GestioIP 3.5.7 – Stored Cross-Site Scripting (Stored XSS)
# Exploit Title: GestioIP 3.5.7 - GestioIP Vulnerability: Auth. Stored Cross-Site Scripting
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 9
GestioIP 3.5.7 – Cross-Site Scripting (XSS)
# Exploit Title: GestioIP 3.5.7 - GestioIP Vulnerability: Auth. Cross-Site Scripting (XSS)
GestioIP 3.5.7 – Remote Command Execution (RCE)
# Exploit Title: GestioIP 3.5.7 - Remote Command Execution (RCE)
flatCore 1.5 – Cross Site Request Forgery (CSRF)
# Exploit Title: flatCore 1.5 - Cross Site Request Forgery (CSRF)
GetSimpleCMS 3.3.16 – Remote Code Execution (RCE)
# Exploit Title: GetSimpleCMS 3.3.16 - Remote Code Execution (RCE)
RosarioSIS 7.6 – SQL Injection
# Exploit Title: RosarioSIS 7.6 - SQL Injection
MagnusSolution magnusbilling 7.3.0 – Command Injection
# Exploit Title: MagnusSolution magnusbilling 7.3.0 - Command Injection
LearnPress WordPress LMS Plugin 4.2.7 – SQL Injection
# Exploit Title: LearnPress WordPress LMS Plugin 4.2.7 - SQL Injection
CyberPanel 2.3.6 – Remote Code Execution (RCE)
# Exploit Title: CyberPanel 2.3.6 - Remote Code Execution (RCE)
Roundcube Webmail 1.6.6 – Stored Cross Site Scripting (XSS)
# Exploit Title: Roundcube Webmail 1.6.6 - Stored Cross Site Scripting (XSS)
NEWS-BUZZ News Management System 1.0 – SQL Injection
# Exploit Title: NEWS-BUZZ News Management System 1.0 - SQL Injection
MiniCMS 1.1 – Cross Site Scripting (XSS)
# Exploit Title: MiniCMS 1.1 - Cross Site Scripting (XSS)
phpIPAM 1.6 – Reflected Cross Site Scripting (XSS)
# Exploit Title: phpIPAM 1.6 - Reflected Cross Site Scripting (XSS)
Nagios Log Server 2024R1.3.1 – API Key Exposure
# Exploit Title: Nagios Log Server 2024R1.3.1 - API Key Exposure
ABB Cylon FLXeon 9.3.4 – System Logs Information Disclosure
# Exploit Tiltle: ABB Cylon FLXeon 9.3.4 - System Logs Information Disclosure
ABB Cylon FLXeon 9.3.4 – Default Credentials
ABB Cylon FLXeon 9.3.4 Default Credentials
ABB Cylon FLXeon 9.3.4 – Cross-Site Request Forgery
# Exploit title: ABB Cylon FLXeon 9.3.4 Limited Cross-Site Request Forgery
ABB Cylon FLXeon 9.3.4 – WebSocket Command Spawning
# ABB Cylon FLXeon 9.3.4 (wsConnect.js) WebSocket Command Spawning PoC
WebFileSys 2.31.0 – Directory Path Traversal
# Exploit Title: WebFileSys 2.31.0 - Directory Path Traversal in relPath Parameter
CMU CERT/CC VINCE 2.0.6 – Stored XSS
# Exploit Tile: CMU CERT/CC VINCE 2.0.6 - Stored XSS
ABB Cylon Aspect 3.08.02 – PHP Session Fixation
# Exploit title: ABB Cylon Aspect 3.08.02 PHP Session Fixation Vulnerability
Netman 204 – Remote command without authentication
# Exploit Title: Netman 204 - Remote command with out authentication
ABB Cylon FLXeon 9.3.4 – Remote Code Execution (RCE)
# Exploit title: ABB Cylon FLXeon 9.3.4 - Remote Code Execution (RCE)
GeoVision GV-ASManager 6.1.1.0 – CSRF
# Exploit Title: GeoVision GV-ASManager 6.1.1.0 - CSRF
ABB Cylon FLXeon 9.3.4 – Remote Code Execution (Authenticated)
# Exploit Title: ABB Cylon FLXeon 9.3.4 - Remote Code Execution (Authenticated)
GeoVision GV-ASManager 6.1.0.0 – Broken Access Control
# Exploit Title: Broken Access Control in GeoVision GV-ASManager
qBittorrent 5.0.1 – MITM RCE
# Exploit Title: qBittorrent 5.0.1 MITM RCE
Feng Office 3.11.1.2 – SQL Injection
# Exploit Title: Feng Office 3.11.1.2 - SQL Injection
Cisco Smart Software Manager On-Prem 8-202206 – Account Takeover
# Exploit Title: Cisco Smart Software Manager On-Prem 8-202206 - Account Takeover
Centron 19.04 – Remote Code Execution (RCE)
# Exploit Title : Centron 19.04 - Remote Code Execution (RCE)
PandoraFMS 7.0NG.772 – SQL Injection
# Exploit Title: PandoraFMS 7.0NG.772 - SQL Injection
K7 Ultimate Security K7RKScan.sys 17.0.2019 – Denial Of Service (DoS)
# Exploit Title: K7 Ultimate Security K7RKScan.sys 17.0.2019 - Denial Of Service (DoS)
CodeAstro Online Railway Reservation System 1.0 – Cross Site Scripting (XSS)
# Exploit Title: CodeAstro Online Railway Reservation System 1.0 - Cross Site Scripting (XSS)
Cosy+ firmware 21.2s7 – Command Injection
# Exploit Title: Cosy+ firmware 21.2s7 - Command Injection
Typecho 1.3.0 – Race Condition
# Exploit Title: Typecho 1.3.0 - Race Condition
Typecho 1.3.0 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Typecho 1.3.0 - Stored Cross-Site Scripting (XSS)
AquilaCMS 1.409.20 – Remote Command Execution (RCE)
# Exploit Title: AquilaCMS 1.409.20 - Remote Command Execution (RCE)
flatCore 1.5.5 – Arbitrary File Upload
# Exploit Title: flatCore 1.5.5 - Arbitrary File Upload
Intelight X-1L Traffic controller Maxtime 1.9.6 – Remote Code Execution (RCE)
# Exploit Title: Intelight X-1L Traffic controller Maxtime 1.9.6 - Remote Code Execution (RCE)
DocsGPT 0.12.0 – Remote Code Execution
# Exploit Title: DocsGPT 0.12.0 - Remote Code Execution
Artica Proxy 4.50 – Remote Code Execution (RCE)
# Exploit Title: Artica Proxy 4.50 - Remote Code Execution (RCE)
Zohocorp ManageEngine ADManager Plus 7210 – Elevation of Privilege
# Exploit Title: ManageEngine ADManager Plus Build < 7210 Elevation of
Apache HugeGraph Server 1.2.0 – Remote Code Execution (RCE)
# Exploit Title: Apache HugeGraph Server 1.2.0 - Remote Code Execution (RCE)
ResidenceCMS 2.10.1 – Stored Cross-Site Scripting (XSS)
# Exploit Title: ResidenceCMS 2.10.1 - Stored Cross-Site Scripting (XSS)
ChurchCRM 5.9.1 – SQL Injection
# Exploit Title: ChurchCRM 5.9.1 - SQL Injection
PZ Frontend Manager WordPress Plugin 1.0.5 – Cross Site Request Forgery (CSRF)
# Exploit Title: PZ Frontend Manager WordPress Plugin 1.0.5 - Cross Site Request Forgery (CSRF)
WordPress User Registration & Membership Plugin 4.1.1 – Unauthenticated Privilege Escalation
# Exploit Title: WordPress User Registration & Membership Plugin
Nagios Xi 5.6.6 – Authenticated Remote Code Execution (RCE)
# Exploit Title: Nagiosxi authenticated Remote Code Execution
UNA CMS 14.0.0-RC – PHP Object Injection
# Exploit Title: UNA CMS
Jasmin Ransomware – Arbitrary File Download (Authenticated)
# Exploit Title: Jasmin Ransomware - (Authenticated) Arbitrary File Download