Stock Management System 1.0 – ‘Product Name’ Persistent Cross-Site Scripting
# Exploit Title: Stock Management System 1.0 - Persistent Cross-Site Scripting (Product Name)
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 70
Stock Management System 1.0 – ‘Categories Name’ Persistent Cross-Site Scripting
# Exploit Title: Stock Management System 1.0 - Persistent Cross-Site Scripting (Categories Name)
Stock Management System 1.0 – ‘Brand Name’ Persistent Cross-Site Scripting
# Exploit Title: Stock Management System 1.0 - Persistent Cross-Site Scripting (Brand Name)
Tiki Wiki CMS Groupware 21.1 – Authentication Bypass
# Exploit Title: Tiki Wiki CMS Groupware 21.1 - Authentication Bypass
Comtrend AR-5387un router – Persistent XSS (Authenticated)
#!/usr/bin/env python3
Loan Management System 1.0 – Multiple Cross Site Scripting (Stored)
# Exploit Title: Loan Management System 1.0 - Multiple Cross Site Scripting (Stored)
WordPress Plugin WP Courses < 2.0.29 - Broken Access Controls leading to Courses Content Disclosure
# Exploit Title: WP Courses < 2.0.29 - Broken Access Controls leading to
Visitor Management System in PHP 1.0 – SQL Injection (Authenticated)
# Title: Visitor Management System in PHP 1.0 - Authenticated SQL Injection
Ultimate Project Manager CRM PRO Version 2.0.5 – SQLi (Authenticated)
# Exploit Title: Ultimate Project Manager CRM PRO 2.0.5 - SQLi Credentials Leakage
WordPress Plugin HS Brand Logo Slider 2.1 – ‘logoupload’ File Upload
# Exploit Title: WordPress Plugin HS Brand Logo Slider 2.1 - 'logoupload' File Upload
User Registration & Login and User Management System With admin panel 2.1 – Persistent XSS
# Exploit Title: User Registration & Login and User Management System With admin panel 2.1 - Persistent XSS
RiteCMS 2.2.1 – Remote Code Execution (Authenticated)
# Exploit Title: RiteCMS 2.2.1 - Authenticated Remote Code Execution
Mobile Shop System v1.0 – SQL Injection Authentication Bypass
# Title: Mobile Shop System v1.0 - SQLi lead to authentication bypass
Apache Struts 2 – DefaultActionMapper Prefixes OGNL Code Execution
# Exploit Title: Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution
WordPress Plugin Rest Google Maps < 7.11.18 - SQL Injection
# Exploit Title: WordPress Rest Google Maps Plugin SQL Injection
WordPress Plugin Colorbox Lightbox v1.1.1 – Persistent Cross-Site Scripting (Authenticated)
# Exploit Title: WordPress Plugin Colorbox Lightbox v1.1.1 - Persistent Cross-Site Scripting Vulnerability (Authentic...
Tourism Management System 1.0 – Arbitrary File Upload
#Exploit Title: Tourism Management System 1.0 - Arbitrary File Upload
Nagios XI 5.7.3 – ‘Contact Templates’ Persistent Cross-Site Scripting
# Exploit Title: Nagios XI 5.7.3 - 'Contact Templates' Persistent Cross-Site Scripting
Nagios XI 5.7.3 – ‘Manage Users’ Authenticated SQL Injection
# Exploit Title: Nagios XI 5.7.3 - 'Manage Users' Authenticated SQL Injection
Nagios XI 5.7.3 – ‘SNMP Trap Interface’ Authenticated SQL Injection
# Exploit Title: Nagios XI 5.7.3 - 'SNMP Trap Interface' Authenticated SQL Injection
Online Student’s Management System 1.0 – Remote Code Execution (Authenticated)
# Exploit Title: Online Student's Management System 1.0 - Remote Code Execution (Authenticated)
Online Discussion Forum Site 1.0 – XSS in Messaging System
# Exploit Title: Online Discussion Forum Site 1.0 - XSS in Messaging System
Online Job Portal 1.0 – Cross Site Scripting (Stored)
# Exploit Title: Online Job Portal 1.0 Cross Site Scripting (Stored)
HiSilicon Video Encoders – Unauthenticated file disclosure via path traversal
#!/usr/bin/env bash
HiSilicon Video Encoders – RCE via unauthenticated command injection
#!/usr/bin/env bash
HiSilicon video encoders – RCE via unauthenticated upload of malicious firmware
#!/usr/bin/env bash
HiSilicon Video Encoders – Full admin access via backdoor password
#!/usr/bin/env bash
HiSilicon Video Encoders – Unauthenticated RTSP buffer overflow (DoS)
#!/usr/bin/env bash
Jenkins 2.63 – Sandbox bypass in pipeline: Groovy plug-in
# Exploit Title: Jenkins 2.63 - Sandbox bypass in pipeline: Groovy plug-in
Hostel Management System 2.1 – Cross Site Scripting (Multiple Fields)
# Exploit Title: PHPGurukul hostel-management-system 2.1 allows XSS via
Typesetter CMS 5.1 – Arbitrary Code Execution (Authenticated)
# Exploit Title: Typesetter CMS 5.1 - Arbitrary Code Execution
Textpattern CMS 4.6.2 – Cross-site Request Forgery
# Exploit Title: Textpattern CMS 4.6.2 - Cross-site Request Forgery
Employee Management System 1.0 – Cross Site Scripting (Stored)
#Exploit Title: Employee Management System 1.0 - Stored Cross Site Scripting
Employee Management System 1.0 – Authentication Bypass
#Exploit Title: Employee Management System 1.0 - Authentication Bypass
Alumni Management System 1.0 – Authentication Bypass
#Exploit Title: Alumni Management System 1.0 - Authentication Bypass
Company Visitor Management System (CVMS) 1.0 – Authentication Bypass
# Exploit Title: Company Visitor Management System (CVMS) 1.0 - Authentication Bypass
Restaurant Reservation System 1.0 – ‘date’ SQL Injection (Authenticated)
# Exploit Title: Restaurant Reservation System 1.0 - 'date' SQL Injection (Authenticated)
aaPanel 6.6.6 – Privilege Escalation & Remote Code Execution (Authenticated)
# Exploit Title: [aaPanel 6.6.6 - Authenticated Privilege Escalation]
Seat Reservation System 1.0 – Remote Code Execution (Unauthenticated)
# Exploit Title: Seat Reservation System 1.0 - Unauthenticated Remote Code Execution
Hotel Management System 1.0 – Remote Code Execution (Authenticated)
# Exploit Title: Hotel Management System 1.0 - Remote Code Execution (Authenticated)
Seat Reservation System 1.0 – Unauthenticated SQL Injection
# Title: Seat Reservation System 1.0 - Unauthenticated SQL Injection
CS-Cart 1.3.3 – ‘classes_dir’ LFI
# Exploit Title: CS-Cart unauthenticated LFI
CS-Cart 1.3.3 – authenticated RCE
# Exploit Title: CS-Cart authenticated RCE
Vehicle Parking Management System 1.0 – Authentication Bypass
# Exploit Title: Vehicle Parking Management System 1.0 - Authentication Bypass
rConfig 3.9.5 – Remote Code Execution (Unauthenticated)
# Exploit Title: rConfig 3.9.5 - Remote Code Execution (Unauthenticated)
Simple Grocery Store Sales And Inventory System 1.0 – Authentication Bypass
# Exploit Title: Simple Grocery Store Sales And Inventory System 1.0 - Authentication Bypass
Zoo Management System 1.0 – Authentication Bypass
# Exploit Title: Zoo Management System 1.0 - Authentication Bypass
NodeBB Forum 1.12.2-1.14.2 – Account Takeover
# Exploit Title: NodeBB Forum 1.12.2-1.14.2 - Account Takeover
Guild Wars 2 – Insecure Folder Permissions
# Exploit Title: Guild Wars 2 - Insecure Folder Permissions
berliCRM 1.0.24 – ‘src_record’ SQL Injection
# Exploit Title: berliCRM 1.0.24 - 'src_record' SQL Injection