Simple Library Management System 1.0 – ‘rollno’ SQL Injection
# Exploit Title: Simple Library Management System 1.0 - 'rollno' SQL Injection
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 47
CMSuno 1.7 – ‘tgo’ Stored Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: CMSuno 1.7 - 'tgo' Stored Cross-Site Scripting (XSS) (Authenticated)
Moodle 3.9 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Moodle 3.9 - Remote Code Execution (RCE) (Authenticated)
GFI Mail Archiver 15.1 – Telerik UI Component Arbitrary File Upload (Unauthenticated)
# Exploit Title: GFI Mail Archiver 15.1 - Telerik UI Component Arbitrary File Upload (Unauthenticated)
WordPress Plugin WP Customize Login 1.1 – ‘Change Logo Title’ Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin WP Customize Login 1.1 - 'Change Logo Title' Stored Cross-Site Scripting (XSS)
qdPM 9.1 – Remote Code Execution (Authenticated)
# Exploit Title: qdPM 9.1 - Remote Code Execution (RCE) (Authenticated)
qdPM 9.2 – Password Exposure (Unauthenticated)
# Exploit Title: qdPM 9.2 - DB Connection String and Password Exposure (Unauthenticated)
Client Management System 1.1 – ‘cname’ Stored Cross-site scripting (XSS)
# Exploit Title: Client Management System 1.1 - 'cname' Stored Cross-site scripting (XSS)
ApacheOfBiz 17.12.01 – Remote Command Execution (RCE)
# Exploit Title: ApacheOfBiz 17.12.01 - Remote Command Execution (RCE) via Unsafe Deserialization of XMLRPC arguments
Hotel Management System 1.0 – Cross-Site Scripting (XSS) Arbitrary File Upload Remote Code Execution (RCE)
# Exploit Title: Hotel Management System 1.0 - Cross-Site Scripting (XSS) Arbitrary File Upload Remote Code Execution...
Men Salon Management System 1.0 – SQL Injection Authentication Bypass
# Exploit Title: Men Salon Management System 1.0 - SQL Injection Authentication Bypass
Neo4j 3.4.18 – RMI based Remote Code Execution (RCE)
# Exploit Title: Neo4j 3.4.18 - RMI based Remote Code Execution (RCE)
Online Hotel Reservation System 1.0 – ‘Multiple’ Cross-site scripting (XSS)
# Exploit Title: Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting (XSS)
Panasonic Sanyo CCTV Network Camera 2.03-0x – Cross-Site Request Forgery (Change Password)
# Exploit Title: Panasonic Sanyo CCTV Network Camera 2.03-0x - 'Disable Authentication / Change Password' CSRF
Denver IP Camera SHO-110 – Unauthenticated Snapshot
# Exploit Title: Denver IP Camera SHO-110 - Unauthenticated Snapshot
Longjing Technology BEMS API 1.21 – Remote Arbitrary File Download
# Exploit Title: Longjing Technology BEMS API 1.21 - Remote Arbitrary File Download
IntelliChoice eFORCE Software Suite 2.5.9 – Username Enumeration
# Exploit Title: IntelliChoice eFORCE Software Suite 2.5.9 - Username Enumeration
Care2x Integrated Hospital Info System 2.7 – ‘Multiple’ SQL Injection
# Exploit Title: Care2x Integrated Hospital Info System 2.7 - 'Multiple' SQL Injection
CloverDX 5.9.0 – Cross-Site Request Forgery (CSRF)
# Exploit Title: CloverDX 5.9.0 - Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE)
Oracle Fatwire 6.3 – Multiple Vulnerabilities
# Exploit Title: Oracle Fatwire 6.3 - Multiple Vulnerabilities
Event Registration System with QR Code 1.0 – Authentication Bypass
# Exploit Title: Event Registration System with QR Code 1.0 - Authentication Bypass & RCE
Denver Smart Wifi Camera SHC-150 – ‘Telnet’ Remote Code Execution (RCE)
# Exploit Title: Denver Smart Wifi Camera SHC-150 - 'Telnet' Remote Code Execution (RCE)
TripSpark VEO Transportation – Blind SQL Injection
# Exploit Title: TripSpark VEO Transportation - 'editOEN' Blind SQL Injection
PHP 7.3.15-3 – ‘PHP_SESSION_UPLOAD_PROGRESS’ Session Data Injection
# Exploit Title: PHP 7.3.15-3 - 'PHP_SESSION_UPLOAD_PROGRESS' Session Data Injection
Customer Relationship Management System (CRM) 1.0 – Sql Injection Authentication Bypass
# Exploit Title: Customer Relationship Management System (CRM) 1.0 - Sql Injection Authentication Bypass
Elasticsearch ECE 7.13.3 – Anonymous Database Dump
# Exploit Title: Elasticsearch ECE 7.13.3 - Anonymous Database Dump
Leawo Prof. Media 11.0.0.1 – Denial of Service (DoS) (PoC)
# Exploit Title: Leawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC)
NoteBurner 2.35 – Denial Of Service (DoS) (PoC)
# Exploit Title: NoteBurner 2.35 - Denial Of Service (DoS) (PoC)
XOS Shop 1.0.9 – ‘Multiple’ Arbitrary File Deletion (Authenticated)
# Exploit Title: XOS Shop 1.0.9 - 'Multiple' Arbitrary File Deletion (Authenticated)
ElasticSearch 7.13.3 – Memory disclosure
# Exploit Title: ElasticSearch 7.13.3 - Memory disclosure
WordPress Plugin Simple Post 1.1 – ‘Text field’ Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Simple Post 1.1 - 'Text field' Stored Cross-Site Scripting (XSS)
Microsoft SharePoint Server 2019 – Remote Code Execution (2)
# Exploit Title: Microsoft SharePoint Server 2019 - Remote Code Execution (2)
KevinLAB BEMS 1.0 – Undocumented Backdoor Account
# Exploit Title: KevinLAB BEMS 1.0 - Undocumented Backdoor Account
KevinLAB BEMS 1.0 – Authentication Bypass
# Exploit Title: KevinLAB BEMS 1.0 - Unauthenticated SQL Injection / Authentication Bypass
KevinLAB BEMS 1.0 – File Path Traversal Information Disclosure (Authenticated)
# Exploit Title: KevinLAB BEMS 1.0 - File Path Traversal Information Disclosure (Authenticated)
CSZ CMS 1.2.9 – ‘Multiple’ Arbitrary File Deletion
# Exploit Title: CSZ CMS 1.2.9 - 'Multiple' Arbitrary File Deletion
WordPress Plugin KN Fix Your Title 1.0.1 – ‘Separator’ Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin KN Fix Your Title 1.0.1 - 'Separator' Stored Cross-Site Scripting (XSS)
Webmin 1.973 – ‘run.cgi’ Cross-Site Request Forgery (CSRF)
# Exploit Title: Webmin 1.973 - 'run.cgi' Cross-Site Request Forgery (CSRF)
WordPress Plugin LearnPress 3.2.6.7 – ‘current_items’ SQL Injection (Authenticated)
# Exploit Title: WordPress Plugin LearnPress 3.2.6.7 - 'current_items' SQL Injection (Authenticated)
WordPress Plugin LearnPress 3.2.6.8 – Privilege Escalation
# Exploit Title: WordPress Plugin LearnPress 3.2.6.8 - Privilege Escalation
WordPress Plugin Mimetic Books 0.2.13 – ‘Default Publisher ID field’ Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Mimetic Books 0.2.13 - 'Default Publisher ID field' Stored Cross-Site Scripting (XSS)
PEEL Shopping 9.3.0 – ‘id’ Time-based SQL Injection
# Exploit Title: PEEL Shopping 9.3.0 - 'id' Time-based SQL Injection
Argus Surveillance DVR 4.0 – Weak Password Encryption
# Exploit Title: Argus Surveillance DVR 4.0 - Weak Password Encryption
ForgeRock Access Manager 14.6.3 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: ForgeRock Access Manager/OpenAM 14.6.3 - Remote Code Execution (RCE) (Unauthenticated)
Seagate BlackArmor NAS sg2000-2000.1331 – Command Injection
# Exploit Title: Seagate BlackArmor NAS sg2000-2000.1331 - Command Injection
Aruba Instant 8.7.1.0 – Arbitrary File Modification
# Exploit Title: Aruba Instant 8.7.1.0 - Arbitrary File Modification
osCommerce 2.3.4.1 – Remote Code Execution (2)
# Exploit Title: osCommerce 2.3.4.1 - Remote Code Execution (2)
WordPress Plugin Popular Posts 5.3.2 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: WordPress Plugin Popular Posts 5.3.2 - Remote Code Execution (RCE) (Authenticated)
Linux Kernel 2.6.19 < 5.9 - 'Netfilter Local Privilege Escalation
// clang-format off
Aruba Instant (IAP) – Remote Code Execution
import socket