webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Memorial Web Site Script – Multiple Arbitrary Delete Vulnerabilities

-----------------------------------------------------------------------------------------

2010-04-23 Chip d3 bi0s webapps

Memorial Web Site Script – Reset Password / Insecure Cookie Handling

-----------------------------------------------------------------------

2010-04-23 Chip d3 bi0s webapps

Excitemedia CMS – SQL Injection

#!/usr/bin/perl -w

2010-04-23 Dr.0rYX & Cr3W-DZ webapps

NKINFOWEB – SQL Injection

# Software Link: http://jaist.dl.sourceforge.net/project/nkinfoweb/FunctionNkinfoweb_v.species.rar

2010-04-23 d4rk-h4ck3r webapps

EPay Enterprise 4.13 – ‘cid’ SQL Injection

) ) ) ( ( ( ( ( ) )

2010-04-23 v3n0m webapps

memorial Web site script – ‘id’ SQL Injection

) ) ) ( ( ( ( ( ) )

2010-04-23 v3n0m webapps

In-portal 5.0.3 – Arbitrary File Upload

2010-04-23 eidelweiss webapps

FlashCard 2.6.5 – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/39648/info

2010-04-22 Valentin webapps

AJ Shopping Cart 1.0 (maincatid) – SQL Injection

) ) ) ( ( ( ( ( ) )

2010-04-22 v3n0m webapps

AJ Matrix 3.1 – ‘id’ Multiple SQL Injections

) ) ) ( ( ( ( ( ) )

2010-04-22 v3n0m webapps

phpGreetCards 3.7 – Cross-Site Scripting

[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]

2010-04-22 Valentin webapps

Cacti 0.8.7e – OS Command Injection

CVSSv2 Score: 9 (AV:N/AC:L/Au:S/C:C/I:C/A:C)

2010-04-22 Nahuel Grisolia webapps

Cacti 0.8.7e – SQL Injection

CVSSv2 Score: 9 (AV:N/AC:L/Au:S/C:C/I:C/A:C)

2010-04-22 Nahuel Grisolia webapps

cms (id) 5.0 – SQL Injection

-----------------------------------------------------------------------

2010-04-22 spykit webapps

DBSite wb CMS – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/39613/info

2010-04-21 The_Exploited webapps

e107 0.7.x – ‘/e107_admin/banner.php’ SQL Injection

source: https://www.securityfocus.com/bid/39609/info

2010-04-21 High-Tech Bridge SA webapps

Apache OFBiz – Multiple Cross-Site Scripting Vulnerabilities

Bonsai Information Security - Advisory

2010-04-21 Lucas Apa webapps

CactuShop – User Invoices Persistent Cross-Site Scripting

User Invoices Persistent XSS Vulnerability in CactuShop

2010-04-21 7Safe webapps

Joomla! Component com_portfolio – Local File Disclosure

Joomla compnent com_portfolio Local File Disclosure

2010-04-21 Mr.tro0oqy webapps

wb news (webmobo) 2.3.3 – Persistent Cross-Site Scripting

#####################################################################################

2010-04-21 ITSecTeam webapps

LightNEasy 3.1.x – Multiple Vulnerabilities

##############################################################################

2010-04-21 ITSecTeam webapps

e107 CMS 0.7.19 – Cross-Site Request Forgery

Vulnerability ID: HTB22344

2010-04-21 High-Tech Bridge SA webapps

Joomla! Component MMS Blog 2.3.0 – Local File Inclusion

=============================================================================================================

2010-04-21 AntiSecurity webapps

Joomla! Component OrgChart 1.0.0 – Local File Inclusion

==============================================================================================================

2010-04-21 AntiSecurity webapps

Joomla! Component WMI 1.5.0 – Local File Inclusion

================================================================================================

2010-04-21 wishnusakti + inc0mp13te webapps

v2marketplacescript Upload_images Script (-7777) – Arbitrary File Upload

======================================================================

2010-04-21 cyberlog webapps

vBulletin Two-Step External Link Module – ‘externalredirect.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/39597/info

2010-04-20 Edgard Chammas webapps

MusicBox 3.3 – SQL Injection

#!/usr/bin/perl

2010-04-20 Ctacok webapps

Openregistrecil 1.02 – Local File Inclusion / Remote File Inclusion

==================================================================

2010-04-20 cr4wl3r webapps

Joomla! Component JTM Reseller 1.9 Beta – SQL Injection

[!]===========================================================================[!]

2010-04-20 kaMtiEz webapps

Joomla! Component Online News Paper Manager 1.0 – ‘cid’ SQL Injection

[!] Joomla com_jnewspaper (cid) SQL Injection Vulnerability

2010-04-20 Don Tukulesto webapps

Kleophatra CMS 0.1.1 – ‘module’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/39593/info

2010-04-19 anT!-Tr0J4n webapps

CMS Ariadna 2009 – SQL Injection

# Exploit Title : CMS Ariadna 2009 SQL Injection

2010-04-19 Andrés Gómez webapps

Joomla! Component GBU Facebook 1.0.5 – SQL Injection

[!]===========================================================================[!]

2010-04-19 kaMtiEz webapps

Openreglement 1.04 – Local File Inclusion / Remote File Inclusion

================================================================

2010-04-19 cr4wl3r webapps

N/X Web CMS (N/X WCMS 4.5) – Multiple Vulnerabilities

N/X - Web CMS (N/X WCMS 4.5) Multiple Vulnerability

2010-04-19 eidelweiss webapps

Flex File Manager – Arbitrary File Upload

====================================================

2010-04-19 Mr.MLL webapps

Joomla! Component iF surfALERT 1.2 – Local File Inclusion

==================================================================================================================