Dolibarr 12.0.3 – SQLi to RCE
# Exploit Title: Dolibarr 12.0.3 - SQLi to RCE
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 64
Courier Management System 1.0 – ‘First Name’ Stored XSS
# Exploit Title: Courier Management System 1.0 - 'First Name' Stored XSS
Courier Management System 1.0 – ‘MULTIPART street ((custom) ‘ SQL Injection
# Exploit Title: Courier Management System 1.0 - 'MULTIPART street ' SQL Injection
Courier Management System 1.0 – ‘ref_no’ SQL Injection
# Exploit Title: Courier Management System 1.0 - 'ref_no' SQL Injection
PDF Complete 3.5.310.2002 – ‘pdfsvc.exe’ Unquoted Service Path
# Exploit Title: PDF Complete 3.5.310.2002 - 'pdfsvc.exe' Unquoted Service Path
Barcodes generator 1.0 – ‘name’ Stored Cross Site Scripting
# Exploit Title: Barcodes generator 1.0 - 'name' Stored Cross Site Scripting
OpenCart 3.0.3.6 – Cross Site Request Forgery
# Exploit Title: OpenCart 3.0.3.6 - Cross Site Request Forgery
Openfire 4.6.0 – ‘path’ Stored XSS
# Exploit Title: Openfire 4.6.0 - 'path' Stored XSS
Library Management System 2.0 – Auth Bypass SQL Injection
# Exploit Title: Library Management System 2.0 - Auth Bypass SQL Injection
WordPress Plugin Popup Builder 3.69.6 – Multiple Stored Cross Site Scripting
# Exploit Title: WordPress Plugin Popup Builder 3.69.6 - Multiple Stored Cross Site Scripting
SmarterMail Build 6985 – Remote Code Execution
# Exploit Title: SmarterMail Build 6985 - Remote Code Execution
Dup Scout Enterprise 10.0.18 – ‘sid’ Remote Buffer Overflow (SEH)
# Exploit Title: Dup Scout Enterprise 10.0.18 - 'sid' Remote Buffer Overflow (SEH)
Huawei HedEx Lite 200R006C00SPC005 – Path Traversal
# Exploit Title: Huawei HedEx Lite 200R006C00SPC005 - Path Traversal
VestaCP 0.9.8-26 – ‘LoginAs’ Insufficient Session Validation
# Exploit Title: VestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation
VestaCP 0.9.8-26 – ‘backup’ Information Disclosure
# Exploit Title: VestaCP 0.9.8-26 - 'backup' Information Disclosure
Tibco ObfuscationEngine 5.11 – Fixed Key Password Decryption
# Exploit Title: Tibco ObfuscationEngine 5.11 - Fixed Key Password Decryption
Task Management System 1.0 – ‘First Name and Last Name’ Stored XSS
# Exploit Title: Task Management System 1.0 - 'First Name and Last Name' Stored XSS
Task Management System 1.0 – Unrestricted File Upload to Remote Code Execution
# Exploit Title: Task Management System 1.0 - Unrestricted File Upload to Remote Code Execution
Task Management System 1.0 – ‘id’ SQL Injection
# Exploit Title: Task Management System 1.0 - 'id' SQL Injection
Online Bus Ticket Reservation 1.0 – SQL Injection
# Exploit Title: Online Bus Ticket Reservation 1.0 - SQL Injection
Microsoft GamingServices 2.47.10001.0 – ‘GamingServices’ Unquoted Service Path
# Exploit Title: Microsoft GamingServices 2.47.10001.0 - 'GamingServices' Unquoted Service Path
Employee Performance Evaluation System 1.0 – ‘Task and Description’ Persistent Cross Site Scripting
# Exploit Title: Employee Performance Evaluation System 1.0 - ' Task and Description' Persistent Cross Site Scripting
Rumble Mail Server 0.51.3135 – ‘rumble_win32.exe’ Unquoted Service Path
# Exploit Title: Rumble Mail Server 0.51.3135 - 'rumble_win32.exe' Unquoted Service Path
Cyber Cafe Management System Project (CCMS) 1.0 – Persistent Cross-Site Scripting
# Exploit Title: Cyber Cafe Management System Project (CCMS) 1.0 - Persistent Cross-Site Scripting
Kite 1.2020.1119.0 – ‘KiteService’ Unquoted Service Path
# Exploit Title: Kite 1.2020.1119.0 - 'KiteService' Unquoted Service Path
TapinRadio 2.13.7 – Denial of Service (PoC)
# Exploit Title: TapinRadio 2.13.7 - Denial of Service (PoC)
RarmaRadio 2.72.5 – Denial of Service (PoC)
# Exploit Title: RarmaRadio 2.72.5 - Denial of Service (PoC)
Savsoft Quiz 5 – ‘Skype ID’ Stored XSS
# Exploit Title: Savsoft Quiz 5 - 'Skype ID' Stored XSS
vBulletin 5.6.3 – ‘group’ Cross Site Scripting
# Exploit Title: vBulletin 5.6.3 - 'group' Cross Site Scripting
Dup Scout Enterprise 10.0.18 – ‘online_registration’ Remote Buffer Overflow
# Dup Scout Enterprise 10.0.18 - 'online_registration' Remote Buffer Overflow
Druva inSync Windows Client 6.6.3 – Local Privilege Escalation (PowerShell)
# Exploit Title: Druva inSync Windows Client 6.6.3 - Local Privilege Escalation (PowerShell)
WordPress Plugin Canto 1.3.0 – Blind SSRF (Unauthenticated)
# Exploit Title: Wordpress Plugin Canto 1.3.0 - Blind SSRF (Unauthenticated)
Composr CMS 10.0.34 – ‘banners’ Persistent Cross Site Scripting
# Exploit Title: Composr CMS 10.0.34 - 'banners' Persistent Cross Site Scripting
IDT PC Audio 1.0.6499.0 – ‘STacSV’ Unquoted Service Path
# Exploit Title: IDT PC Audio 1.0.6499.0 - 'STacSV' Unquoted Service Path
Phpscript-sgh 0.1.0 – Time Based Blind SQL Injection
# Exploit Title: Phpscript-sgh 0.1.0 - Time Based Blind SQL Injection
MiniCMS 1.10 – ‘content box’ Stored XSS
# Exploit Title: MiniCMS 1.10 - 'content box' Stored XSS
Testa Online Test Management System 3.4.7 – ‘q’ SQL Injection
# Exploit Title: Testa Online Test Management System 3.4.7 - 'q' SQL Injection
Chromium 83 – Full CSP Bypass
#Title: Chromium 83 - Full CSP Bypass
Savsoft Quiz 5 – ‘field_title’ Stored Cross-Site Scripting
# Exploit Title: Savsoft Quiz 5 - 'field_title' Stored Cross-Site Scripting
Forma LMS 2.3 – ‘First & Last Name’ Stored Cross-Site Scripting
# Exploit Title: Forma LMS 2.3 - 'First & Last Name' Stored Cross-Site Scripting
Laravel Nova 3.7.0 – ‘range’ DoS
# Exploit Title: Laravel Nova 3.7.0 - 'range' DoS
CMS Made Simple 2.2.15 – Stored Cross-Site Scripting via SVG File Upload (Authenticated)
# Exploit Title: CMS Made Simple 2.2.15 - Stored Cross-Site Scripting via SVG File Upload (Authenticated)
Zabbix 5.0.0 – Stored XSS via URL Widget Iframe
# Exploit Title: Zabbix 5.0.0 - Stored XSS via URL Widget Iframe
User Registration & Login and User Management System 2.1 – Cross Site Request Forgery
# Exploit Title: User Registration & Login and User Management System 2.1 - Cross Site Request Forgery
Coastercms 5.8.18 – Stored XSS
# Exploit Title: Coastercms 5.8.18 - Stored XSS
EgavilanMedia Address Book 1.0 Exploit – SQLi Auth Bypass
# Exploit Title: EgavilanMedia Address Book 1.0 Exploit - SQLi Auth Bypass
Online Matrimonial Project 1.0 – Authenticated Remote Code Execution
# Exploit Title: Online Matrimonial Project 1.0 - Authenticated Remote Code Execution
mojoPortal forums 2.7.0.0 – ‘Title’ Persistent Cross-Site Scripting
# Exploit Title: mojoPortal forums 2.7.0.0 - 'Title' Persistent Cross-Site Scripting
Sony BRAVIA Digital Signage 1.7.8 – Unauthenticated Remote File Inclusion
# Exploit Title: Sony BRAVIA Digital Signage 1.7.8 - Unauthenticated Remote File Inclusion
Sony BRAVIA Digital Signage 1.7.8 – System API Information Disclosure
# Exploit Title: Sony BRAVIA Digital Signage 1.7.8 - System API Information Disclosure