Active Super Shop CMS v2.5 – HTML Injection Vulnerabilities
# Exploit Title: Active Super Shop CMS v2.5 - HTML Injection Vulnerabilities
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 20
PaulPrinting CMS – (Search Delivery) Cross Site Scripting
Exploit Title: PaulPrinting CMS - (Search Delivery) Cross Site Scripting
Dooblou WiFi File Explorer 1.13.3 – Multiple Vulnerabilities
#Exploit Title: Dooblou WiFi File Explorer 1.13.3 - Multiple Vulnerabilities
Webile v1.0.1 – Multiple Cross Site Scripting
Exploit Title: Webile v1.0.1 - Multiple Cross Site Scripting
Aures Booking & POS Terminal – Local Privilege Escalation
Exploit Title: Aures Booking & POS Terminal - Local Privilege Escalation
PaulPrinting CMS – Multiple Cross Site Web Vulnerabilities
Exploit Title: PaulPrinting CMS - Multiple Cross Site Web Vulnerabilities
RWS WorldServer 11.7.3 – Session Token Enumeration
Exploit Title: RWS WorldServer 11.7.3 - Session Token Enumeration
PimpMyLog v1.7.14 – Improper access control
# Exploit Title: PimpMyLog v1.7.14 - Improper access control
phpfm v1.7.9 – Authentication type juggling
# Exploit Title: phpfm v1.7.9 - Authentication type juggling
Joomla! com_booking component 2.4.9 – Information Leak (Account enumeration)
# Exploit Title: Joomla! com_booking component 2.4.9 - Information Leak (Account enumeration)
Vaidya-Mitra 1.0 – Multiple SQLi
## Title: Vaidya-Mitra 1.0 - Multiple SQLi
Backdrop Cms v1.25.1 – Stored Cross-Site Scripting (XSS)
#Exploit Title: Backdrop Cms v1.25.1 - Stored Cross-Site Scripting (XSS)
CmsMadeSimple v2.2.17 – session hijacking via Server-Side Template Injection (SSTI)
#Exploit Title: CmsMadeSimple v2.2.17 - session hijacking via Server-Side Template Injection (SSTI)
CmsMadeSimple v2.2.17 – Remote Code Execution (RCE)
#Exploit Title: CmsMadeSimple v2.2.17 - Remote Code Execution (RCE)
CmsMadeSimple v2.2.17 – Stored Cross-Site Scripting (XSS)
#Exploit Title: CmsMadeSimple v2.2.17 - Stored Cross-Site Scripting (XSS)
Statamic 4.7.0 – File-Inclusion
## Title: Statamic 4.7.0 - File-Inclusion
ABB FlowX v4.00 – Exposure of Sensitive Information
# Exploit Title: ABB FlowX v4.00 - Exposure of Sensitive Information
Blackcat Cms v1.4 – Stored XSS
Exploit Title: Blackcat Cms v1.4 - Stored XSS
Blackcat Cms v1.4 – Remote Code Execution (RCE)
Exploit Title: Blackcat Cms v1.4 - Remote Code Execution (RCE)
TP-Link TL-WR740N – Authenticated Directory Transversal
# Exploit Title: TP-Link TL-WR740N - Authenticated Directory Transversal
Hikvision Hybrid SAN Ds-a71024 Firmware – Multiple Remote Code Execution
# Exploit Title: Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution
XAMPP 8.2.4 – Unquoted Path
# Exploit Title: XAMPP 8.2.4 - Unquoted Path
Icinga Web 2.10 – Authenticated Remote Code Execution
#!/usr/bin/env python3
News Portal v4.0 – SQL Injection (Unauthorized)
# Exploit Title: News Portal v4.0 - SQL Injection (Unauthorized)
ProjeQtOr Project Management System v10.4.1 – Multiple XSS
Exploit Title: ProjeQtOr Project Management System V10.4.1 - Multiple XSS
Cisco UCS-IMC Supervisor 2.2.0.0 – Authentication Bypass
[+] Exploit Title: Cisco UCS-IMC Supervisor 2.2.0.0 - Authentication Bypass
Admidio v4.2.10 – Remote Code Execution (RCE)
Exploit Title: Admidio v4.2.10 - Remote Code Execution (RCE)
WinterCMS < 1.2.3 - Persistent Cross-Site Scripting
# Exploit Title: WinterCMS < 1.2.3 - Persistent Cross-Site Scripting
Pluck v4.7.18 – Remote Code Execution (RCE)
#Exploit Title: Pluck v4.7.18 - Remote Code Execution (RCE)
Netlify CMS 2.10.192 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Netlify CMS 2.10.192 - Stored Cross-Site Scripting (XSS)
Spring Cloud 3.2.2 – Remote Command Execution (RCE)
# Exploit Title: Spring Cloud 3.2.2 - Remote Command Execution (RCE)
MiniTool Partition Wizard ShadowMaker v.12.7 – Unquoted Service Path “MTAgentService”
# Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path
MiniTool Partition Wizard ShadowMaker v.12.7 – Unquoted Service Path “MTSchedulerService”
# Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path
Frappe Framework (ERPNext) 13.4.0 – Remote Code Execution (Authenticated)
# Exploit Title: Frappe Framework (ERPNext) 13.4.0 - Remote Code Execution (Authenticated)
BuildaGate5library v5 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: BuildaGate5library v5 - Reflected Cross-Site Scripting (XSS)
Ateme TITAN File 3.9 – SSRF File Enumeration
#Exploit Title: Ateme TITAN File 3.9 - SSRF File Enumeration
AVG Anti Spyware 7.5 – Unquoted Service Path “AVG Anti-Spyware Guard”
# Exploit Title: AVG Anti Spyware 7.5 - Unquoted Service Path
Game Jackal Server v5 – Unquoted Service Path “GJServiceV5”
# Exploit Title: Game Jackal Server v5 - Unquoted Service Path
Faculty Evaluation System v1.0 – SQL Injection
# Exploit Title: Faculty Evaluation System v1.0 - SQL Injection
Microsoft Outlook Microsoft 365 MSO (Version 2306 Build 16.0.16529.20100) 32-bit – Remote Code Execution
## Title: Microsoft Outlook Microsoft 365 MSO (Version 2306 Build 16.0.16529.20100) 32-bit - Remote Code Execution
Windows 10 v21H1 – HTTP Protocol Stack Remote Code Execution
## Title: Windows 10 v21H1 - HTTP Protocol Stack Remote Code Execution
Gila CMS 1.10.9 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Gila CMS 1.10.9 - Remote Code Execution (RCE) (Authenticated)
Lost and Found Information System v1.0 – SQL Injection
# Exploit Title: Lost and Found Information System v1.0 - SQL Injection
Microsoft Edge 114.0.1823.67 (64-bit) – Information Disclosure
## Title:Microsoft Edge 114.0.1823.67 (64-bit) - Information Disclosure
Piwigo v13.7.0 – Stored Cross-Site Scripting (XSS) (Authenticated)
#Exploit Title: Piwigo v13.7.0 - Stored Cross-Site Scripting (XSS) (Authenticated)
Car Rental Script 1.8 – Stored Cross-site scripting (XSS)
# Exploit Title: Car Rental Script 1.8 - Stored Cross-site scripting (XSS)
Beauty Salon Management System v1.0 – SQLi
# Exploit Title: Beauty Salon Management System v1.0 - SQLi
Rukovoditel 3.4.1 – Multiple Stored XSS
Exploit Title: Rukovoditel 3.4.1 - Multiple Stored XSS
Sales of Cashier Goods v1.0 – Cross Site Scripting (XSS)
# Exploit Title: Sales of Cashier Goods v1.0 - Cross Site Scripting (XSS)