FormaLMS 2.4.4 – Authentication Bypass
# Exploit Title: FormaLMS 2.4.4 - Authentication Bypass
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 41
Employee Daily Task Management System 1.0 – ‘Name’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Employee Daily Task Management System 1.0 - 'Name' Stored Cross-Site Scripting (XSS)
Employee and Visitor Gate Pass Logging System 1.0 – ‘name’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Employee and Visitor Gate Pass Logging System 1.0 - 'name' Stored Cross-Site Scripting (XSS)
Simple Client Management System 1.0 – SQLi (Authentication Bypass)
# Exploit Title: Simple Client Management System 1.0 - SQLi (Authentication Bypass)
Simple Client Management System 1.0 – ‘multiple’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Simple Client Management System 1.0 - 'multiple' Stored Cross-Site Scripting (XSS)
Kmaleon 1.1.0.205 – ‘tipocomb’ SQL Injection (Authenticated)
# Exploit Title: Kmaleon 1.1.0.205 - 'tipocomb' SQL Injection (Authenticated)
Money Transfer Management System 1.0 – Authentication Bypass
# Exploit Title: Money Transfer Management System 1.0 - Authentication Bypass
Froxlor 0.10.29.1 – SQL Injection (Authenticated)
# Exploit Title: Froxlor 0.10.29.1 - SQL Injection (Authenticated)
WordPress Plugin Backup and Restore 1.0.3 – Arbitrary File Deletion
# Exploit Title: WordPress Plugin Backup and Restore 1.0.3 - Arbitrary File Deletion
zlog 1.2.15 – Buffer Overflow
# Exploit Title: zlog 1.2.15 - Buffer Overflow
FusionPBX 4.5.29 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: FusionPBX 4.5.29 - Remote Code Execution (RCE) (Authenticated)
10-Strike Network Inventory Explorer Pro 9.31 – ‘srvInventoryWebServer’ Unquoted Service Path
# Exploit Title: 10-Strike Network Inventory Explorer Pro 9.31 - 'srvInventoryWebServer' Unquoted Service Path
Payment Terminal 3.1 – ‘Multiple’ Cross-Site Scripting (XSS)
# Exploit Title: Payment Terminal 3.1 - 'Multiple' Cross-Site Scripting (XSS)
ImportExportTools NG 10.0.4 – HTML Injection
# Exploit Title: ImportExportTools NG 10.0.4 - HTML Injection
Opencart 3 Extension TMD Vendor System – Blind SQL Injection
# Exploit Title: Opencart 3 Extension TMD Vendor System - Blind SQL Injection
PHPJabbers Simple CMS 5 – ‘name’ Persistent Cross-Site Scripting (XSS)
# Exploit Title: PHPJabbers Simple CMS 5 - 'name' Persistent Cross-Site Scripting (XSS)
WordPress Plugin Hotel Listing 3 – ‘Multiple’ Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Hotel Listing 3 - 'Multiple' Cross-Site Scripting (XSS)
Fuel CMS 1.4.1 – Remote Code Execution (3)
# Exploit Title: Fuel CMS 1.4.1 - Remote Code Execution (3)
Eclipse Jetty 11.0.5 – Sensitive File Disclosure
# Exploit Title: Eclipse Jetty 11.0.5 - Sensitive File Disclosure
WordPress Plugin Popup Anything 2.0.3 – ‘Multiple’ Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Popup Anything 2.0.3 - 'Multiple' Stored Cross-Site Scripting (XSS)
OpenAM 13.0 – LDAP Injection
# Exploit Title: OpenAM 13.0 - LDAP Injection
Simplephpscripts Simple CMS 2.1 – ‘Multiple’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Simplephpscripts Simple CMS 2.1 - 'Multiple' Stored Cross-Site Scripting (XSS)
Simplephpscripts Simple CMS 2.1 – ‘Multiple’ SQL Injection
# Exploit Title: Simplephpscripts Simple CMS 2.1 - 'Multiple' SQL Injection
RDP Manager 4.9.9.3 – Denial-of-Service (PoC)
# Exploit Title: RDP Manager 4.9.9.3 - Denial-of-Service (PoC)
Sonicwall SonicOS 6.5.4 – ‘Common Name’ Cross-Site Scripting (XSS)
# Exploit Title: Sonicwall SonicOS 6.5.4 - 'Common Name' Cross-Site Scripting (XSS)
PHP Melody 3.0 – ‘Multiple’ Cross-Site Scripting (XSS)
# Exploit Title: PHP Melody 3.0 - 'Multiple' Cross-Site Scripting (XSS)
PHP Melody 3.0 – ‘vid’ SQL Injection
# Exploit Title: PHP Melody 3.0 - 'vid' SQL Injection
PHP Melody 3.0 – Persistent Cross-Site Scripting (XSS)
# Exploit Title: PHP Melody 3.0 - Persistent Cross-Site Scripting (XSS)
Mult-e-Cart Ultimate 2.4 – ‘id’ SQL Injection
# Exploit Title: Mult-e-Cart Ultimate 2.4 - 'id' SQL Injection
Isshue Shopping Cart 3.5 – ‘Title’ Cross Site Scripting (XSS)
# Exploit Title: Isshue Shopping Cart 3.5 - 'Title' Cross Site Scripting (XSS)
Vanguard 2.1 – ‘Search’ Cross-Site Scripting (XSS)
# Exploit Title: Vanguard 2.1 - 'Search' Cross-Site Scripting (XSS)
Ultimate POS 4.4 – ‘name’ Cross-Site Scripting (XSS)
# Exploit Title: Ultimate POS 4.4 - 'name' Cross-Site Scripting (XSS)
Dynojet Power Core 2.3.0 – Unquoted Service Path
# Exploit Title: Dynojet Power Core 2.3.0 - Unquoted Service Path
Employee Record Management System 1.2 – ’empid’ SQL injection (Unauthenticated)
# Title: Employee Record Management System 1.2 - 'empid' SQL injection (Unauthenticated)
Kingdia CD Extractor 3.0.2 – Buffer Overflow (SEH)
# Exploit Title: Kingdia CD Extractor 3.0.2 - Buffer Overflow (SEH)
YouTube Video Grabber 1.9.9.1 – Buffer Overflow (SEH)
# Exploit Title: YouTube Video Grabber 1.9.9.1 - Buffer Overflow (SEH)
10-Strike Network Inventory Explorer Pro 9.31 – Buffer Overflow (SEH)
# Exploit Title: 10-Strike Network Inventory Explorer Pro 9.31 - Buffer Overflow (SEH)
i3 International Annexxus Cameras Ax-n 5.2.0 – Application Logic Flaw
# Exploit Title: i3 International Annexxus Cameras Ax-n 5.2.0 - Application Logic Flaw
Codiad 2.8.4 – Remote Code Execution (Authenticated) (4)
# Exploit Title: Codiad 2.8.4 - Remote Code Execution (Authenticated) (4)
Umbraco v8.14.1 – ‘baseUrl’ SSRF
# Exploit Title: Umbraco v8.14.1 - 'baseUrl' SSRF
WebCTRL OEM 6.5 – ‘locale’ Reflected Cross-Site Scripting (XSS)
# Exploit Title: WebCTRL OEM 6.5 - 'locale' Reflected Cross-Site Scripting (XSS)
Movable Type 7 r.5002 – XMLRPC API OS Command Injection (Metasploit)
class MetasploitModule < Msf::Exploit::Remote
Mini-XML 3.2 – Heap Overflow
# Exploit Title: Mini-XML 3.2 - Heap Overflow
WordPress Plugin Supsystic Contact Form 1.7.18 – ‘label’ Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Supsystic Contact Form 1.7.18 - 'label' Stored Cross-Site Scripting (XSS)
PHPGurukul Hostel Management System 2.1 – Cross-site request forgery (CSRF) to Cross-site Scripting (XSS)
# Exploit Title: PHPGurukul Hostel Management System 2.1 - Cross-site request forgery (CSRF) to Cross-site Scripting ...
WordPress Plugin Filterable Portfolio Gallery 1.0 – ‘title’ Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Filterable Portfolio Gallery 1.0 - 'title' Stored Cross-Site Scripting (XSS)
Hikvision Web Server Build 210702 – Command Injection
# Exploit Title: Hikvision Web Server Build 210702 - Command Injection
WordPress Plugin TaxoPress 3.0.7.1 – Stored Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: WordPress Plugin TaxoPress 3.0.7.1 - Stored Cross-Site Scripting (XSS) (Authenticated)