Sponsor of the Day:
Jerkmate
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/62.html
WooYun-2014-72727:一个PHPWIND可拿shell的高危漏洞 | 论 PHP 常见漏洞
wooyun 2014php
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/22.html
WooYun-2014-50636:PHPCMS全版本通杀SQL注入漏洞 | 论 PHP 常见漏洞
wooyun 2014php
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/32.html
WooYun-2014-69746:qibocms V7 整站系统最新版SQL注入一枚 & 另外一处能引入转义符的地方。 | 论 PHP 常见漏洞
wooyun 2014v7php
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/17.html
WooYun-2014-53187:qibocms B2b 注入一枚 | 论 PHP 常见漏洞
wooyun 2014b2bphp
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/31.html
WooYun-2014-80259:齐博整站/地方门户SQL注入漏洞 | 论 PHP 常见漏洞
wooyun 2014php
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/50.html
WooYun-2014-66221:Cmseasy SQL注射漏洞之三 | 论 PHP 常见漏洞
wooyun 2014php
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/57.html
WooYun-2014-66459:qibocmsV7整站系统任意文件下载导致无限制注入多处(可提升自己为管理 Demo演示) | 论 PHP 常见漏洞
wooyun 2014php
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/56.html
WooYun-2014-65835:Qibocms图片系统任意文件查看导致的多处注入(可提升自己为管理员) | 论 PHP 常见漏洞
wooyun 2014php
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/43.html
WooYun-2014-79045:Supesite 前台注入 #3 (Delete) | 论 PHP 常见漏洞
wooyun 20143deletephp
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/49.html
WooYun-2014-60166:云人才系统SQL注入,绕过WAF | 论 PHP 常见漏洞
wooyun 2014php
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/27.html
WooYun-2014-79041:Supesite 前台注入 #2 (Insert) | 论 PHP 常见漏洞
wooyun 2014insertphp
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/58.html
WooYun-2014-71655:DedeCMS-V5.7-SP1(2014-07-25)sql注入+新绕过思路 | 论 PHP 常见漏洞
wooyun 2014v5 707 25sp1php
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/45.html
WooYun-2014-88872:phpyun v3.2 (20141226) 两处注入。 | 论 PHP 常见漏洞
wooyun 2014v3php
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/59.html
WooYun-2014-66138:phpcms最新版绕过全局防御暴力注入(官网演示) | 论 PHP 常见漏洞
wooyun 2014php
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/46.html
WooYun-2014-80877:qibocms 地方门户系统 二次注入#5(demo测试) | 论 PHP 常见漏洞
wooyun 20145php
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/52.html
WooYun-2014-80723:Discuz!某两个版本前台产品命令执行(无需登录) | 论 PHP 常见漏洞
wooyun 2014php
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/53.html
WooYun-2014-50304:Thinksaas找回密码处设计错误利用账户可找回密码。 | 论 PHP 常见漏洞
wooyun 2014php
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/24.html
WooYun-2014-68853:Phpyun注入漏洞二 | 论 PHP 常见漏洞
wooyun 2014php
https://wizardforcel.gitbooks.io/php-common-vulnerability/content/23.html
WooYun-2014-53198:cmseasy绕过补丁SQL注入一枚 | 论 PHP 常见漏洞
wooyun 2014php