Mult-e-Cart Ultimate 2.4 – ‘id’ SQL Injection
# Exploit Title: Mult-e-Cart Ultimate 2.4 - 'id' SQL Injection
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
PHP Melody 3.0 – Persistent Cross-Site Scripting (XSS)
# Exploit Title: PHP Melody 3.0 - Persistent Cross-Site Scripting (XSS)
PHP Melody 3.0 – ‘vid’ SQL Injection
# Exploit Title: PHP Melody 3.0 - 'vid' SQL Injection
PHP Melody 3.0 – ‘Multiple’ Cross-Site Scripting (XSS)
# Exploit Title: PHP Melody 3.0 - 'Multiple' Cross-Site Scripting (XSS)
Simplephpscripts Simple CMS 2.1 – ‘Multiple’ SQL Injection
# Exploit Title: Simplephpscripts Simple CMS 2.1 - 'Multiple' SQL Injection
Simplephpscripts Simple CMS 2.1 – ‘Multiple’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Simplephpscripts Simple CMS 2.1 - 'Multiple' Stored Cross-Site Scripting (XSS)
WordPress Plugin Popup Anything 2.0.3 – ‘Multiple’ Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Popup Anything 2.0.3 - 'Multiple' Stored Cross-Site Scripting (XSS)
Fuel CMS 1.4.1 – Remote Code Execution (3)
# Exploit Title: Fuel CMS 1.4.1 - Remote Code Execution (3)
WordPress Plugin Hotel Listing 3 – ‘Multiple’ Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Hotel Listing 3 - 'Multiple' Cross-Site Scripting (XSS)
PHPJabbers Simple CMS 5 – ‘name’ Persistent Cross-Site Scripting (XSS)
# Exploit Title: PHPJabbers Simple CMS 5 - 'name' Persistent Cross-Site Scripting (XSS)
Employee Record Management System 1.2 – ’empid’ SQL injection (Unauthenticated)
# Title: Employee Record Management System 1.2 - 'empid' SQL injection (Unauthenticated)
PHPGurukul Hostel Management System 2.1 – Cross-site request forgery (CSRF) to Cross-site Scripting (XSS)
# Exploit Title: PHPGurukul Hostel Management System 2.1 - Cross-site request forgery (CSRF) to Cross-site Scripting ...
WordPress Plugin Supsystic Contact Form 1.7.18 – ‘label’ Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Supsystic Contact Form 1.7.18 - 'label' Stored Cross-Site Scripting (XSS)
WordPress Plugin Filterable Portfolio Gallery 1.0 – ‘title’ Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Filterable Portfolio Gallery 1.0 - 'title' Stored Cross-Site Scripting (XSS)
phpMyAdmin 4.8.1 – Remote Code Execution (RCE)
# Exploit Title: phpMyAdmin 4.8.1 - Remote Code Execution (RCE)
WordPress 4.9.6 – Arbitrary File Deletion (Authenticated) (2)
# Exploit Title: Wordpress 4.9.6 - Arbitrary File Deletion (Authenticated) (2)
WordPress Plugin Ninja Tables 4.1.7 – Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Ninja Tables 4.1.7 - Stored Cross-Site Scripting (XSS)
WordPress Plugin Media-Tags 3.2.0.2 – Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Media-Tags 3.2.0.2 - Stored Cross-Site Scripting (XSS)
Engineers Online Portal 1.0 – ‘id’ SQL Injection
# Exploit Title: Engineers Online Portal 1.0 - 'id' SQL Injection
Engineers Online Portal 1.0 – ‘multiple’ Authentication Bypass
# Exploit Title: Engineers Online Portal 1.0 - 'multiple' Authentication Bypass
Engineers Online Portal 1.0 – ‘multiple’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Engineers Online Portal 1.0 - 'multiple' Stored Cross-Site Scripting (XSS)
Online Event Booking and Reservation System 1.0 – ‘reason’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Online Event Booking and Reservation System 1.0 - 'reason' Stored Cross-Site Scripting (XSS)
Balbooa Joomla Forms Builder 2.0.6 – SQL Injection (Unauthenticated)
# Exploit Title: Balbooa Joomla Forms Builder 2.0.6 - SQL Injection (Unauthenticated)
Engineers Online Portal 1.0 – File Upload Remote Code Execution (RCE)
# Exploit Title: Engineers Online Portal 1.0 - File Upload Remote Code Execution (RCE)
WordPress Plugin TaxoPress 3.0.7.1 – Stored Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: WordPress Plugin TaxoPress 3.0.7.1 - Stored Cross-Site Scripting (XSS) (Authenticated)
Online Course Registration 1.0 – Blind Boolean-Based SQL Injection (Authenticated)
# Exploit Title: Online Course Registration 1.0 - Blind Boolean-Based SQL Injection (Authenticated)
Clinic Management System 1.0 – SQL injection to Remote Code Execution
# Exploit Title: Clinic Management System 1.0 - SQL injection to Remote Code Execution
Small CRM 3.0 – ‘description’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Small CRM 3.0 - 'description' Stored Cross-Site Scripting (XSS)
Dolibarr ERP-CRM 14.0.2 – Stored Cross-Site Scripting (XSS) / Privilege Escalation
# Exploit Title: Dolibarr ERP-CRM 14.0.2 - Stored Cross-Site Scripting (XSS) / Privilege Escalation
Online Motorcycle (Bike) Rental System 1.0 – Blind Time-Based SQL Injection (Unauthenticated)
# Exploit Title: Online Motorcycle (Bike) Rental System 1.0 - Blind Time-Based SQL Injection (Unauthenticated)
WordPress Theme Enfold 4.8.3 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: WordPress Theme Enfold 4.8.3 - Reflected Cross-Site Scripting (XSS)
Company’s Recruitment Management System 1.0 – ‘Add New user’ Cross-Site Request Forgery (CSRF)
# Exploit Title: Company's Recruitment Management System 1.0 - 'Add New user' Cross-Site Request Forgery (CSRF)
Company’s Recruitment Management System 1.0 – ‘description’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Company's Recruitment Management System 1.0 - 'description' Stored Cross-Site Scripting (XSS)
Company’s Recruitment Management System 1.0. – ‘title’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Company's Recruitment Management System 1.0. - 'title' Stored Cross-Site Scripting (XSS)
WordPress Plugin Duplicator 1.3.26 – Unauthenticated Arbitrary File Read
# Exploit Title: Wordpress Plugin Duplicator 1.3.26 - Unauthenticated Arbitrary File Read
Support Board 3.3.4 – ‘Message’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Support Board 3.3.4 - 'Message' Stored Cross-Site Scripting (XSS)
i-Panel Administration System 2.0 – Reflected Cross-site Scripting (XSS)
# Exploit Title: i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS)
TextPattern CMS 4.8.7 – Remote Command Execution (RCE) (Authenticated)
# Exploit Title: TextPattern CMS 4.8.7 - Remote Command Execution (RCE) (Authenticated)
Student Quarterly Grading System 1.0 – ‘grade’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Student Quarterly Grading System 1.0 - 'grade' Stored Cross-Site Scripting (XSS)
Simple Issue Tracker System 1.0 – SQLi Authentication Bypass
# Exploit Title: Simple Issue Tracker System 1.0 - SQLi Authentication Bypass
Online Learning System 2.0 – ‘Multiple’ SQLi Authentication Bypass
# Exploit Title: Online Learning System 2.0 - 'Multiple' SQLi Authentication Bypass
Pharmacy Point of Sale System 1.0 – ‘Add New User’ Cross-Site Request Forgery (CSRF)
# Exploit Title: Pharmacy Point of Sale System 1.0 - 'Add New User' Cross-Site Request Forgery (CSRF)
Company’s Recruitment Management System 1.0 – ‘Multiple’ SQL Injection (Unauthenticated)
# Title: Company's Recruitment Management System 1.0 - 'Multiple' SQL Injection (Unauthenticated)
Simple Payroll System 1.0 – SQLi Authentication Bypass
# Exploit Title: Simple Payroll System 1.0 - SQLi Authentication Bypass
Loan Management System 1.0 – SQLi Authentication Bypass
# Exploit Title: Loan Management System 1.0 - SQLi Authentication Bypass
Online Employees Work From Home Attendance System 1.0 – SQLi Authentication Bypass
# Exploit Title: Online Employees Work From Home Attendance System 1.0 - SQLi Authentication Bypass
Online Enrollment Management System 1.0 – Authentication Bypass
# Exploit Title: Online Enrollment Management System 1.0 - Authentication Bypass
Simple Online College Entrance Exam System 1.0 – ‘Multiple’ SQL injection
# Exploit Title: Simple Online College Entrance Exam System 1.0 - 'Multiple' SQL injection
Simple Online College Entrance Exam System 1.0 – Account Takeover
# Exploit Title: Simple Online College Entrance Exam System 1.0 - Account Takeover
Simple Online College Entrance Exam System 1.0 – Unauthenticated Admin Creation
# Exploit Title: Simple Online College Entrance Exam System 1.0 - Unauthenticated Admin Creation