Helpdeskz v2.0.2 – Stored XSS
# Exploit Title: Stored XSS Vulnerability via File Name
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Xhibiter NFT Marketplace 1.10.2 – SQL Injection
# Exploit Title: xhibiter nft marketplace SQLI
Azon Dominator Affiliate Marketing Script – SQL Injection
# Exploit Title: Azon Dominator - Affiliate Marketing Script - SQL Injection
Microweber 2.0.15 – Stored XSS
# Exploit Title: Stored XSS in Microweber
Customer Support System 1.0 – Stored XSS
# Exploit Title: Customer Support System 1.0 - (XSS) Cross-Site
Automad 2.0.0-alpha.4 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Automad 2.0.0-alpha.4 - Stored Cross-Site Scripting (XSS)
Flatboard 3.2 – Stored Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: Flatboard 3.2 - Stored Cross-Site Scripting (XSS) (Authenticated)
Poultry Farm Management System v1.0 – Remote Code Execution (RCE)
# Exploit Title: Poultry Farm Management System v1.0 - Remote Code Execution (RCE)
Boelter Blue System Management 1.3 – SQL Injection
# Exploit Title: SQL Injection Vulnerability in Boelter Blue System Management (version 1.3)
WP-UserOnline 2.88.0 – Stored Cross Site Scripting (XSS) (Authenticated)
# Exploit Title: WP-UserOnline 2.88.0 - Stored Cross Site Scripting (XSS) (Authenticated)
PHP < 8.3.8 - Remote Code Execution (Unauthenticated) (Windows)
# Exploit Title: PHP Windows Remote Code Execution (Unauthenticated)
AEGON LIFE v1.0 Life Insurance Management System – SQL injection vulnerability.
# Exploit Title: Life Insurance Management System- SQL injection vulnerability.
XMB 1.9.12.06 – Stored XSS
# Exploit Title: Persistent XSS in XMB 1.9.12.06
Carbon Forum 5.9.0 – Stored XSS
# Exploit Title: Persistent XSS in Carbon Forum 5.9.0 (Stored)
AEGON LIFE v1.0 Life Insurance Management System – Stored cross-site scripting (XSS)
# Exploit Title: Life Insurance Management Stored System- cross-site scripting (XSS)
appRain CMF 4.0.5 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: appRain CMF 4.0.5 - Remote Code Execution (RCE) (Authenticated)
CMSimple 5.15 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: CMSimple 5.15 - Remote Command Execution
WBCE CMS v1.6.2 – Remote Code Execution (RCE)
# Exploit Title: WBCE CMS v1.6.2 - Remote Code Execution (RCE)
Monstra CMS 3.0.4 – Remote Code Execution (RCE)
# Exploit Title: Monstra CMS 3.0.4 - Remote Code Execution (RCE)
Dotclear 2.29 – Remote Code Execution (RCE)
# Exploit Title: Dotclear 2.29 - Remote Code Execution (RCE)
Serendipity 2.5.0 – Remote Code Execution (RCE)
# Exploit Title: Serendipity 2.5.0 - Remote Code Execution (RCE)
FreePBX 16 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: FreePBX 16 - Remote Code Execution (RCE) (Authenticated)
Akaunting 3.1.8 – Server-Side Template Injection (SSTI)
# Exploit Title: Akaunting 3.1.8 - Server-Side Template Injection (SSTI)
ElkArte Forum 1.1.9 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title : ElkArte Forum 1.1.9 - Remote Code Execution (RCE) (Authenticated)
iMLog < 1.307 - Persistent Cross Site Scripting (XSS)
# Exploit Title: iMLog < 1.307 - Persistent Cross Site Scripting (XSS)
BWL Advanced FAQ Manager 2.0.3 – Authenticated SQL Injection
Exploit Title: BWL Advanced FAQ Manager 2.0.3 - Authenticated SQL Injection
htmlLawed 1.2.5 – Remote Code Execution (RCE)
# Exploit Title: htmlLawed 1.2.5 - Remote Code Execution (RCE)
PopojiCMS 2.0.1 – Remote Command Execution (RCE)
# Exploit Title: PopojiCMS 2.0.1 - Remote Command Execution
Backdrop CMS 1.27.1 – Authenticated Remote Command Execution (RCE)
# Exploit Title: Backdrop CMS 1.27.1 - Authenticated Remote Command Execution (RCE)
WordPress Theme XStore 9.3.8 – SQLi
# Exploit Title: Wordpress Theme XStore 9.3.8 - SQLi
Rocket LMS 1.9 – Persistent Cross Site Scripting (XSS)
# Title: Rocket LMS 1.9 - Persistent Cross Site Scripting (XSS)
Prison Management System – SQL Injection Authentication Bypass
# Exploit : Prison Management System Using PHP -SQL Injection Authentication Bypass
PyroCMS v3.0.1 – Stored XSS
# Exploit Title: PyroCMS v3.0.1 - Stored XSS
CE Phoenix Version 1.0.8.20 – Stored XSS
# Exploit Title: CE Phoenix Version 1.0.8.20 - Stored XSS
Leafpub 1.1.9 – Stored Cross-Site Scripting (XSS)
# Leafpub 1.1.9 - Stored Cross-Site Scripting (XSS)
Chyrp 2.5.2 – Stored Cross-Site Scripting (XSS)
# Chyrp 2.5.2 - Stored Cross-Site Scripting (XSS)
Apache mod_proxy_cluster – Stored XSS
import requests
Clinic Queuing System 1.0 – RCE
# Exploit Title: Clinic Queuing System 1.0 RCE
Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 – Device Config Disclosure
Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 Device Config
Laravel Framework 11 – Credential Leakage
# Exploit Title: Laravel Framework 11 - Credential Leakage
SofaWiki 3.9.2 – Remote Command Execution (RCE) (Authenticated)
# Exploit Title: SofaWiki 3.9.2 - Remote Command Execution (RCE) (Authenticated)
WordPress Plugin Background Image Cropper v1.2 – Remote Code Execution
# Exploit Title: Wordpress Plugin Background Image Cropper v1.2 - Remote Code Execution
FlatPress v1.3 – Remote Command Execution
# Exploit Title: FlatPress v1.3 - Remote Command Execution
OpenClinic GA 5.247.01 – Path Traversal (Authenticated)
# Exploit Title: OpenClinic GA 5.247.01 - Path Traversal (Authenticated)
OpenClinic GA 5.247.01 – Information Disclosure
# Exploit Title: OpenClinic GA 5.247.01 - Information Disclosure
Stock Management System v1.0 – Unauthenticated SQL Injection
# Exploit Title: Stock Management System v1.0 - Unauthenticated SQL Injection
Online Fire Reporting System OFRS – SQL Injection Authentication Bypass
# Exploit Title: Online Fire Reporting System SQL Injection Authentication Bypass
Savsoft Quiz v6.0 Enterprise – Stored XSS
# Exploit Title: Savsoft Quiz v6.0 Enterprise - Persistent Cross-Site
WordPress Plugin WP Video Playlist 1.1.1 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Wordpress Plugin WP Video Playlist 1.1.1 - Stored Cross-Site Scripting (XSS)
WBCE CMS Version 1.6.1 – Remote Command Execution (Authenticated)
# Exploit Title: WBCE CMS Version : 1.6.1 Remote Command Execution