php

php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Savsoft Quiz 5 – ‘field_title’ Stored Cross-Site Scripting

# Exploit Title: Savsoft Quiz 5 - 'field_title' Stored Cross-Site Scripting

2020-12-04 Dhruv Patel webapps

MiniCMS 1.10 – ‘content box’ Stored XSS

# Exploit Title: MiniCMS 1.10 - 'content box' Stored XSS

2020-12-04 yudp webapps

Composr CMS 10.0.34 – ‘banners’ Persistent Cross Site Scripting

# Exploit Title: Composr CMS 10.0.34 - 'banners' Persistent Cross Site Scripting

2020-12-04 Parshwa Bhavsar webapps

Online Matrimonial Project 1.0 – Authenticated Remote Code Execution

# Exploit Title: Online Matrimonial Project 1.0 - Authenticated Remote Code Execution

2020-12-03 Valerio Alessandroni webapps

Coastercms 5.8.18 – Stored XSS

# Exploit Title: Coastercms 5.8.18 - Stored XSS

2020-12-03 Hardik Solanki webapps

User Registration & Login and User Management System 2.1 – Cross Site Request Forgery

# Exploit Title: User Registration & Login and User Management System 2.1 - Cross Site Request Forgery

2020-12-03 Dipak Panchal webapps

WordPress Plugin Wp-FileManager 6.8 – RCE

# Exploit Title: WordPress Plugin Wp-FileManager 6.8 - RCE

2020-12-02 Mansoor R webapps

Car Rental Management System 1.0 – SQL Injection / Local File include

# Exploit Title: Car Rental Management System 1.0 - SQL Injection / Local File include

2020-12-02 Mosaaed webapps

Simple College Website 1.0 – ‘page’ Local File Inclusion

# Exploit Title: Simple College Website 1.0 - 'page' Local File Inclusion

2020-12-02 Mosaaed webapps

Anuko Time Tracker 1.19.23.5311 – Password Reset leading to Account Takeover

#Exploit Title: Anuko Time Tracker 1.19.23.5311 - Password Reset Vulnerability leading to Account Takeover

2020-12-02 Mufaddal Masalawala webapps

Anuko Time Tracker 1.19.23.5311 – No rate Limit on Password Reset functionality

#Exploit Title: Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality

2020-12-02 Mufaddal Masalawala webapps

WonderCMS 3.1.3 – ‘Menu’ Persistent Cross-Site Scripting

# Exploit Title: WonderCMS 3.1.3 - 'menu' Persistent Cross-Site Scripting

2020-12-02 Hemant Patidar webapps

WonderCMS 3.1.3 – Authenticated Remote Code Execution

# Exploit Title: WonderCMS 3.1.3 - Authenticated Remote Code Execution

2020-12-02 zetc0de webapps

WonderCMS 3.1.3 – Authenticated SSRF to Remote Remote Code Execution

# Exploit Title: WonderCMS 3.1.3 - Authenticated SSRF to Remote Remote Code Execution

2020-12-02 zetc0de webapps

Pharmacy Store Management System 1.0 – ‘id’ SQL Injection

# Exploit Title: Pharmacy Store Management System 1.0 - 'id' SQL Injection

2020-12-02 Aydın Baran Ertemir webapps

Social Networking Site – Authentication Bypass (SQli)

# Exploit Title: Social Networking Site - Authentication Bypass (SQli)

2020-12-01 gh1mau webapps

Pandora FMS 7.0 NG 749 – Multiple Persistent Cross-Site Scripting Vulnerabilities

# Exploit Title: Pandora FMS 7.0 NG 749 - Multiple Persistent Cross-Site Scripting Vulnerabilities

2020-12-01 Matthew Aberegg webapps

Medical Center Portal Management System 1.0 – ‘login’ SQL Injection

# Exploit Title: Medical Center Portal Management System 1.0 - 'login' SQL Injection

2020-12-01 Aydın Baran Ertemir webapps

LEPTON CMS 4.7.0 – ‘URL’ Persistent Cross-Site Scripting

# Exploit Title: LEPTON CMS 4.7.0 - 'URL' Persistent Cross-Site Scripting

2020-12-01 Sagar Banwa webapps

Tailor Management System 1.0 – Unrestricted File Upload to Remote Code Execution

# Exploit Title: Tailor Management System 1.0 - Unrestricted File Upload to Remote Code Execution

2020-12-01 Saeed Bala Ahmed webapps

Multi Restaurant Table Reservation System 1.0 – Multiple Persistent XSS

# Exploit Title: Multi Restaurant Table Reservation System 1.0 - Multiple Persistent XSS

2020-12-01 yunaranyancat webapps

Pharmacy/Medical Store & Sale Point 1.0 – ’email’ SQL Injection

# Exploit Title: Pharmacy/Medical Store & Sale Point 1.0 - 'email' SQL Injection

2020-12-01 naivenom webapps

Online Shopping Alphaware 1.0 – Error Based SQL injection

# Title: Online Shopping Alphaware 1.0 - Error-Based SQL injection

2020-12-01 Moaaz Taha webapps

WordPress Plugin EventON Calendar 3.0.5 – Reflected Cross-Site Scripting

# Exploit Title: Wordpress Plugin EventON Calendar 3.0.5 - Reflected Cross-Site Scripting

2020-12-01 B3KC4T webapps

Joomla! Component GMapFP 3.5 – Unauthenticated Arbitrary File Upload

# Exploit Title: Joomla! Component GMapFP 3.5 - Unauthenticated Arbitrary File Upload

2020-12-01 ThelastVvV webapps

TypeSetter 5.1 – CSRF (Change admin e-mail)

# Exploit Title: TypeSetter 5.1 - CSRF (Change admin e-mail)

2020-12-01 Alperen Ergel webapps

Best Support System 3.0.4 – ‘ticket_body’ Persistent XSS (Authenticated)

# Exploit Title: Best Support System 3.0.4 - 'ticket_body' Persistent XSS (Authenticated)

2020-11-27 Ex.Mi webapps

ElkarBackup 1.3.3 – ‘Policy[name]’ and ‘Policy[Description]’ Stored Cross-site Scripting

# Exploit Title: ElkarBackup 1.3.3 - 'Policy[name]' and 'Policy[Description]' Stored Cross-site Scripting

2020-11-27 Vyshnav nk webapps

House Rental 1.0 – ‘keywords’ SQL Injection

# Exploit Title: House Rental 1.0 - 'keywords' SQL Injection

2020-11-27 boku webapps

WordPress Theme Accesspress Social Icons 1.7.9 – SQL injection (Authenticated)

# Exploit Title: Wordpress Theme Accesspress Social Icons 1.7.9 - SQL injection (Authenticated)

2020-11-27 SunCSR webapps

Moodle 3.8 – Unrestricted File Upload

# Exploit Title: Moodle 3.8 - Unrestricted File Upload

2020-11-27 Sirwan Veisi webapps

Laravel Administrator 4 – Unrestricted File Upload (Authenticated)

# Exploit title: Laravel Administrator 4 - Unrestricted File Upload (Authenticated)

2020-11-27 Xavi Beltran webapps

WonderCMS 3.1.3 – ‘uploadFile’ Stored Cross-Site Scripting

# Exploit Title: WonderCMS 3.1.3 - 'uploadFile' Stored Cross-Site Scripting

2020-11-27 Sun* Cyber Security Research Team webapps

WordPress Theme Wibar 1.1.8 – ‘Brand Component’ Stored Cross Site Scripting

# Exploit Title: Wordpress Theme Wibar 1.1.8 - 'Brand Component' Stored Cross Site Scripting

2020-11-27 Ilca Lucian Florin webapps

osCommerce 2.3.4.1 – ‘title’ Persistent Cross-Site Scripting

# Exploit Title: osCommerce 2.3.4.1 - 'title' Persistent Cross-Site Scripting

2020-11-25 Emre Aslan webapps

WonderCMS 3.1.3 – ‘page’ Persistent Cross-Site Scripting

# Exploit Title: WonderCMS 3.1.3 - 'page' Persistent Cross-Site Scripting

2020-11-25 Mayur Parmar webapps

OpenCart 3.0.3.6 – ‘subject’ Stored Cross-Site Scripting

# Exploit Title: OpenCart 3.0.3.6 - 'subject' Stored Cross-Site Scripting

2020-11-24 Hemant Patidar webapps

OpenCart 3.0.3.6 – ‘Profile Image’ Stored Cross-Site Scripting (Authenticated)

# Exploit Title: OpenCart 3.0.3.6 - 'Profile Image' Stored Cross Site Scripting (Authenticated)

2020-11-24 Hemant Patidar webapps

VTiger v7.0 CRM – ‘To’ Persistent XSS

# Exploit Title: VTiger v7.0 CRM - 'To' Persistent XSS

2020-11-23 Vulnerability-Lab webapps

WonderCMS 3.1.3 – ‘content’ Persistent Cross-Site Scripting

# Exploit Title: WonderCMS 3.1.3 - 'content' Persistent Cross-Site Scripting

2020-11-20 Hemant Patidar webapps

WordPress Plugin WPForms 1.6.3.1 – Persistent Cross Site Scripting (Authenticated)

#Exploit Title : Wordpress Plugin WPForms 1.6.3.1 - Persistent Cross Site Scripting (Authenticated)

2020-11-18 ZwX webapps

Joomla Plugin Simple Image Gallery Extended (SIGE) 3.5.3 – Multiple Vulnerabilities

# Exploit Title: Joomla Plugin Simple Image Gallery Extended (SIGE) 3.5.3 - Multiple Vulnerabilities

2020-11-17 Vulnerability-Lab webapps

Froxlor Froxlor Server Management Panel 0.10.16 – Persistent Cross-Site Scripting

# Exploit Title: Froxlor Froxlor Server Management Panel 0.10.16 - Persistent Cross-Site Scripting

2020-11-17 Vulnerability-Lab webapps

WordPress Plugin Buddypress 6.2.0 – Persistent Cross-Site Scripting

# Exploit Title: WordPress Plugin Buddypress 6.2.0 - Persistent Cross-Site Scripting

2020-11-17 Vulnerability-Lab webapps

SugarCRM 6.5.18 – Persistent Cross-Site Scripting

# Exploit Title: SugarCRM 6.5.18 - Persistent Cross-Site Scripting

2020-11-17 Vulnerability-Lab webapps

Online Doctor Appointment Booking System PHP and Mysql 1.0 – ‘q’ SQL Injection

# Exploit Title: Online Doctor Appointment Booking System PHP and Mysql 1.0 - 'q' SQL Injection

2020-11-17 Ramil Mustafayev webapps

EgavilanMedia User Registration & Login System with Admin Panel Exploit – SQLi Auth Bypass

# Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel Exploit - SQLi Auth Bypass

2020-11-17 Kislay Kumar webapps

Car Rental Management System 1.0 – ‘car_id’ Sql Injection

# Exploit Title: Car Rental Management System 1.0 - 'car_id' Sql Injection

2020-11-16 Mehmet Kelepçe webapps

Car Rental Management System 1.0 – Remote Code Execution (Authenticated)

# Exploit Title: Car Rental Management System 1.0 - Remote Code Execution (Authenticated)

2020-11-16 Mehmet Kelepçe webapps

PMB 5.6 – ‘chemin’ Local File Disclosure

# Exploit Title: PMB 5.6 - 'chemin' Local File Disclosure

2020-11-16 41-trk webapps