Simple College Website 1.0 – ‘username’ SQL Injection / Remote Code Execution
# Exploit Title: Simple College Website 1.0 - SQL Injection / Remote Code Execution
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 69
Online Examination System 1.0 – ‘name’ Stored Cross Site Scripting
# Exploit Title: Online examination system 1.0 - 'name' Stored Cross Site Scripting
Mailman 1.x > 2.1.23 – Cross Site Scripting (XSS)
# Title: Mailman 1.x > 2.1.23 - Cross Site Scripting (XSS)
Genexis Platinum-4410 P4410-V2-1.28 – Cross Site Request Forgery to Reboot
# Exploit Title: Genexis Platinum-4410 P4410-V2-1.28 - Cross Site Request Forgery to Reboot
Nagios XI 5.7.3 – ‘mibs.php’ Remote Command Injection (Authenticated)
# Exploit Title: Nagios XI 5.7.3 - 'mibs.php' Remote Command Injection (Authenticated)
CSE Bookstore 1.0 – Authentication Bypass
# Exploit Title: CSE Bookstore Authentication Bypass
PackageKit < 1.1.13 - File Existence Disclosure
# Exploit Title: File Existence Disclosure in PackageKit < 1.1.13-2ubuntu1
aptdaemon < 1.1.1 - File Existence Disclosure
# Exploit Title: File Existence Disclosure in aptdaemon
Blueman < 2.1.4 - Local Privilege Escalation
# Exploit Title: Local Privilege Escalation in Blueman < 2.1.4
Oracle Business Intelligence Enterprise Edition 5.5.0.0.0 / 12.2.1.3.0 / 12.2.1.4.0 – ‘getPreviewImage’ Directory Traversal/Local File Inclusion
# Exploit Title: Oracle Business Intelligence Enterprise Edition 5.5.0.0.0 / 12.2.1.3.0 / 12.2.1.4.0 - 'getPreviewIma...
Exploit – EPSON 1.124 – ‘seksmdb.exe’ Unquoted Service Path
# Exploit Title: EPSON 1.124 - 'seksmdb.exe' Unquoted Service Path
Program Access Controller v1.2.0.0 – ‘PACService.exe’ Unquoted Service Path
# Exploit Title: Program Access Controller v1.2.0.0 - 'PACService.exe' Unquoted Service Path
Prey 1.9.6 – “CronService” Unquoted Service Path
# Exploit Title: Prey 1.9.6 - "CronService" Unquoted Service Path
IP Watcher v3.0.0.30 – ‘PACService.exe’ Unquoted Service Path
# Exploit Title: IP Watcher v3.0.0.30 - 'PACService.exe' Unquoted Service Path
TDM Digital Signage PC Player 4.1 – Insecure File Permissions
# Exploit Title: TDM Digital Signage PC Player 4.1 - Insecure File Permissions
Adtec Digital Multiple Products – Default Hardcoded Credentials Remote Root
# Exploit Title: Adtec Digital Multiple Products - Default Hardcoded Credentials Remote Root
Sentrifugo 3.2 – File Upload Restriction Bypass (Authenticated)
# Exploit Title: Sentrifugo 3.2 - File Upload Restriction Bypass (Authenticated)
Client Management System 1.0 – ‘searchdata’ SQL injection
# Exploit Title: Client Management System 1.0 - 'searchdata' SQL injection
Sphider Search Engine 1.3.6 – ‘word_upper_bound’ RCE (Authenticated)
# Exploit Title: Sphider Search Engine 1.3.6 - 'word_upper_bound' RCE (Authenticated)
GoAhead Web Server 5.1.1 – Digest Authentication Capture Replay Nonce Reuse
# Exploit Title: GoAhead Web Server 5.1.1 - Digest Authentication Capture Replay Nonce Reuse
CMS Made Simple 2.1.6 – ‘cntnt01detailtemplate’ Server-Side Template Injection
# Exploit Title: CMS Made Simple 2.1.6 - 'cntnt01detailtemplate' Server-Side Template Injection
Online Health Care System 1.0 – Multiple Cross Site Scripting (Stored)
# Exploit Title: Online Health Care System 1.0 - Multiple Cross Site Scripting (Stored)
InoERP 0.7.2 – Remote Code Execution (Unauthenticated)
#!/usr/bin/python
PDW File Browser 1.3 – ‘new_filename’ Cross-Site Scripting (XSS)
# Exploit Title: PDW File Browser
Genexis Platinum-4410 – ‘SSID’ Persistent XSS
# Exploit Title: Persistent XSS in SSID
ReQuest Serious Play Media Player 3.0 – Directory Traversal File Disclosure
# Exploit Title: ReQuest Serious Play Media Player 3.0 - Directory Traversal File Disclosure Vulnerability
ReQuest Serious Play F3 Media Server 7.0.3 – Debug Log Disclosure
# Exploit Title: ReQuest Serious Play F3 Media Server 7.0.3 - Debug Log Disclosure
ReQuest Serious Play F3 Media Server 7.0.3 – Remote Denial of Service
# Exploit Title: ReQuest Serious Play F3 Media Server 7.0.3 - Remote Denial of Service
ReQuest Serious Play F3 Media Server 7.0.3 – Remote Code Execution (Unauthenticated)
# Exploit Title: ReQuest Serious Play F3 Media Server 7.0.3 - Remote Code Execution (Unauthenticated)
Online Library Management System 1.0 – Arbitrary File Upload
# Exploit Title: Online Library Management System 1.0 - Arbitrary File Upload
Ajenti 2.1.36 – Remote Code Execution (Authenticated)
#!/usr/bin/python3
Stock Management System 1.0 – ‘brandId and categoriesId’ SQL Injection
# Exploit Title: Stock Management System 1.0 - SQL Injection
Car Rental Management System 1.0 – Arbitrary File Upload
# Exploit Title: Car Rental Management System 1.0 - Arbitrary File Upload
User Registration & Login and User Management System 2.1 – SQL Injection
# Exploit Title: User Registration & Login and User Management System 2.1 - SQL Injection
Point of Sales 1.0 – ‘id’ SQL Injection
#Exploit Title: Point of Sales 1.0 - SQL Injection
Lot Reservation Management System 1.0 – Authentication Bypass
#Exploit Title: lot reservation management system 1.0 - Authentication Bypass
Lot Reservation Management System 1.0 – Cross-Site Scripting (Stored)
#Exploit Title: lot reservation management system 1.0 - Stored Cross Site Scripting
Gym Management System 1.0 – ‘id’ SQL Injection
# Exploit Title: Gym Management System 1.0 - 'id' SQL Injection
Point of Sales 1.0 – ‘username’ SQL Injection
# Exploit Title: Point of Sales 1.0 - 'username' SQL Injection
School Faculty Scheduling System 1.0 – ‘id’ SQL Injection
# Exploit Title: School Faculty Scheduling System 1.0 - 'id' SQL Injection
School Faculty Scheduling System 1.0 – ‘username’ SQL Injection
# Exploit Title: School Faculty Scheduling System 1.0 - 'username' SQL Injection
Gym Management System 1.0 – Authentication Bypass
# Exploit Title: Gym Management System 1.0 - Authentication Bypass
Gym Management System 1.0 – Stored Cross Site Scripting
# Exploit Title: Gym Management System 1.0 - Stored Cross Site Scripting
Bludit 3.9.2 – Auth Bruteforce Bypass
#!/usr/bin/python3
TextPattern CMS 4.8.3 – Remote Code Execution (Authenticated)
#!/usr/bin/python3
Hrsale 2.0.0 – Local File Inclusion
# Exploit Title: Hrsale 2.0.0 - Local File Inclusion
School Faculty Scheduling System 1.0 – Stored Cross Site Scripting POC
# Exploit Title: School Faculty Scheduling System 1.0 - Stored Cross Site Scripting
School Faculty Scheduling System 1.0 – Authentication Bypass POC
# Exploit Title: School Faculty Scheduling System 1.0 - Authentication Bypass
GOautodial 4.0 – Authenticated Shell Upload
# Exploit Title: GOautodial 4.0 - Authenticated Shell Upload