WordPress Plugin MasterStudy LMS 2.7.5 – Unauthenticated Admin Account Creation
# Title: WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WordPress Plugin Error Log Viewer 1.1.1 – Arbitrary File Clearing (Authenticated)
# Exploit Title: WordPress Plugin Error Log Viewer 1.1.1 - Arbitrary File Clearing (Authenticated)
Simple Student Quarterly Result/Grade System 1.0 – SQLi Authentication Bypass
# Exploit Title: Simple Student Quarterly Result/Grade System 1.0 - SQLi Authentication Bypass
Multi-Vendor Online Groceries Management System 1.0 – ‘id’ Blind SQL Injection
# Exploit Title: Multi-Vendor Online Groceries Management System 1.0 - 'id' Blind SQL Injection
Subrion CMS 4.2.1 – Cross Site Request Forgery (CSRF) (Add Amin)
# Exploit Title: Subrion CMS 4.2.1 - Cross Site Request Forgery (CSRF) (Add Amin)
Accounting Journal Management System 1.0 – ‘id’ SQLi (Authenticated)
# Exploit Title: Accounting Journal Management System 1.0 - 'id' SQLi (Authenticated)
WordPress Plugin Jetpack 9.1 – Cross Site Scripting (XSS)
# Exploit Title: WordPress Plugin Jetpack 9.1 - Cross Site Scripting (XSS)
WordPress Plugin Contact Form Builder 1.6.1 – Cross-Site Scripting (XSS)
# Exploit Title: Wordpress Plugin Contact Form Builder 1.6.1 - Cross-Site Scripting (XSS)
WordPress Plugin Secure Copy Content Protection and Content Locking 2.8.1 – SQL-Injection (Unauthenticated)
# Exploit Title: WordPress Plugin Secure Copy Content Protection and Content Locking 2.8.1 - SQL-Injection (Unauthent...
Home Owners Collection Management System 1.0 – ‘id’ Blind SQL Injection
# Exploit Title: Home Owners Collection Management System 1.0 - 'id' Blind SQL Injection
Home Owners Collection Management System 1.0 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Home Owners Collection Management System 1.0 - Remote Code Execution (RCE) (Authenticated)
Home Owners Collection Management System 1.0 – Account Takeover (Unauthenticated)
# Exploit Title: Home Owners Collection Management System 1.0 - Account Takeover (Unauthenticated)
Hospital Management Startup 1.0 – ‘Multiple’ SQLi
# Exploit Title: Hospital Management Startup 1.0 - 'loginid' SQLi
AtomCMS v2.0 – SQLi
# Exploit Title: AtomCMS v2.0 - SQLi
Exam Reviewer Management System 1.0 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Exam Reviewer Management System 1.0 - Remote Code Execution (RCE) (Authenticated)
Exam Reviewer Management System 1.0 – ‘id’ SQL Injection
# Exploit Title: Exam Reviewer Management System 1.0 - ‘id’ SQL Injection
WordPress Plugin CP Blocks 1.0.14 – Stored Cross Site Scripting (XSS)
# Exploit Title: WordPress Plugin CP Blocks 1.0.14 - Stored Cross Site Scripting (XSS)
WordPress Plugin Security Audit 1.0.0 – Stored Cross Site Scripting (XSS)
# Exploit Title: WordPress Plugin Security Audit 1.0.0 - Stored Cross Site Scripting (XSS)
WordPress Plugin Simple Job Board 2.9.3 – Local File Inclusion
# Exploit Title: Wordpress Plugin Simple Job Board 2.9.3 - Local File Inclusion
WordPress Plugin International Sms For Contact Form 7 Integration V1.2 – Cross Site Scripting (XSS)
# Exploit Title: WordPress Plugin International Sms For Contact Form 7 Integration V1.2 - Cross Site Scripting (XSS)
Hospital Management System 4.0 – ‘multiple’ SQL Injection
# Title: Hospital Management System 4.0 - 'multiple' SQL Injection
Hotel Reservation System 1.0 – SQLi (Unauthenticated)
# Exploit Title: Hotel Reservation System 1.0 - SQLi (Unauthenticated)
WordPress Plugin IP2Location Country Blocker 2.26.7 – Stored Cross Site Scripting (XSS) (Authenticated)
# Exploit Title: WordPress Plugin IP2Location Country Blocker 2.26.7 - Stored Cross Site Scripting (XSS) (Authenticated)
WBCE CMS 1.5.2 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: WBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated)
WordPress Plugin Learnpress 4.1.4.1 – Arbitrary Image Renaming
# Exploit Title: WordPress Plugin Learnpress 4.1.4.1 - Arbitrary Image Renaming
WordPress Plugin Post Grid 2.1.1 – Cross Site Scripting (XSS)
# Exploit Title: WordPress Plugin Post Grid 2.1.1 - Cross Site Scripting (XSS)
WordPress Plugin Product Slider for WooCommerce 1.13.21 – Cross Site Scripting (XSS)
# Exploit Title: WordPress Plugin Product Slider for WooCommerce 1.13.21 - Cross Site Scripting (XSS)
WordPress Plugin Contact Form Check Tester 1.0.2 – Broken Access Control
# Exploit Title: WordPress Plugin Contact Form Check Tester 1.0.2 - Broken Access Control
PHP Unit 4.8.28 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: PHP Unit 4.8.28 - Remote Code Execution (RCE) (Unauthenticated)
Moodle 3.11.4 – SQL Injection
# Exploit Title: Moodle 3.11.4 - SQL Injection
PHP Restaurants 1.0 – SQLi (Unauthenticated)
# Exploit Title: PHP Restaurants 1.0 - SQLi (Unauthenticated)
WordPress Plugin 404 to 301 2.0.2 – SQL-Injection (Authenticated)
# Exploit Title: Wordpress Plugin 404 to 301 2.0.2 - SQL-Injection (Authenticated)
WordPress Plugin Domain Check 1.0.16 – Reflected Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: WordPress Plugin Domain Check 1.0.16 - Reflected Cross-Site Scripting (XSS) (Authenticated)
WordPress Plugin Download Monitor WordPress V 4.4.4 – SQL Injection (Authenticated)
# Exploit Title: Wordpress Plugin Download Monitor WordPress V 4.4.4 - SQL Injection (Authenticated)
Chamilo LMS 1.11.14 – Account Takeover
# Exploit Title: Chamilo LMS 1.11.14 - Account Takeover
uBidAuction v2.0.1 – ‘Multiple’ Cross Site Scripting (XSS)
# Exploit Title: uBidAuction v2.0.1 - 'Multiple' Cross Site Scripting (XSS)
WordPress Plugin Modern Events Calendar V 6.1 – SQL Injection (Unauthenticated)
# Exploit Title: WordPress Plugin Modern Events Calendar V 6.1 - SQL Injection (Unauthenticated)
WordPress Plugin RegistrationMagic V 5.0.1.5 – SQL Injection (Authenticated)
# Exploit Title: WordPress Plugin RegistrationMagic V 5.0.1.5 - SQL Injection (Authenticated)
WordPress Plugin Mortgage Calculators WP 1.52 – Stored Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: WordPress Plugin Mortgage Calculators WP 1.52 - Stored Cross-Site Scripting (XSS) (Authenticated)
PHPIPAM 1.4.4 – SQLi (Authenticated)
# Exploit Title: PHPIPAM 1.4.4 - SQLi (Authenticated)
Online Project Time Management System 1.0 – Multiple Stored Cross Site Scripting (XSS) (Authenticated)
# Exploit Title: Online Project Time Management System 1.0 - Multiple Stored XSS (Authenticated)
Online Project Time Management System 1.0 – SQLi (Authenticated)
# Exploit Title: Online Project Time Management System 1.0 - SQLi (Authenticated)
Landa Driving School Management System 2.0.1 – Arbitrary File Upload
# Exploit Title: Landa Driving School Management System 2.0.1 - Arbitrary File Upload
Affiliate Pro 1.7 – ‘Multiple’ Cross Site Scripting (XSS)
# Exploit Title: Affiliate Pro 1.7 - 'Multiple' Cross Site Scripting (XSS)
Rocket LMS 1.1 – Persistent Cross Site Scripting (XSS)
# Exploit Title: Rocket LMS 1.1 - Persistent Cross Site Scripting (XSS)
uDoctorAppointment v2.1.1 – ‘Multiple’ Cross Site Scripting (XSS)
# Exploit Title: uDoctorAppointment v2.1.1 - 'Multiple' Cross Site Scripting (XSS)
Simple Chatbot Application 1.0 – ‘message’ Blind SQLi
# Exploit Title: Simple Chatbot Application 1.0 - 'message' Blind SQLi
Simple Chatbot Application 1.0 – Remote Code Execution (RCE)
# Exploit Title: Simple Chatbot Application 1.0 - Remote Code Execution (RCE)
OpenBMCS 2.4 – Information Disclosure
# Exploit Title: OpenBMCS 2.4 - Information Disclosure
OpenBMCS 2.4 – Server Side Request Forgery (SSRF) (Unauthenticated)
# Exploit Title: OpenBMCS 2.4 - Server Side Request Forgery (SSRF) (Unauthenticated)