WordPress Plugin Pie Register 3.7.1.4 – Admin Privilege Escalation (Unauthenticated)
# Exploit Title: WordPress Plugin Pie Register 3.7.1.4 - Admin Privilege Escalation (Unauthenticated)
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Maian-Cart 3.8 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit title: Maian-Cart 3.8 - Remote Code Execution (RCE) (Unauthenticated)
Online Traffic Offense Management System 1.0 – Privilage escalation (Unauthenticated)
# Exploit Title: Online Traffic Offense Management System 1.0 - Privilage escalation (Unauthenticated)
IFSC Code Finder Project 1.0 – SQL injection (Unauthenticated)
# Title: IFSC Code Finder Project 1.0 - SQL injection (Unauthenticated)
Simple Online College Entrance Exam System 1.0 – SQLi Authentication Bypass
# Exploit Title: Simple Online College Entrance Exam System 1.0 - SQLi Authentication Bypass
Online Traffic Offense Management System 1.0 – Multiple RCE (Unauthenticated)
# Exploit Title: Online Traffic Offense Management System 1.0 - Multiple RCE (Unauthenticated)
Online Traffic Offense Management System 1.0 – Multiple XSS (Unauthenticated)
# Exploit Title: Online Traffic Offense Management System 1.0 - Multiple XSS (Unauthenticated)
Online Traffic Offense Management System 1.0 – Multiple SQL Injection (Unauthenticated)
# Exploit Title: Online Traffic Offense Management System 1.0 - Multiple SQL Injection (Unauthenticated)
Online DJ Booking Management System 1.0 – ‘Multiple’ Blind Cross-Site Scripting
# Exploit Title: Online DJ Booking Management System 1.0 - 'Multiple' Blind Cross-Site Scripting
WordPress Plugin BulletProof Security 5.1 – Sensitive Information Disclosure
# Exploit Title: Wordpress Plugin BulletProof Security 5.1 - Sensitive Information Disclosure
WordPress Plugin MStore API 2.0.6 – Arbitrary File Upload
# Exploit Title: Wordpress Plugin MStore API 2.0.6 - Arbitrary File Upload
WordPress Plugin TheCartPress 1.5.3.6 – Privilege Escalation (Unauthenticated)
# Exploit Title: Wordpress Plugin TheCartPress 1.5.3.6 - Privilege Escalation (Unauthenticated)
Student Quarterly Grading System 1.0 – SQLi Authentication Bypass
# Exploit Title: Student Quarterly Grading System 1.0 - SQLi Authentication Bypass
Young Entrepreneur E-Negosyo System 1.0 – ‘PRODESC’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Young Entrepreneur E-Negosyo System 1.0 - 'PRODESC' Stored Cross-Site Scripting (XSS)
Young Entrepreneur E-Negosyo System 1.0 – SQL Injection Authentication Bypass
# Exploit Title: Young Entrepreneur E-Negosyo System 1.0 - SQL Injection Authentication Bypass
Lodging Reservation Management System 1.0 – Authentication Bypass
# Exploit Title: Lodging Reservation Management System 1.0 - Authentication Bypass
Directory Management System 1.0 – SQL Injection Authentication Bypass
# Exploit Title: Directory Management System 1.0 - SQL Injection Authentication Bypass
CMSimple_XH 1.7.4 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: CMSimple_XH 1.7.4 - Remote Code Execution (RCE) (Authenticated)
Dairy Farm Shop Management System 1.0 – SQL Injection Authentication Bypass
# Exploit Title: Dairy Farm Shop Management System 1.0 - SQL Injection Authentication Bypass
Vehicle Service Management System 1.0 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: Vehicle Service Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
Phpwcms 1.9.30 – Arbitrary File Upload
# Exploit Title: Phpwcms 1.9.30 - Arbitrary File Upload
Blood Bank System 1.0 – Authentication Bypass
# Exploit Title: Blood Bank System 1.0 - Authentication Bypass
Drupal Module MiniorangeSAML 8.x-2.22 – Privilege escalation
# Exploit Title: Drupal Module MiniorangeSAML 8.x-2.22 - Privilege escalation via XML Signature Wrapping
Exam Form Submission System 1.0 – SQL Injection Authentication Bypass
# Exploit Title: Exam Form Submission System 1.0 - SQL Injection Authentication Bypass
Pharmacy Point of Sale System 1.0 – ‘Multiple’ SQL Injection (SQLi)
# Exploit Title: Pharmacy Point of Sale System 1.0 - 'Multiple' SQL Injection (SQLi)
Cmsimple 5.4 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Cmsimple 5.4 - Remote Code Execution (RCE) (Authenticated)
Cyber Cafe Management System Project (CCMS) 1.0 – SQL Injection Authentication Bypass
# Exploit Title: Cyber Cafe Management System Project (CCMS) 1.0 - SQL Injection Authentication Bypass
Pet Shop Management System 1.0 – Remote Code Execution (RCE) (Unauthenticated)
# Title: Pet Shop Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
OpenSIS 8.0 – ‘cp_id_miss_attn’ Reflected Cross-Site Scripting (XSS)
# Exploit Title: OpenSIS 8.0 - 'cp_id_miss_attn' Reflected Cross-Site Scripting (XSS)
WordPress Plugin Redirect 404 to Parent 1.3.0 – Reflected Cross-Site Scripting
# Exploit Title: WordPress Plugin Redirect 404 to Parent 1.3.0 - Reflected Cross-Site Scripting (XSS)
WordPress Plugin Select All Categories and Taxonomies 1.3.1 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Select All Categories and Taxonomies 1.3.1 - Reflected Cross-Site Scripting (XSS)
Storage Unit Rental Management System 1.0 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: Storage Unit Rental Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
WordPress Plugin Popup 1.10.4 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Popup 1.10.4 - Reflected Cross-Site Scripting (XSS)
WordPress Plugin Ultimate Maps 1.2.4 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Ultimate Maps 1.2.4 - Reflected Cross-Site Scripting (XSS)
WordPress Plugin Contact Form 1.7.14 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Contact Form 1.7.14 - Reflected Cross-Site Scripting (XSS)
WordPress Plugin TranslatePress 2.0.8 – Stored Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: WordPress Plugin TranslatePress 2.0.8 - Stored Cross-Site Scripting (XSS) (Authenticated)
Library System 1.0 – ‘student_id’ SQL injection (Authenticated)
# Exploit Title: Library System 1.0 - 'student_id' SQL injection (Authenticated)
WordPress Plugin Wappointment 2.2.4 – Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Wappointment 2.2.4 - Stored Cross-Site Scripting (XSS)
Pharmacy Point of Sale System 1.0 – SQLi Authentication BYpass
# Exploit Title: Pharmacy Point of Sale System 1.0 - SQLi Authentication Bypass
Police Crime Record Management Project 1.0 – Time Based SQLi
# Exploit Title: Police Crime Record Management Project 1.0 - Time Based SQLi
Budget and Expense Tracker System 1.0 – Arbitrary File Upload
# Exploit Title: Budget and Expense Tracker System 1.0 - Arbitrary File Upload
WordPress Plugin Fitness Calculators 1.9.5 – Cross-Site Request Forgery (CSRF)
# Exploit Title: WordPress Plugin Fitness Calculators 1.9.5 - Cross-Site Request Forgery (CSRF)
WordPress Plugin Advanced Order Export For WooCommerce 3.1.7 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Advanced Order Export For WooCommerce 3.1.7 - Reflected Cross-Site Scripting (XSS)
Backdrop CMS 1.20.0 – ‘Multiple’ Cross-Site Request Forgery (CSRF)
# Exploit Title: Backdrop CMS 1.20.0 - 'Multiple' Cross-Site Request Forgery (CSRF)
WordPress Plugin 3DPrint Lite 1.9.1.4 – Arbitrary File Upload
# Exploit Title: Wordpress Plugin 3DPrint Lite 1.9.1.4 - Arbitrary File Upload
Online Reviewer System 1.0 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: Online Reviewer System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
OpenCats 0.9.4-2 – ‘docx ‘ XML External Entity Injection (XXE)
# Exploit Title: OpenCats 0.9.4-2 - 'docx ' XML External Entity Injection (XXE)
e107 CMS 2.3.0 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: e107 CMS 2.3.0 - Remote Code Execution (RCE) (Authenticated)
Filerun 2021.03.26 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Filerun 2021.03.26 - Remote Code Execution (RCE) (Authenticated)
Simple Attendance System 1.0 – Unauthenticated Blind SQLi
# Exploit Title: Simple Attendance System 1.0 - Unauthenticated Blind SQLi