp’ SQL Injection
source: https://www.securityfocus.com/bid/40357/info
Recipes Website 1.0 – SQL Injection
[~] Script: | Recipes Website 1.0 |
ECShop – ‘search.php’ SQL Injection
# Exploit Title: ECShop Search.php SQL Injection Exploit
Rave Creations/UHM – ‘artists.asp’ SQL Injection
************************************************************ ** (artists.asp) SQL Injection Vulnerability ***********...
DotNetNuke – Arbitrary File Upload
************************************************************ ** DotNetNuke Remote File upload Vulnerability *********...
eWebEditor 1.x – ‘WYSIWYG’ Arbitrary File Upload
=============================================================================
E-Commerce Group – ‘cat.php’ SQL Injection
Exploit Title: E-commerce Group (cat.php) SQL Injection Vulnerability
Azimut Technologie – Admin Authentication Bypass
************************************************************ ** Azimut Technologie Admin Login Bypass vulnerability *******...
Tochin eCommerce – Multiple Remote s
===============================================
Asset Manager – Arbitrary File Upload
************************************************************ ** Asset Manager Remote File upload Vulnerability ** ******...
WordPress Plugin TinyBrowser – Arbitrary File Upload
************************************************************ ** TinyBrowser Remote File upload Vulnerability ************...
Specialized Data Systems Parent Connect 2010.04.11 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/40324/info
cardinalCMS 1.2 – ‘FCKeditor’ Arbitrary File Upload
==========================================================
Apache Axis2 Administration Console – (Authenticated) Cross-Site Scripting
PR10-03 Authenticated Cross-Site Scripting Vulnerability (XSS) within Apache Axis2 administration console
JV2 Folder Gallery 3.1 – ‘gallery.php’ Remote File Inclusion
# ----------------------oOO---(_)---OOo-----------------------
ConPresso 4.0.7 – SQL Injection
ConPresso 4.0.7 SQL Injection Vulnerability
3Com* iMC (Intelligent Management Center) – Cross-Site Scripting / Information Disclosure Flaws
PR10-02: Various XSS and information disclosure flaws within 3Com* iMC (Intelligent Management Center)
3Com* iMC (Intelligent Management Center) – Traversal File Retrieval
PR10-01: Unauthenticated File Retrieval (traversal) within 3Com* iMC (Intelligent Management Center)
Open-AudIT – Multiple Vulnerabilities
GVI-2010-02 : Multiple vulnerabilities in Open-AudIT
NPDS REvolution 10.02 – ‘admin.php’ Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/40331/info
Lisk CMS 4.4 – ‘id’ Multiple Cross-Site Scripting / SQL Injections
source: https://www.securityfocus.com/bid/40314/info
Snipe Gallery 3.1 – ‘image.php?cfg_admin_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/40279/info
Snipe Gallery 3.1 – ‘gallery.php?cfg_admin_path’ Remote File Inclusion
source: https://www.securityfocus.com/bid/40279/info
webYourPhotos 6.05 – ‘index.php’ Remote File Inclusion
# ----------------------oOO---(_)---OOo-----------------------
Spaw Editor 1.0/2.0 – Arbitrary File Upload
# Tilte: Spaw Editor v1.0 & 2.0 Remote File Upload .
Entry Level Content Management System (EL CMS) – SQL Injection
[+] Contact : vir0e5[at]hackermail[dot]com
DB[CMS] – ‘article.php’ SQL Injection
DB[CMS] (article.php) SQL Injection Vulnerability
IMEDIA – ‘index.php’ SQL Injection
# Exploit Titre: IMEDIA (index.php) SQL Injection Vulnerability