osTicket 1.14.1 – ‘Ticket Queue’ Persistent Cross-Site Scripting
# Exploit Title: osTicket 1.14.1 - 'Ticket Queue' Persistent Cross-Site Scripting
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 77
osTicket 1.14.1 – ‘Saved Search’ Persistent Cross-Site Scripting
# Exploit Title: osTicket 1.14.1 - 'Saved Search' Persistent Cross-Site Scripting
Kuicms PHP EE 2.0 – Persistent Cross-Site Scripting
# Exploit Title: Kuicms Php EE 2.0 - Persistent Cross-Site Scripting
OXID eShop 6.3.4 – ‘sorting’ SQL Injection
# Exploit Title: OXID eShop 6.3.4 - 'sorting' SQL Injection
OpenEMR 5.0.1 – Remote Code Execution (1)
# Title: OpenEMR 5.0.1 - Remote Code Execution (1)
Open-AudIT 3.3.0 – Reflective Cross-Site Scripting (Authenticated)
# Exploit Title: Open-AudIT 3.3.0 - Reflective Cross-Site Scripting (Authenticated)
StreamRipper32 2.6 – Buffer Overflow (PoC)
# Exploit Title: StreamRipper32 2.6 - Buffer Overflow (PoC)
Joomla! Plugin XCloner Backup 3.5.3 – Local File Inclusion (Authenticated)
# Exploit Title: Joomla! Plugin XCloner Backup 3.5.3 - Local File Inclusion (Authenticated)
Pi-hole 4.4.0 – Remote Code Execution (Authenticated)
# Exploit Title: Pi-hole 4.4.0 - Remote Code Execution (Authenticated)
WordPress Plugin Drag and Drop File Upload Contact Form 1.3.3.2 – Remote Code Execution
# Exploit Title: WordPress Plugin Drag and Drop File Upload Contact Form 1.3.3.2 - Remote Code Execution
WordPress Plugin Form Maker 5.4.1 – ‘s’ SQL Injection (Authenticated)
# Exploit Title: Wordpress Plugin Form Maker 5.4.1 - 's' SQL Injection (Authenticated)
GoldWave – Buffer Overflow (SEH Unicode)
# Exploit Title: GoldWave 5.70 – Buffer Overflow (SEH Unicode)
Victor CMS 1.0 – ‘add_user’ Persistent Cross-Site Scripting
# Exploit Title: Victor CMS 1.0 - 'add_user' Persistent Cross-Site Scripting
Online Discussion Forum Site 1.0 – Remote Code Execution
# Exploit Title: Online Discussion Forum Site 1.0 - Remote Code Execution
Konica Minolta FTP Utility 1.0 – ‘LIST’ Denial of Service (PoC)
# Exploit Title: Konica Minolta FTP Utility 1.0 - 'LIST' Denial of Service (PoC)
Konica Minolta FTP Utility 1.0 – ‘NLST’ Denial of Service (PoC)
# Exploit Title: Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Service (PoC)
Filetto 1.0 – ‘FEAT’ Denial of Service (PoC)
# Exploit Title: Filetto 1.0 - 'FEAT' Denial of Service (PoC)
Dolibarr 11.0.3 – Persistent Cross-Site Scripting
# Title: Dolibarr 11.0.3 - Persistent Cross-Site Scripting
Druva inSync Windows Client 6.6.3 – Local Privilege Escalation
# Exploit Title: Druva inSync Windows Client 6.6.3 - Local Privilege Escalation
Gym Management System 1.0 – Unauthenticated Remote Code Execution
# Exploit Title: Gym Management System 1.0 - Unauthenticated Remote Code Execution
VUPlayer 2.49 .m3u – Local Buffer Overflow (DEP,ASLR)
# Exploit title: VUPlayer 2.49 .m3u - Local Buffer Overflow (DEP,ASLR)
AbsoluteTelnet 11.21 – ‘Username’ Denial of Service (PoC)
# Exploit Title: AbsoluteTelnet 11.21 - 'Username' Denial of Service (PoC)
forma.lms 5.6.40 – Cross-Site Request Forgery (Change Admin Email)
# Exploit Title: forma.lms 5.6.40 - Cross-Site Request Forgery (Change Admin Email)
Composr CMS 10.0.30 – Persistent Cross-Site Scripting
# Title: Composr CMS 10.0.30 - Persistent Cross-Site Scripting
PHPFusion 9.03.50 – Persistent Cross-Site Scripting
# Exploit Title: PHPFusion 9.03.50 - Persistent Cross-Site Scripting
CloudMe 1.11.2 – Buffer Overflow (SEH,DEP,ASLR)
# Exploit Title: CloudMe 1.11.2 - Buffer Overflow (SEH,DEP,ASLR)
OpenEDX platform Ironwood 2.5 – Remote Code Execution
# Exploit Title: OpenEDX platform Ironwood 2.5 - Remote Code Execution
CraftCMS 3 vCard Plugin 1.0.0 – Remote Code Execution
# Exploit Title: CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution
BIND – ‘TSIG’ Denial of Service
#!/usr/bin/python
Victor CMS 1.0 – ‘comment_author’ Persistent Cross-Site Scripting
# Exploit Title: Victor CMS 1.0 - 'comment_author' Persistent Cross-Site Scripting
Victor CMS 1.0 – ‘cat_id’ SQL Injection
# Exploit Title: Victor CMS 1.0 - 'cat_id' SQL Injection
qdPM 9.1 – ‘cfg[app_app_name]’ Persistent Cross-Site Scripting
# Exploit Title: qdPM 9.1 - 'cfg[app_app_name]' Persistent Cross-Site Scripting
php-fusion 9.03.50 – ‘ctype’ SQL Injection
# Exploit Title: php-fusion 9.03.50 - 'ctype' SQL Injection
Submitty 20.04.01 – Persistent Cross-Site Scripting
# Exploit Title: Submitty 20.04.01 - Persistent Cross-Site Scripting
NukeViet VMS 4.4.00 – Cross-Site Request Forgery (Change Admin Password)
# Exploit Title: NukeViet VMS 4.4.00 - Cross-Site Request Forgery (Change Admin Password)
Victor CMS 1.0 – Authenticated Arbitrary File Upload
# Exploit Title: Victor CMS 1.0 - Authenticated Arbitrary File Upload
Mikrotik Router Monitoring System 1.2.3 – ‘community’ SQL Injection
# Exploit Title: Mikrotik Router Monitoring System 1.2.3 - 'community' SQL Injection
WordPress Plugin Ajax Load More 5.3.1 – ‘#1’ Authenticated SQL Injection
# Exploit Title: Wordpress Plugin Ajax Load More 5.3.1 - '#1' Authenticated SQL Injection
Online Examination System 1.0 – ‘eid’ SQL Injection
# Exploit Title: Online Examination System 1.0 - 'eid' SQL Injection
Oracle Hospitality RES 3700 5.7 – Remote Code Execution
# Exploit Title: Oracle Hospitality RES 3700 5.7 - Remote Code Execution
forma.lms The E-Learning Suite 2.3.0.2 – Persistent Cross-Site Scripting
# Exploit Title: forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site Scripting
Monstra CMS 3.0.4 – Authenticated Arbitrary File Upload
# Exploit Title: Monstra CMS 3.0.4 - Authenticated Arbitrary File Upload
online Chatting System 1.0 – ‘id’ SQL Injection
# Exploit Title: online Chatting System 1.0 - 'id' SQL Injection
Online Healthcare Patient Record Management System 1.0 – Authentication Bypass
# Exploit Title: Online Healthcare Patient Record Management System 1.0 - Authentication Bypass
Online Healthcare management system 1.0 – Authentication Bypass
# Exploit Title: Online Healthcare management system 1.0 - Authentication Bypass
HP LinuxKI 6.01 – Remote Command Injection
Exploit Title: HP LinuxKI 6.01 - Remote Command Injection