Helmet Store Showroom v1.0 – SQL Injection
# Exploit Title: Helmet Store Showroom v1.0 - SQL Injection
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Human Resource Management System 1.0 – SQL Injection (unauthenticated)
# Exploit Title: Human Resource Management System - SQL Injection (unauthenticated)
Book Store Management System 1.0.0 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Book Store Management System 1.0.0 - Stored Cross-Site Scripting (XSS)
WP All Import v3.6.7 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: WP All Import v3.6.7 - Remote Code Execution (RCE) (Authenticated)
rukovoditel 3.2.1 – Cross-Site Scripting (XSS)
## Title: rukovoditel 3.2.1 - Cross-Site Scripting (XSS)
Senayan Library Management System v9.5.0 – SQL Injection
## Title: Senayan Library Management System v9.5.0 - SQL Injection
iBooking v1.0.8 – Arbitrary File Upload
# Exploit Title: iBooking v1.0.8 - Arbitrary File Upload
Social-Share-Buttons v2.2.3 – SQL Injection
## Title: Social-Share-Buttons v2.2.3 - SQL Injection
Moodle LMS 4.0 – Cross-Site Scripting (XSS)
# Exploit Title: Moodle LMS 4.0 - Cross-Site Scripting (XSS)
Subrion CMS 4.2.1 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Subrion CMS 4.2.1 - Stored Cross-Site Scripting (XSS)
BoxBilling<=4.22.1.5 - Remote Code Execution (RCE)
# Exploit Title: BoxBilling
Jetpack 11.4 – Cross Site Scripting (XSS)
# Exploit Title: Jetpack 11.4 - Cross Site Scripting (XSS)
Online shopping system advanced 1.0 – Multiple Vulnerabilities
# Exploit Title: Online shopping system advanced 1.0 - Multiple
YouPHPTube<= 7.8 - Multiple Vulnerabilities
# Exploit Title: YouPHPTube
Beauty-salon v1.0 – Remote Code Execution (RCE)
## Exploit Title: Beauty-salon v1.0 - Remote Code Execution (RCE)
WebTareas 2.4 – RCE (Authorized)
# Exploit Title: WebTareas 2.4 - RCE (Authorized)
WebTareas 2.4 – Reflected XSS (Unauthorised)
# Exploit Title: WebTareas 2.4 - Reflected XSS (Unauthorised)
WebTareas 2.4 – SQL Injection (Unauthorised)
# Exploit Title: WebTareas 2.4 - SQL Injection (Unauthorised)
Atom CMS v2.0 – SQL Injection (no auth)
# Exploit Title: Atom CMS v2.0 - SQL Injection (no auth)
Aero CMS v0.0.1 – PHP Code Injection (auth)
# Exploit Title: Aero CMS v0.0.1 - PHP Code Injection (auth)
Aero CMS v0.0.1 – SQL Injection (no auth)
# Exploit Title: Aero CMS v0.0.1 - SQL Injection (no auth)
WPN-XM Serverstack for Windows 0.8.6 – Multiple Vulnerabilities
# Exploit Title: WPN-XM Serverstack for Windows 0.8.6 - Multiple Vulnerabilities
Webgrind 1.1 – Reflected Cross-Site Scripting (XSS) & Remote Command Execution (RCE)
# Exploit Title: Webgrind 1.1 - Reflected Cross-Site Scripting (XSS) & Remote Command Execution (RCE)
Zoneminder < v1.37.24 - Log Injection & Stored XSS & CSRF Bypass
# Exploit Title: Zoneminder v1.36.26 - Log Injection -> CSRF Bypass -> Stored Cross-Site Scripting (XSS)
Clansphere CMS 2011.4 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Clansphere CMS 2011.4 - Stored Cross-Site Scripting (XSS)
Zentao Project Management System 17.0 – Authenticated Remote Code Execution (RCE)
# Exploit Title: Zentao Project Management System 17.0 - Authenticated Remote Code Execution (RCE)
FlatCore CMS 2.1.1 – Stored Cross-Site Scripting (XSS)
# Exploit Title: FlatCore CMS 2.1.1 -Stored Cross Site Scripting
eXtplorer<= 2.1.14 - Authentication Bypass & Remote Code Execution (RCE)
# Exploit Title: eXtplorerpython eXtplorer_auth_bypass.py -t https://target.com
Canteen-Management v1.0 – SQL Injection
## Exploit Title: Canteen-Management v1.0 - SQL Injection
Canteen-Management v1.0 – XSS-Reflected
## Exploit Title: Canteen-Management v1.0 - XSS-Reflected
PHPGurukul Online Birth Certificate System V 1.2 – Blind XSS
Exploit Title: PHPGurukul Online Birth Certificate System V 1.2 - Blind XSS
Composr-CMS Version <=10.0.39 - Authenticated Remote Code Execution
# Exploit Title: Composr-CMS Version Commandr
MODX Revolution v2.8.3-pl – Authenticated Remote Code Execution
# Exploit Title: MODX Revolution v2.8.3-pl - Authenticated Remote Code Execution
Abantecart v1.3.2 – Authenticated Remote Code Execution
# Exploit Title: Abantecart v1.3.2 - Authenticated Remote Code Execution
SimpleMachinesForum v2.1.1 – Authenticated Remote Code Execution
# Exploit Title: SimpleMachinesForum v2.1.1 - Authenticated Remote Code Execution
ImpressCMS v1.4.3 – Authenticated SQL Injection
# Exploit Title: Authenticated Sql Injection in ImpressCMS v1.4.3
Bus Pass Management System 1.0 – Cross-Site Scripting (XSS)
# Exploit Title: Bus Pass Management System 1.0 - Cross-Site Scripting (XSS)
GuppY CMS v6.00.10 – Remote Code Execution
# Exploit Title: GuppY CMS v6.00.10 - Remote Code Execution
Lavalite v9.0.0 – XSRF-TOKEN cookie File path traversal
## Exploit Title: Lavalite v9.0.0 - XSRF-TOKEN cookie File path traversal
Employee Performance Evaluation System v1.0 – File Inclusion and RCE
## Exploit Title: Employee Performance Evaluation System v1.0 - File Inclusion and RCE
Yoga Class Registration System v1.0 – Multiple SQLi
# Exploit Title: Yoga Class Registration System v1.0 - Multiple SQLi
Human Resources Management System v1.0 – Multiple SQLi
# Exploit Title: Human Resources Management System v1.0 - Multiple SQLi
Online Diagnostic Lab Management System v1.0 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: Online Diagnostic Lab Management System v1.0 - Remote Code Execution (RCE) (Unauthenticated)
Translatepress Multilinugal WordPress plugin < 2.3.3 - Authenticated SQL Injection
# Exploit Title: Translatepress Multilinugal WordPress plugin < 2.3.3 - Authenticated SQL Injection
NEX-Forms WordPress plugin < 7.9.7 - Authenticated SQLi
# Exploit Title: NEX-Forms WordPress plugin < 7.9.7 - Authenticated SQLi
WorkOrder CMS 0.1.0 – SQL Injection
# Exploit Title: WorkOrder CMS 0.1.0 - SQL Injection
VIAVIWEB Wallpaper Admin 1.0 – Multiple Vulnerabilities
# Exploit Title: VIAVIWEB Wallpaper Admin 1.0 - Multiple Vulnerabilities
pfBlockerNG 2.1.4_26 – Remote Code Execution (RCE)
# Exploit Title: pfBlockerNG 2.1.4_26 - Remote Code Execution (RCE)
Open Web Analytics 1.7.3 – Remote Code Execution
# Exploit Title: Open Web Analytics 1.7.3 - Remote Code Execution (RCE)
WordPress Plugin ImageMagick-Engine 1.7.4 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Wordpress Plugin ImageMagick-Engine 1.7.4 - Remote Code Execution (RCE) (Authenticated)