Websecurity - Веб безпека

В даній добірці експлоіти в веб додатках:

• Flax Article Manager 1.1 Remote PHP Script Upload Vulnerability (деталі)
• Max.Blog <= 1.0.6 (show_post.php) SQL Injection Vulnerability (деталі)
• Pixie CMS 1.0 Multiple Local File Inclusion Vulnerabilities (деталі)
• phplist 2.10.x (RCE by environ inclusion) Local File Inclusion Exploit (деталі)
• Lore 1.5.6 (article.php) Blind SQL Injection Exploit (деталі)
• Gazelle CMS (template) Local File Inclusion Vulnerability (деталі)
• Chipmunk Blog (Auth Bypass) Add Admin Exploit (деталі)
• GameScript 4.6 (XSS/SQL/LFI) Multiple Remote Vulnerabilities (деталі)
• Community CMS <= 0.4 (index.php id) Blind SQL Injection Exploit (деталі)
• MemHT Portal (mime issue) Remote PHP Shell Upload Vulnerability (деталі)
• Max.Blog <= 1.0.6 (offline_auth.php) Offline Authentication Bypass (деталі)
• Max.Blog <= 1.0.6 (submit_post.php) SQL Injection Vulnerability (деталі)
• SmartSiteCMS 1.0 (articles.php var) Blind SQL Injection Exploit (деталі)
• Social Engine (category_id) SQL Injection Vulnerability (деталі)
• Amaya Web Editor XML and HTML parser Vulnerabilities (деталі)

This entry was posted on 16:11 31.08.2009 and is filed under Експлоіти. You can follow any responses to this entry through the RSS 2.0 feed.