e-learning Php Script 0.1.0 – ‘search’ SQL Injection
# Exploit Title: e-learning Php Script 0.1.0 - 'search' SQL Injection
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Reside Property Management 3.0 – ‘profile’ SQL Injection
# Exploit Title: Reside Property Management 3.0 - 'profile' SQL Injection
Victor CMS 1.0 – ‘user_firstname’ Persistent Cross-Site Scripting
# Exploit Title: Victor CMS 1.0 - 'user_firstname' Persistent Cross-Site Scripting
OpenEMR 5.0.1 – ‘controller’ Remote Code Execution
# Exploit Title: OpenEMR 5.0.1 - 'controller' Remote Code Execution
FHEM 6.0 – Local File Inclusion
# Exploit Title: FHEM 6.0 - Local File Inclusion
Online Student Enrollment System 1.0 – Cross-Site Request Forgery (Add Student)
# Exploit Title: Online Student Enrollment System 1.0 - Cross-Site Request Forgery (Add Student)
Responsive Online Blog 1.0 – ‘id’ SQL Injection
# Exploit Title: Responsive Online Blog 1.0 - 'id' SQL Injection
WebPort 1.19.1 – ‘setup’ Reflected Cross-Site Scripting
# Exploit Title: WebPort 1.19.1 - 'setup' Reflected Cross-Site Scripting
Online Student Enrollment System 1.0 – Unauthenticated Arbitrary File Upload
# Exploit Title: Online Student Enrollment System 1.0 - Unauthenticated Arbitrary File Upload
Student Enrollment 1.0 – Unauthenticated Remote Code Execution
# Exploit Title: Student Enrollment 1.0 - Unauthenticated Remote Code Execution
Beauty Parlour Management System 1.0 – Authentication Bypass
# Exploit Title: Beauty Parlour Management System 1.0 - Authentication Bypass
College-Management-System-Php 1.0 – Authentication Bypass
# Exploit Title: College-Management-System-Php 1.0 - Authentication Bypass / SQL Injection
Gila CMS 1.11.8 – ‘query’ SQL Injection
# Exploit Title: Gila CMS 1.11.8 - 'query' SQL Injection
Virtual Airlines Manager 2.6.2 – ‘id’ SQL Injection
# Exploit Title: Virtual Airlines Manager 2.6.2 - 'id' SQL Injection
Joomla! J2 Store 3.3.11 – ‘filter_order_Dir’ Authenticated SQL Injection
# Exploit Title: Joomla J2 Store 3.3.11 - 'filter_order_Dir' SQL Injection (Authenticated)
Sistem Informasi Pengumuman Kelulusan Online 1.0 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery (Add Admin)
Bludit 3.9.12 – Directory Traversal
# Exploit Title: Bludit 3.9.12 - Directory Traversal
Virtual Airlines Manager 2.6.2 – ‘airport’ SQL Injection
# Exploit Title: Virtual Airlines Manager 2.6.2 - 'airport' SQL Injection
Virtual Airlines Manager 2.6.2 – ‘notam’ SQL Injection
# Exploit Title: Virtual Airlines Manager 2.6.2 - 'notam' SQL Injection
Online-Exam-System 2015 – ‘feedback’ SQL Injection
# Exploit Title: Online-Exam-System 2015 - 'feedback' SQL Injection
Online Course Registration 1.0 – Authentication Bypass
# Exploit Title: Online Course Registration 1.0 - Authentication Bypass
Online Marriage Registration System 1.0 – Remote Code Execution (1)
# Exploit Title: Online Marriage Registration System 1.0 Remote Code Execution
Navigate CMS 2.8.7 – Authenticated Directory Traversal
# Exploit Title: Navigate CMS 2.8.7 - Authenticated Directory Traversal
Navigate CMS 2.8.7 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Navigate CMS 2.8.7 - Cross-Site Request Forgery (Add Admin)
Clinic Management System 1.0 – Authenticated Arbitrary File Upload
# Exploit Title: Clinic Management System 1.0 - Authenticated Arbitrary File Upload
Oriol Espinal CMS 1.0 – ‘id’ SQL Injection
# Exploit Title: Oriol Espinal CMS 1.0 - 'id' SQL Injection
Navigate CMS 2.8.7 – ”sidx’ SQL Injection (Authenticated)
# Exploit Title: Navigate CMS 2.8.7 - ''sidx' SQL Injection (Authenticated)
Clinic Management System 1.0 – Unauthenticated Remote Code Execution
# Exploit Title: Clinic Management System 1.0 - Unauthenticated Remote Code Execution
Hostel Management System 2.0 – ‘id’ SQL Injection (Unauthenticated)
# Exploit Title: Hostel Management System 2.0 - 'id' SQL Injection (Unauthenticated)
OpenCart 3.0.3.2 – Stored Cross Site Scripting (Authenticated)
# Exploit Title: OpenCart 3.0.3.2 - Stored Cross Site Scripting (Authenticated)
Clinic Management System 1.0 – Authentication Bypass
# Exploit Title: Clinic Management System 1.0 - Authentication Bypass
QuickBox Pro 2.1.8 – Authenticated Remote Code Execution
# Exploit Title: QuickBox Pro 2.1.8 - Authenticated Remote Code Execution
WordPress Plugin BBPress 2.5 – Unauthenticated Privilege Escalation
# Exploit Title: Wordpress Plugin BBPress 2.5 - Unauthenticated Privilege Escalation
WordPress Plugin Multi-Scheduler 1.0.0 – Cross-Site Request Forgery (Delete User)
# Exploit Title: WordPress Plugin Multi-Scheduler 1.0.0 - Cross-Site Request Forgery (Delete User)
QNAP QTS and Photo Station 6.0.3 – Remote Command Execution
# Exploit Title: QNAP QTS and Photo Station 6.0.3 - Remote Command Execution
EyouCMS 1.4.6 – Persistent Cross-Site Scripting
# Exploit Title: EyouCMS 1.4.6 - Persistent Cross-Site Scripting
Online-Exam-System 2015 – ‘fid’ SQL Injection
# Exploit Title: Online-Exam-System 2015 - 'fid' SQL Injection
OXID eShop 6.3.4 – ‘sorting’ SQL Injection
# Exploit Title: OXID eShop 6.3.4 - 'sorting' SQL Injection
Kuicms PHP EE 2.0 – Persistent Cross-Site Scripting
# Exploit Title: Kuicms Php EE 2.0 - Persistent Cross-Site Scripting
osTicket 1.14.1 – ‘Saved Search’ Persistent Cross-Site Scripting
# Exploit Title: osTicket 1.14.1 - 'Saved Search' Persistent Cross-Site Scripting
osTicket 1.14.1 – ‘Ticket Queue’ Persistent Cross-Site Scripting
# Exploit Title: osTicket 1.14.1 - 'Ticket Queue' Persistent Cross-Site Scripting
LimeSurvey 4.1.11 – ‘Permission Roles’ Persistent Cross-Site Scripting
# Exploit Title: LimeSurvey 4.1.11 - 'Permission Roles' Persistent Cross-Site Scripting
Online Marriage Registration System 1.0 – Persistent Cross-Site Scripting
Exploit Title: Online Marriage Registration System 1.0 - Persistent Cross-Site Scripting
WordPress Plugin Drag and Drop File Upload Contact Form 1.3.3.2 – Remote Code Execution
# Exploit Title: WordPress Plugin Drag and Drop File Upload Contact Form 1.3.3.2 - Remote Code Execution
Joomla! Plugin XCloner Backup 3.5.3 – Local File Inclusion (Authenticated)
# Exploit Title: Joomla! Plugin XCloner Backup 3.5.3 - Local File Inclusion (Authenticated)
Open-AudIT 3.3.0 – Reflective Cross-Site Scripting (Authenticated)
# Exploit Title: Open-AudIT 3.3.0 - Reflective Cross-Site Scripting (Authenticated)
OpenEMR 5.0.1 – Remote Code Execution (1)
# Title: OpenEMR 5.0.1 - Remote Code Execution (1)
Online Discussion Forum Site 1.0 – Remote Code Execution
# Exploit Title: Online Discussion Forum Site 1.0 - Remote Code Execution
Victor CMS 1.0 – ‘add_user’ Persistent Cross-Site Scripting
# Exploit Title: Victor CMS 1.0 - 'add_user' Persistent Cross-Site Scripting
WordPress Plugin Form Maker 5.4.1 – ‘s’ SQL Injection (Authenticated)
# Exploit Title: Wordpress Plugin Form Maker 5.4.1 - 's' SQL Injection (Authenticated)