Websecurity - Веб безпека

В даній добірці експлоіти в веб додатках:

• phpfan 3.3.4 (init.php includepath) Remote File Inclusion Vulnerability (деталі)
• SaturnCMS (view) Blind SQL Injection Vulnerability (деталі)
• Simple Customer 1.2 (Auth Bypass) SQL Injection Vulnerability (деталі)
• Exodus 0.10 (uri handler) Arbitrary Parameter Injection Vulnerability (деталі)
• CUPS 1.3.7 CSRF (add rss subscription) Remote Crash Exploit (деталі)
• VideoScript <= 4.0.1.50 Admin Change Password Exploit (деталі)
• Ultrastats 0.2.144/0.3.11 (index.php serverid) SQL Injection Vulnerability (деталі)
• Free Directory Script 1.1.1 (API_HOME_DIR) RFI Vulnerability (деталі)
• Pluck CMS 4.5.3 (g_pcltar_lib_dir) Local File Inclusion Vulnerability (деталі)
• Musicbox 2.3.8 (viewalbums.php artistId) SQL Injection Vulnerability (деталі)
• RevSense (Auth bypass) Remote SQL Injection Vulnerability (деталі)
• MauryCMS <= 0.53.2 Remote Shell Upload Exploit (деталі)
• MyTopix <= 1.3.0 (notes send) Remote SQL Injection Exploit (деталі)
• PunBB (Private Messaging System 1.2.x) Multiple LFI Exploit (деталі)
• SazCart <= v1.5.1 (details&prodid) Remote SQL Injection Exploit (деталі)

This entry was posted on 16:07 28.05.2009 and is filed under Експлоіти. You can follow any responses to this entry through the RSS 2.0 feed.