Gym Management System 1.0 – ‘id’ SQL Injection
# Exploit Title: Gym Management System 1.0 - 'id' SQL Injection
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Lot Reservation Management System 1.0 – Cross-Site Scripting (Stored)
#Exploit Title: lot reservation management system 1.0 - Stored Cross Site Scripting
Lot Reservation Management System 1.0 – Authentication Bypass
#Exploit Title: lot reservation management system 1.0 - Authentication Bypass
Point of Sales 1.0 – ‘id’ SQL Injection
#Exploit Title: Point of Sales 1.0 - SQL Injection
User Registration & Login and User Management System 2.1 – SQL Injection
# Exploit Title: User Registration & Login and User Management System 2.1 - SQL Injection
Car Rental Management System 1.0 – Arbitrary File Upload
# Exploit Title: Car Rental Management System 1.0 - Arbitrary File Upload
Stock Management System 1.0 – ‘brandId and categoriesId’ SQL Injection
# Exploit Title: Stock Management System 1.0 - SQL Injection
Online Library Management System 1.0 – Arbitrary File Upload
# Exploit Title: Online Library Management System 1.0 - Arbitrary File Upload
Tiki Wiki CMS Groupware 21.1 – Authentication Bypass
# Exploit Title: Tiki Wiki CMS Groupware 21.1 - Authentication Bypass
Stock Management System 1.0 – ‘Brand Name’ Persistent Cross-Site Scripting
# Exploit Title: Stock Management System 1.0 - Persistent Cross-Site Scripting (Brand Name)
Stock Management System 1.0 – ‘Categories Name’ Persistent Cross-Site Scripting
# Exploit Title: Stock Management System 1.0 - Persistent Cross-Site Scripting (Categories Name)
Stock Management System 1.0 – ‘Product Name’ Persistent Cross-Site Scripting
# Exploit Title: Stock Management System 1.0 - Persistent Cross-Site Scripting (Product Name)
GOautodial 4.0 – Authenticated Shell Upload
# Exploit Title: GOautodial 4.0 - Authenticated Shell Upload
School Faculty Scheduling System 1.0 – Authentication Bypass POC
# Exploit Title: School Faculty Scheduling System 1.0 - Authentication Bypass
School Faculty Scheduling System 1.0 – Stored Cross Site Scripting POC
# Exploit Title: School Faculty Scheduling System 1.0 - Stored Cross Site Scripting
Hrsale 2.0.0 – Local File Inclusion
# Exploit Title: Hrsale 2.0.0 - Local File Inclusion
WordPress Plugin Rest Google Maps < 7.11.18 - SQL Injection
# Exploit Title: WordPress Rest Google Maps Plugin SQL Injection
Mobile Shop System v1.0 – SQL Injection Authentication Bypass
# Title: Mobile Shop System v1.0 - SQLi lead to authentication bypass
RiteCMS 2.2.1 – Remote Code Execution (Authenticated)
# Exploit Title: RiteCMS 2.2.1 - Authenticated Remote Code Execution
User Registration & Login and User Management System With admin panel 2.1 – Persistent XSS
# Exploit Title: User Registration & Login and User Management System With admin panel 2.1 - Persistent XSS
WordPress Plugin HS Brand Logo Slider 2.1 – ‘logoupload’ File Upload
# Exploit Title: WordPress Plugin HS Brand Logo Slider 2.1 - 'logoupload' File Upload
Ultimate Project Manager CRM PRO Version 2.0.5 – SQLi (Authenticated)
# Exploit Title: Ultimate Project Manager CRM PRO 2.0.5 - SQLi Credentials Leakage
Visitor Management System in PHP 1.0 – SQL Injection (Authenticated)
# Title: Visitor Management System in PHP 1.0 - Authenticated SQL Injection
WordPress Plugin WP Courses < 2.0.29 - Broken Access Controls leading to Courses Content Disclosure
# Exploit Title: WP Courses < 2.0.29 - Broken Access Controls leading to
Loan Management System 1.0 – Multiple Cross Site Scripting (Stored)
# Exploit Title: Loan Management System 1.0 - Multiple Cross Site Scripting (Stored)
Textpattern CMS 4.6.2 – Cross-site Request Forgery
# Exploit Title: Textpattern CMS 4.6.2 - Cross-site Request Forgery
Typesetter CMS 5.1 – Arbitrary Code Execution (Authenticated)
# Exploit Title: Typesetter CMS 5.1 - Arbitrary Code Execution
Hostel Management System 2.1 – Cross Site Scripting (Multiple Fields)
# Exploit Title: PHPGurukul hostel-management-system 2.1 allows XSS via
Online Job Portal 1.0 – Cross Site Scripting (Stored)
# Exploit Title: Online Job Portal 1.0 Cross Site Scripting (Stored)
Online Discussion Forum Site 1.0 – XSS in Messaging System
# Exploit Title: Online Discussion Forum Site 1.0 - XSS in Messaging System
Online Student’s Management System 1.0 – Remote Code Execution (Authenticated)
# Exploit Title: Online Student's Management System 1.0 - Remote Code Execution (Authenticated)
Nagios XI 5.7.3 – ‘SNMP Trap Interface’ Authenticated SQL Injection
# Exploit Title: Nagios XI 5.7.3 - 'SNMP Trap Interface' Authenticated SQL Injection
Nagios XI 5.7.3 – ‘Manage Users’ Authenticated SQL Injection
# Exploit Title: Nagios XI 5.7.3 - 'Manage Users' Authenticated SQL Injection
Nagios XI 5.7.3 – ‘Contact Templates’ Persistent Cross-Site Scripting
# Exploit Title: Nagios XI 5.7.3 - 'Contact Templates' Persistent Cross-Site Scripting
Tourism Management System 1.0 – Arbitrary File Upload
#Exploit Title: Tourism Management System 1.0 - Arbitrary File Upload
CS-Cart 1.3.3 – authenticated RCE
# Exploit Title: CS-Cart authenticated RCE
CS-Cart 1.3.3 – ‘classes_dir’ LFI
# Exploit Title: CS-Cart unauthenticated LFI
Seat Reservation System 1.0 – Unauthenticated SQL Injection
# Title: Seat Reservation System 1.0 - Unauthenticated SQL Injection
Hotel Management System 1.0 – Remote Code Execution (Authenticated)
# Exploit Title: Hotel Management System 1.0 - Remote Code Execution (Authenticated)
Seat Reservation System 1.0 – Remote Code Execution (Unauthenticated)
# Exploit Title: Seat Reservation System 1.0 - Unauthenticated Remote Code Execution
Restaurant Reservation System 1.0 – ‘date’ SQL Injection (Authenticated)
# Exploit Title: Restaurant Reservation System 1.0 - 'date' SQL Injection (Authenticated)
Company Visitor Management System (CVMS) 1.0 – Authentication Bypass
# Exploit Title: Company Visitor Management System (CVMS) 1.0 - Authentication Bypass
Alumni Management System 1.0 – Authentication Bypass
#Exploit Title: Alumni Management System 1.0 - Authentication Bypass
Employee Management System 1.0 – Authentication Bypass
#Exploit Title: Employee Management System 1.0 - Authentication Bypass
Employee Management System 1.0 – Cross Site Scripting (Stored)
#Exploit Title: Employee Management System 1.0 - Stored Cross Site Scripting
Zoo Management System 1.0 – Authentication Bypass
# Exploit Title: Zoo Management System 1.0 - Authentication Bypass
Simple Grocery Store Sales And Inventory System 1.0 – Authentication Bypass
# Exploit Title: Simple Grocery Store Sales And Inventory System 1.0 - Authentication Bypass
rConfig 3.9.5 – Remote Code Execution (Unauthenticated)
# Exploit Title: rConfig 3.9.5 - Remote Code Execution (Unauthenticated)
Vehicle Parking Management System 1.0 – Authentication Bypass
# Exploit Title: Vehicle Parking Management System 1.0 - Authentication Bypass
berliCRM 1.0.24 – ‘src_record’ SQL Injection
# Exploit Title: berliCRM 1.0.24 - 'src_record' SQL Injection