Ecommerse v1.0 – Cross-Site Scripting (XSS)
## Title: Ecommerse v1.0 - Cross-Site Scripting (XSS)
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 29
Covenant v0.5 – Remote Code Execution (RCE)
# Exploit Title: Covenant v0.5 - Remote Code Execution (RCE)
Virtual Reception v1.0 – Web Server Directory Traversal
# Exploit Title: Virtual Reception v1.0 - Web Server Directory Traversal
Lavasoft web companion 4.1.0.409 – ‘DCIservice’ Unquoted Service Path
#Exploit Title: Lavasoft web companion 4.1.0.409 - 'DCIservice' Unquoted Service Path
Concrete5 CME v9.1.3 – Xpath injection
## Exploit Title: Concrete5 CME v9.1.3 - Xpath injection
Device Manager Express 7.8.20002.47752 – Remote Code Execution (RCE)
# Exploit Title: Device Manager Express 7.8.20002.47752 - Remote Code Execution (RCE)
CrowdStrike Falcon AGENT 6.44.15806 – Uninstall without Installation Token
# Exploit Title: CrowdStrike Falcon AGENT 6.44.15806 - Uninstall without Installation Token
4images 1.9 – Remote Command Execution (RCE)
# Exploit Title: 4images 1.9 - Remote Command Execution (RCE)
LISTSERV 17 – Reflected Cross Site Scripting (XSS)
# Exploit Title: LISTSERV 17 - Reflected Cross Site Scripting (XSS)
LISTSERV 17 – Insecure Direct Object Reference (IDOR)
# Exploit Title: LISTSERV 17 - Insecure Direct Object Reference (IDOR)
Shoplazza 1.1 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Shoplazza 1.1 - Stored Cross-Site Scripting (XSS)
Zillya Total Security 3.0.2367.0 – Local Privilege Escalation
# Exploit Title: Zillya Total Security 3.0.2367.0 - Local Privilege Escalation
WPForms 1.7.8 – Cross-Site Scripting (XSS)
# Exploit Title: WPForms 1.7.8 - Cross-Site Scripting (XSS)
Eve-ng 5.0.1-13 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Eve-ng 5.0.1-13 - Stored Cross-Site Scripting (XSS)
WP All Import v3.6.7 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: WP All Import v3.6.7 - Remote Code Execution (RCE) (Authenticated)
Book Store Management System 1.0.0 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Book Store Management System 1.0.0 - Stored Cross-Site Scripting (XSS)
Human Resource Management System 1.0 – SQL Injection (unauthenticated)
# Exploit Title: Human Resource Management System - SQL Injection (unauthenticated)
Inbit Messenger v4.9.0 – Unauthenticated Remote SEH Overflow
# Exploit Title: Inbit Messenger v4.9.0 - Unauthenticated Remote SEH Overflow
Inbit Messenger v4.9.0 – Unauthenticated Remote Command Execution (RCE)
# Exploit Title: Inbit Messenger v4.9.0 - Unauthenticated Remote Command Execution (RCE)
Outline V1.6.0 – Unquoted Service Path
# Exploit Title: Outline V1.6.0 - Unquoted Service Path
DSL-124 Wireless N300 ADSL2+ – Backup File Disclosure
# Exploit Title: DSL-124 Wireless N300 ADSL2+ - Backup File Disclosure
Uniview NVR301-04S2-P4 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: Uniview NVR301-04S2-P4 - Reflected Cross-Site Scripting (XSS)
Internet Download Manager v6.41 Build 3 – Remote Code Execution (RCE)
# Exploit Title: Internet Download Manager v6.41 Build 3 - Remote Code Execution (RCE)
Helmet Store Showroom v1.0 – SQL Injection
# Exploit Title: Helmet Store Showroom v1.0 - SQL Injection
Revenue Collection System v1.0 – Remote Code Execution (RCE)
# Exploit Title: Revenue Collection System v1.0 - Remote Code Execution (RCE)
Beauty-salon v1.0 – Remote Code Execution (RCE)
## Exploit Title: Beauty-salon v1.0 - Remote Code Execution (RCE)
Pega Platform 8.1.0 – Remote Code Execution (RCE)
# Exploit Title: Pega Platform 8.1.0 - Remote Code Execution (RCE)
VMware Workstation 15 Pro – Denial of Service
#Title: VMware Workstation 15 Pro - Denial of Service
YouPHPTube<= 7.8 - Multiple Vulnerabilities
# Exploit Title: YouPHPTube
SuperMailer v11.20 – Buffer overflow DoS
# Exploit Title: SuperMailer v11.20 - Buffer overflow DoS
Online shopping system advanced 1.0 – Multiple Vulnerabilities
# Exploit Title: Online shopping system advanced 1.0 - Multiple
Jetpack 11.4 – Cross Site Scripting (XSS)
# Exploit Title: Jetpack 11.4 - Cross Site Scripting (XSS)
HDD Health 4.2.0.112 – ‘HDDHealth’ Unquoted Service Path
# Exploit Title: HDD Health 4.2.0.112 - 'HDDHealth' Unquoted Service Path
SugarSync 4.1.3 – ‘SugarSync Service’ Unquoted Service Path
# Exploit Title: SugarSync 4.1.3 - 'SugarSync Service' Unquoted Service Path
Tapo C310 RTSP server v1.3.0 – Unauthorised Video Stream Access
# Exploit Title: Tapo C310 RTSP server v1.3.0- Unauthorised Video Stream Access
BoxBilling<=4.22.1.5 - Remote Code Execution (RCE)
# Exploit Title: BoxBilling
Label Studio 1.5.0 – Authenticated Server Side Request Forgery (SSRF)
# Exploit Title: Label Studio 1.5.0 - Authenticated Server Side Request Forgery (SSRF)
Subrion CMS 4.2.1 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Subrion CMS 4.2.1 - Stored Cross-Site Scripting (XSS)
X-Skipper-Proxy v0.13.237 – Server Side Request Forgery (SSRF)
#Exploit Title: X-Skipper-Proxy v0.13.237 - Server Side Request Forgery (SSRF)
ZKTeco ZEM/ZMM 8.88 – Missing Authentication
# Exploit Title: ZKTeco ZEM/ZMM 8.88 - Missing Authentication
OPSWAT Metadefender Core – Privilege Escalation
# Exploit Title: OPSWAT Metadefender Core - Privilege Escalation
Tunnel Interface Driver – Denial of Service
// Exploit Title: Tunnel Interface Driver - Denial of Service
Moodle LMS 4.0 – Cross-Site Scripting (XSS)
# Exploit Title: Moodle LMS 4.0 - Cross-Site Scripting (XSS)
Social-Share-Buttons v2.2.3 – SQL Injection
## Title: Social-Share-Buttons v2.2.3 - SQL Injection
Hashicorp Consul v1.0 – Remote Command Execution (RCE)
# Exploit Title: Hashicorp Consul v1.0 - Remote Command Execution (RCE)
ReQlogic v11.3 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: ReQlogic v11.3 - Reflected Cross-Site Scripting (XSS)
iBooking v1.0.8 – Arbitrary File Upload
# Exploit Title: iBooking v1.0.8 - Arbitrary File Upload
Senayan Library Management System v9.5.0 – SQL Injection
## Title: Senayan Library Management System v9.5.0 - SQL Injection
rukovoditel 3.2.1 – Cross-Site Scripting (XSS)
## Title: rukovoditel 3.2.1 - Cross-Site Scripting (XSS)
Canteen-Management v1.0 – XSS-Reflected
## Exploit Title: Canteen-Management v1.0 - XSS-Reflected