Affiliate Pro 1.7 – ‘Multiple’ Cross Site Scripting (XSS)
# Exploit Title: Affiliate Pro 1.7 - 'Multiple' Cross Site Scripting (XSS)
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 38
WorkTime 10.20 Build 4967 – Unquoted Service Path
# Exploit Title: WorkTime 10.20 Build 4967 - Unquoted Service Path
Archeevo 5.0 – Local File Inclusion
# Exploit Title: Archeevo 5.0 - Local File Inclusion
Online Resort Management System 1.0 – SQLi (Authenticated)
# Exploit Title: Online Resort Management System 1.0 - SQLi (Authenticated)
OpenBMCS 2.4 – Cross Site Request Forgery (CSRF)
# Exploit Title: OpenBMCS 2.4 - Cross Site Request Forgery (CSRF)
OpenBMCS 2.4 – SQLi (Authenticated)
# Exploit Title: OpenBMCS 2.4 - SQLi (Authenticated)
OpenBMCS 2.4 – Create Admin / Remote Privilege Escalation
# Exploit Title: OpenBMCS 2.4 - Create Admin / Remote Privilege Escalation
OpenBMCS 2.4 – Server Side Request Forgery (SSRF) (Unauthenticated)
# Exploit Title: OpenBMCS 2.4 - Server Side Request Forgery (SSRF) (Unauthenticated)
OpenBMCS 2.4 – Information Disclosure
# Exploit Title: OpenBMCS 2.4 - Information Disclosure
Simple Chatbot Application 1.0 – Remote Code Execution (RCE)
# Exploit Title: Simple Chatbot Application 1.0 - Remote Code Execution (RCE)
Simple Chatbot Application 1.0 – ‘message’ Blind SQLi
# Exploit Title: Simple Chatbot Application 1.0 - 'message' Blind SQLi
Nyron 1.0 – SQLi (Unauthenticated)
# Exploit Title: Nyron 1.0 - SQLi (Unauthenticated)
Creston Web Interface 1.0.0.2159 – Credential Disclosure
# Exploit Title: Creston Web Interface 1.0.0.2159 - Credential Disclosure
Hospitals Patient Records Management System 1.0 – ‘room_types’ Stored Cross Site Scripting (XSS)
# Exploit Title: Hospitals Patient Records Management System 1.0 - 'room_types' Stored Cross Site Scripting (XSS)
Hospitals Patient Records Management System 1.0 – ‘room_list’ Stored Cross Site Scripting (XSS)
# Exploit Title: Hospitals Patient Records Management System 1.0 - 'room_list' Stored Cross Site Scripting (XSS)
Hospitals Patient Records Management System 1.0 – ‘doctors’ Stored Cross Site Scripting (XSS)
# Exploit Title: Hospitals Patient Records Management System 1.0 - 'doctors' Stored Cross Site Scripting (XSS)
SalonERP 3.0.1 – ‘sql’ SQL Injection (Authenticated)
# Exploit Title: SalonERP 3.0.1 - 'sql' SQL Injection (Authenticated)
Online Diagnostic Lab Management System 1.0 – Account Takeover (Unauthenticated)
#Exploit Title: Online Diagnostic Lab Management System 1.0 - Account Takeover (Unauthenticated)
Online Diagnostic Lab Management System 1.0 – Stored Cross Site Scripting (XSS)
#Exploit Title: Online Diagnostic Lab Management System 1.0 - Stored Cross Site Scripting (XSS)
Online Diagnostic Lab Management System 1.0 – SQL Injection (Unauthenticated)
#Exploit Title: Online Diagnostic Lab Management System 1.0 - SQL Injection (Unauthenticated)
WordPress Core 5.8.2 – ‘WP_Query’ SQL Injection
# Exploit Title: WordPress Core 5.8.2 - 'WP_Query' SQL Injection
Microsoft Windows .Reg File – Dialog Spoof / Mitigation Bypass
# Exploit Title: Microsoft Windows .Reg File - Dialog Spoof / Mitigation Bypass
Microsoft Windows Defender – Detections Bypass
# Exploit Title: Microsoft Internet Explorer / ActiveX Control - Security Bypass
WordPress Plugin Frontend Uploader 1.3.2 – Stored Cross Site Scripting (XSS) (Unauthenticated)
# Exploit Title: WordPress Plugin Frontend Uploader 1.3.2 - Stored Cross Site Scripting (XSS) (Unauthenticated)
HTTP Commander 3.1.9 – Stored Cross Site Scripting (XSS)
# Exploit Title: HTTP Commander 3.1.9 - Stored Cross Site Scripting (XSS)
Online Railway Reservation System 1.0 – ‘id’ SQL Injection (Unauthenticated)
# Exploit Title: Online Railway Reservation System 1.0 - 'id' SQL Injection (Unauthenticated)
Online Railway Reservation System 1.0 – Remote Code Execution (RCE) (Unauthenticated)
#Exploit Title: Online Railway Reservation System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
Online Railway Reservation System 1.0 – Admin Account Creation (Unauthenticated)
#Exploit Title: Online Railway Reservation System 1.0 - Admin Account Creation (Unauthenticated)
Online Railway Reservation System 1.0 – ‘Multiple’ Stored Cross Site Scripting (XSS) (Unauthenticated)
#Exploit Title: Online Railway Reservation System 1.0 - 'Multiple' Stored Cross Site Scripting (XSS) (Unauthenticated)
VUPlayer 2.49 – ‘.wax’ Local Buffer Overflow (DEP Bypass)
# Exploit Title: VUPlayer 2.49 - '.wax' Local Buffer Overflow (DEP Bypass)
Open-AudIT Community 4.2.0 – Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: Open-AudIT Community 4.2.0 - Cross-Site Scripting (XSS) (Authenticated)
CoreFTP Server build 725 – Directory Traversal (Authenticated)
# Exploit Title: CoreFTP Server build 725 - Directory Traversal (Authenticated)
Online Veterinary Appointment System 1.0 – ‘Multiple’ SQL Injection
# Exploit Title: Online Veterinary Appointment System 1.0 - 'Multiple' SQL Injection
CMSimple 5.4 – Cross Site Scripting (XSS)
# Exploit Title: CMSimple 5.4 - Cross Site Scripting (XSS)
Siemens S7 Layer 2 – Denial of Service (DoS)
# Exploit Title: Siemens S7 Layer 2 - Denial of Service (DoS)
RiteCMS 3.1.0 – Arbitrary File Overwrite (Authenticated)
# Exploit Title: RiteCMS 3.1.0 - Arbitrary File Overwrite (Authenticated)
RiteCMS 3.1.0 – Arbitrary File Deletion (Authenticated)
# Exploit Title: RiteCMS 3.1.0 - Arbitrary File Deletion (Authenticated)
RiteCMS 3.1.0 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: RiteCMS 3.1.0 - Remote Code Execution (RCE) (Authenticated)
WordPress Plugin Contact Form Entries 1.1.6 – Cross Site Scripting (XSS) (Unauthenticated)
# Exploit Title: WordPress Plugin Contact Form Entries 1.1.6 - Cross Site Scripting (XSS) (Unauthenticated)
ConnectWise Control 19.2.24707 – Username Enumeration
# Exploit Title: ConnectWise Control 19.2.24707 - Username Enumeration
WordPress Plugin WP Visitor Statistics 4.7 – SQL Injection
# Exploit Title: WordPress Plugin WP Visitor Statistics 4.7 - SQL Injection
Accu-Time Systems MAXIMUS 1.0 – Telnet Remote Buffer Overflow (DoS)
# Exploit Title: Accu-Time Systems MAXIMUS 1.0 - Telnet Remote Buffer Overflow (DoS)
Movie Rating System 1.0 – Broken Access Control (Admin Account Creation) (Unauthenticated)
# Exploit Title: Movie Rating System 1.0 - Broken Access Control (Admin Account Creation) (Unauthenticated)
Movie Rating System 1.0 – SQLi to RCE (Unauthenticated)
# Exploit Title: Movie Rating System 1.0 - SQLi to RCE (Unauthenticated)
Online Admission System 1.0 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: Online Admission System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
WordPress Plugin The True Ranker 2.2.2 – Arbitrary File Read (Unauthenticated)
# Exploit Title: WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read (Unauthenticated)
Library System in PHP 1.0 – ‘publisher name’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Library System in PHP 1.0 - 'publisher name' Stored Cross-Site Scripting (XSS)
SAFARI Montage 8.5 – Reflected Cross Site Scripting (XSS)
# Exploit Title: SAFARI Montage 8.5 - Reflected Cross Site Scripting (XSS)
Nettmp NNT 5.1 – SQLi Authentication Bypass
# Exploit Title: Nettmp NNT 5.1 - SQLi Authentication Bypass
Hostel Management System 2.1 – Cross Site Scripting (XSS)
# Exploit Title: Hostel Management System 2.1 - Cross Site Scripting (XSS)