Online Students Management System 1.0 – ‘username’ SQL Injections
# Title: Online Students Management System 1.0 - 'username' SQL Injections
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
MedDream PACS Server 6.8.3.751 – Remote Code Execution (Unauthenticated)
#!/usr/bin/python
Small CRM 2.0 – ’email’ SQL Injection
# Exploit Title: Small CRM 2.0 - 'email' SQL Injection
DynPG 4.9.1 – Persistent Cross-Site Scripting (Authenticated)
# Exploit Title: DynPG 4.9.1 - Persistent Cross-Site Scripting (Authenticated)
Kentico CMS 9.0-12.0.49 – Persistent Cross Site Scripting
# Exploit Title: Kentico CMS 9.0-12.0.49 - Persistent Cross Site Scripting
SEO Panel 4.6.0 – Remote Code Execution (1)
# Exploit Title: SEO Panel 4.6.0 - Remote Code Execution
Textpattern CMS 4.6.2 – ‘body’ Persistent Cross-Site Scripting
# Exploit Title: Textpattern CMS 4.6.2 - 'body' Persistent Cross-Site Scripting
SpamTitan 7.07 – Unauthenticated Remote Code Execution
# Exploit Title: SpamTitan 7.07 - Unauthenticated Remote Code Execution
Photo Share Website 1.0 – Persistent Cross-Site Scripting
# Exploit Title: Photo Share Website 1.0 - Persistent Cross-Site Scripting
MedDream PACS Server 6.8.3.751 – Remote Code Execution (Authenticated)
#!/usr/bin/python
Typesetter CMS 5.1 – ‘Site Title’ Persistent Cross-Site Scripting
# Exploit Title: Typesetter CMS 5.1 - 'Site Title' Persistent Cross-Site Scripting
GetSimple CMS 3.3.16 – Persistent Cross-Site Scripting (Authenticated)
# Exploit Title: GetSimple CMS 3.3.16 - Persistent Cross-Site Scripting (Authenticated)
WebsiteBaker 2.12.2 – ‘display_name’ SQL Injection (authenticated)
# Exploit Title: WebsiteBaker 2.12.2 - 'display_name' SQL Injection (authenticated)
MonoCMS Blog 1.0 – Arbitrary File Deletion (Authenticated)
# Exploit Title: MonoCMS Blog 1.0 - Arbitrary File Deletion (Authenticated)
CMS Made Simple 2.2.14 – Persistent Cross-Site Scripting (Authenticated)
# Exploit Title: CMS Made Simple 2.2.14 - Persistent Cross-Site Scripting (Authenticated)
WebsiteBaker 2.12.2 – Remote Code Execution
# Exploit Title: WebsiteBaker 2.12.2 - Remote Code Execution
Anchor CMS 0.12.7 – Persistent Cross-Site Scripting (Authenticated)
# Exploit Title: Anchor CMS 0.12.7 - Persistent Cross-Site Scripting (Authenticated)
BigTree CMS 4.4.10 – Remote Code Execution
# Exploit Title: BigTree CMS 4.4.10 - Remote Code Execution
Visitor Management System in PHP 1.0 – Persistent Cross-Site Scripting
# Title: Visitor Management System in PHP 1.0 - Persistent Cross-Site Scripting
Simple Online Food Ordering System 1.0 – ‘id’ SQL Injection (Unauthenticated)
# Exploit Title: Simple Online Food Ordering System 1.0 - 'id' SQL Injection (Unauthenticated)
Online Food Ordering System 1.0 – Remote Code Execution
# Exploit Title: Online Food Ordering System 1.0 - Remote Code Execution
Flatpress Add Blog 1.0.3 – Persistent Cross-Site Scripting
# Exploit Title: Flatpress Add Blog 1.0.3 - Persistent Cross-Site Scripting
Seat Reservation System 1.0 – ‘id’ SQL Injection
# Exploit Title: Seat Reservation System 1.0 - 'id' SQL Injection
BlackCat CMS 1.3.6 – Cross-Site Request Forgery
# Exploit Title: BlackCat CMS 1.3.6 - Cross-Site Request Forgery
Online Shop Project 1.0 – ‘p’ SQL Injection
# Exploit Title: Online Shop Project 1.0 - 'p' SQL Injection
Mantis Bug Tracker 2.3.0 – Remote Code Execution (Unauthenticated)
# Exploit Title: Mantis Bug Tracker 2.3.0 - Remote Code Execution (Unauthenticated)
Piwigo 2.10.1 – Cross Site Scripting
# Exploit Title: Piwigo 2.10.1 - Cross Site Scripting
Tailor MS 1.0 – Reflected Cross-Site Scripting
# Exploit Title: Tailor MS 1.0 - Reflected Cross-Site Scripting
ThinkAdmin 6 – Arbitrarily File Read
# Exploit Title: ThinkAdmin 6 - Arbitrarily File Read
Joomla! paGO Commerce 2.5.9.0 – SQL Injection (Authenticated)
# Exploit Title: Joomla! paGO Commerce 2.5.9.0 - SQL Injection (Authenticated)
CuteNews 2.1.2 – Remote Code Execution
# Exploit Title: CuteNews 2.1.2 - Remote Code Execution
Tailor Management System – ‘id’ SQL Injection
# Exploit Title: Tailor Management System - 'id' SQL Injection
grocy 2.7.1 – Persistent Cross-Site Scripting
# Exploit Title: grocy 2.7.1 - Persistent Cross-Site Scripting
SiteMagic CMS 4.4.2 – Arbitrary File Upload (Authenticated)
# Exploit Title: SiteMagic CMS 4.4.2 - Arbitrary File Upload (Authenticated)
Daily Tracker System 1.0 – Authentication Bypass
# Exploit Title: Daily Tracker System 1.0 - Authentication Bypass
BloodX CMS 1.0 – Authentication Bypass
# Exploit Title: BloodX CMS 1.0 - Authentication Bypass
Savsoft Quiz Enterprise Version 5.5 – Persistent Cross-Site Scripting
# Exploit Title: Savsoft Quiz Enterprise Version 5.5 - Persistent Cross-Site Scripting
Rukovoditel 2.7.1 – Remote Code Execution (2) (Authenticated)
#!/usr/bin/python3
Stock Management System 1.0 – Cross-Site Request Forgery (Change Username)
# Exploit Title: Stock Management System 1.0 - Cross-Site Request Forgery (Change Username)
moziloCMS 2.0 – Persistent Cross-Site Scripting (Authenticated)
# Exploit Title: moziloCMS 2.0 - Persistent Cross-Site Scripting (Authenticated)
Mara CMS 7.5 – Remote Code Execution (Authenticated)
# Exploit Title: Mara CMS 7.5 - Remote Code Execution (Authenticated)
CMS Made Simple 2.2.14 – Arbitrary File Upload (Authenticated)
#!/usr/bin/python3
Fuel CMS 1.4.8 – ‘fuel_replace_id’ SQL Injection (Authenticated)
# Exploit Title: Fuel CMS 1.4.8 - 'fuel_replace_id' SQL Injection (Authenticated)
Mara CMS 7.5 – Reflective Cross-Site Scripting
# Exploit Title: Mara CMS 7.5 - Reflective Cross-Site Scripting
Online Book Store 1.0 – ‘id’ SQL Injection
# Title: Online Book Store 1.0 - 'id' SQL Injection
SymphonyCMS 3.0.0 – Persistent Cross-Site Scripting
# Exploit Title: SymphonyCMS 3.0.0 - Persistent Cross-Site Scripting
Online Shopping Alphaware 1.0 – ‘id’ SQL Injection
# Title: Online Shopping Alphaware 1.0 - 'id' SQL Injection
WordPress Plugin Autoptimize 2.7.6 – Arbitrary File Upload (Authenticated)
# Exploit Title: Wordpress Plugin Autoptimize 2.7.6 - Arbitrary File Upload (Authenticated)
LimeSurvey 4.3.10 – ‘Survey Menu’ Persistent Cross-Site Scripting
# Exploit Title: LimeSurvey 4.3.10 - 'Survey Menu' Persistent Cross-Site Scripting
Complaint Management System 1.0 – ‘cid’ SQL Injection
# Title: Complaint Management System 1.0 - 'cid' SQL Injection