webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
AWCM – Database Disclosure
Subject:AWCM
Joomla! Component com_perchagallery – SQL Injection
########################################################################
Erolife AjxGaleri VT – Database Disclosure
==============================================================================
MobPartner Counter – Arbitrary File Upload
_____________________________________________________
VP-ASP Shopping Cart 7.0 – Database Disclosure
========================================================================================
PHPDug 2.0.0 – Cross-Site Scripting
========================================================================================
Net Gitar Shop 1.0 – Database Disclosure
========================================================================================
Lebi soft Ziyaretci Defteri 7.5 – Database Disclosure
========================================================================================
Myuploader – Arbitrary File Upload
# Exploit Title: Myuploader >> upload shell exploit
PHPDirector Game Edition 0.1 – Local File Inclusion / SQL Injection / Cross-Site Scripting
# Exploit Title: PHPDirector Game Edition Multiple Vulnerabilities (LFI/SQLi/Xss)
ITaco Group ITaco.biz – ‘view_news’ SQL Injection
=============================================================================
LineWeb 1.0.5 – Multiple Remote Vulnerabilities
source: https://www.securityfocus.com/bid/37613/info
LXR 0.9.x – Cross Referencer Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37612/info
YP Portal MS-Pro Surumu 1.0 – Database Disclosure
========================================================================================
Pay Per Minute Video Chat Script 2.x – SQL Injection / Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/40585/info
MercuryBoard 1.1.5 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37605/info
WMNews – ‘/admin/wmnews.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37600/info
pL-PHP 0.9 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37593/info
KMSoft Guestbook 1.0 – Database Disclosure
==============================================================================
LightOpenCMS 0.1 – ‘smarty.php’ Remote File Inclusion
# Exploit Title: LightOpen CMS Remote File Inclusion (smarty.php)
ImagoScripts Deviant Art Clone – SQL Injection
Exploit Title:ImagoScripts Deviant Art Clone SQL Injection Vulnerability
W-Agora 4.2.1 – Multiple Vulnerabilities
========================================================================================
Ninja Blog 4.8 – Multiple Vulnerabilities
========================================================================================
Joomla! Component com_j-projects – Blind SQL Injection
#############################################################
Gbook MX 4.1.0 (Arabic Version) – Remote File Inclusion
========================================================================================
Joomla! Component com_cartikads 1.0 – Arbitrary File Upload
###################################################################################
Pay Per Minute Video Chat Script 2.0/2.1 – Multiple Vulnerabilities
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
PHP Banner Exchange 1.2 – ‘signupconfirm.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40165/info
PHP File Uploader – Arbitrary File Upload
source: https://www.securityfocus.com/bid/40159/info
SLAED CMS 2.0 – ‘stop’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37574/info
Discuz! 2.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37573/info
Joomla! Component com_oziogallery2 / IMAGIN – Arbitrary File Write
# Exploit Title: Joomla component com_oziogallery2 / IMAGIN arbitrary file write
Elite Gaming Ladders 3.0 – SQL Injection
# Exploit Title: Elite Gaming Ladders v3.0 SQL Injection Exploit
Smart Vision Script News – ‘newsdetail.php’ SQL Injection (1)
# Exploit Title: Smart Vsion Script News (newsdetail) SQL Injection Vulnerability
WorldPay Script Shop – ‘productdetail’ SQL Injection
============================================
Simple Portal 2.0 – Authentication Bypass
+===================================================================================+
Acidcat CMS 3.5 – Multiple Vulnerabilities
==============================================================================
Joomla! Component Bamboo Simpla Admin Template – SQL Injection
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
portal modulnet 1.0 – ‘id’ SQL Injection
+===================================================================================+
Rezervi 3.0.2 – ‘mail.inc.php’ Remote File Inclusion
###############################################################
Joomla! Component com_otzivi – Blind SQL Injection
#############################################################
Joomla! Component com_doqment – ‘cid’ SQL Injection
#############################################################################
Joomla! Component Bridge of Hope Template – SQL Injection
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
Live TV Script – SQL Injection
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
MasterWeb Script 1.0 – ‘details&newsID’ SQL Injection
+===================================================================================+
Joomla! Component com_hotbrackets – Blind SQL Injection
#############################################################
Joomla! Component com_alfresco – SQL Injection
#############################################################
Joomla! Component com_tpjobs – Blind SQL Injection
#####################################################################