Gym Management System 1.0 – Unauthenticated Remote Code Execution
# Exploit Title: Gym Management System 1.0 - Unauthenticated Remote Code Execution
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Dolibarr 11.0.3 – Persistent Cross-Site Scripting
# Title: Dolibarr 11.0.3 - Persistent Cross-Site Scripting
PHPFusion 9.03.50 – Persistent Cross-Site Scripting
# Exploit Title: PHPFusion 9.03.50 - Persistent Cross-Site Scripting
Composr CMS 10.0.30 – Persistent Cross-Site Scripting
# Title: Composr CMS 10.0.30 - Persistent Cross-Site Scripting
forma.lms 5.6.40 – Cross-Site Request Forgery (Change Admin Email)
# Exploit Title: forma.lms 5.6.40 - Cross-Site Request Forgery (Change Admin Email)
CraftCMS 3 vCard Plugin 1.0.0 – Remote Code Execution
# Exploit Title: CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution
Victor CMS 1.0 – Authenticated Arbitrary File Upload
# Exploit Title: Victor CMS 1.0 - Authenticated Arbitrary File Upload
NukeViet VMS 4.4.00 – Cross-Site Request Forgery (Change Admin Password)
# Exploit Title: NukeViet VMS 4.4.00 - Cross-Site Request Forgery (Change Admin Password)
Submitty 20.04.01 – Persistent Cross-Site Scripting
# Exploit Title: Submitty 20.04.01 - Persistent Cross-Site Scripting
php-fusion 9.03.50 – ‘ctype’ SQL Injection
# Exploit Title: php-fusion 9.03.50 - 'ctype' SQL Injection
qdPM 9.1 – ‘cfg[app_app_name]’ Persistent Cross-Site Scripting
# Exploit Title: qdPM 9.1 - 'cfg[app_app_name]' Persistent Cross-Site Scripting
Victor CMS 1.0 – ‘cat_id’ SQL Injection
# Exploit Title: Victor CMS 1.0 - 'cat_id' SQL Injection
Victor CMS 1.0 – ‘comment_author’ Persistent Cross-Site Scripting
# Exploit Title: Victor CMS 1.0 - 'comment_author' Persistent Cross-Site Scripting
Online Healthcare management system 1.0 – Authentication Bypass
# Exploit Title: Online Healthcare management system 1.0 - Authentication Bypass
Online Healthcare Patient Record Management System 1.0 – Authentication Bypass
# Exploit Title: Online Healthcare Patient Record Management System 1.0 - Authentication Bypass
online Chatting System 1.0 – ‘id’ SQL Injection
# Exploit Title: online Chatting System 1.0 - 'id' SQL Injection
Monstra CMS 3.0.4 – Authenticated Arbitrary File Upload
# Exploit Title: Monstra CMS 3.0.4 - Authenticated Arbitrary File Upload
forma.lms The E-Learning Suite 2.3.0.2 – Persistent Cross-Site Scripting
# Exploit Title: forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site Scripting
Online Examination System 1.0 – ‘eid’ SQL Injection
# Exploit Title: Online Examination System 1.0 - 'eid' SQL Injection
WordPress Plugin Ajax Load More 5.3.1 – ‘#1’ Authenticated SQL Injection
# Exploit Title: Wordpress Plugin Ajax Load More 5.3.1 - '#1' Authenticated SQL Injection
vBulletin 5.6.1 – ‘nodeId’ SQL Injection
# Exploit Title: vBulletin 5.6.1 - 'nodeId' SQL Injection
E-Commerce System 1.0 – Unauthenticated Remote Code Execution
# Exploit Title: E-Commerce System 1.0 - Unauthenticated Remote Code Execution
Complaint Management System 1.0 – ‘username’ SQL Injection
# Exploit Title: Complaint Management System 1.0 - 'username' SQL Injection
Sellacious eCommerce 4.6 – Persistent Cross-Site Scripting
# Exploit Title: Sellacious eCommerce 4.6 - Persistent Cross-Site Scripting
Tryton 5.4 – Persistent Cross-Site Scripting
# Exploit Title: Tryton 5.4 - Persistent Cross-Site Scripting
qdPM 9.1 – Arbitrary File Upload
# Exploit Title: qdPM 9.1 - Arbitrary File Upload
CuteNews 2.1.2 – Authenticated Arbitrary File Upload
# Exploit Title: CuteNews 2.1.2 - Authenticated Arbitrary File Upload
WordPress Plugin ChopSlider 3.4 – ‘id’ SQL Injection
# Exploit Title: ChopSlider3 Wordpress Plugin3.4 - 'id' SQL Injection
Complaint Management System 1.0 – Authentication Bypass
# Exploit Title: complaint management system 1.0 - Authentication Bypass
Victor CMS 1.0 – ‘post’ SQL Injection
# Exploit Title: Victor CMS 1.0 - 'post' SQL Injection
OpenZ ERP 3.6.60 – Persistent Cross-Site Scripting
# Exploit Title: OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting
WordPress Plugin Simple File List 4.2.2 – Remote Code Execution
# Exploit Title: Wordpress Plugin Simple File List 4.2.2 - Remote Code Execution
CuteNews 2.1.2 – Arbitrary File Deletion
# Exploit Title: CuteNews 2.1.2 - Arbitrary File Deletion
Sentrifugo CMS 3.2 – Persistent Cross-Site Scripting
# Exploit Title: Sentrifugo CMS 3.2 - Persistent Cross-Site Scripting
Online AgroCulture Farm Management System 1.0 – ‘uname’ SQL Injection
# Exploit Title: Online AgroCulture Farm Management System 1.0 - 'uname' SQL Injection
Online AgroCulture Farm Management System 1.0 – ‘pid’ SQL Injection
# Exploit Title: Online AgroCulture Farm Management System 1.0 - 'pid' SQL Injection
Pisay Online E-Learning System 1.0 – Remote Code Execution
# Exploit Title: Pisay Online E-Learning System 1.0 - Remote Code Execution
Online Clothing Store 1.0 – Arbitrary File Upload
# Exploit Title: Online Clothing Store 1.0 - Arbitrary File Upload
School File Management System 1.0 – ‘username’ SQL Injection
# Exploit Title: School File Management System 1.0 - 'username' SQL Injection
Car Park Management System 1.0 – Authentication Bypass
# Exploit Title: Car Park Management System 1.0 - Authentication Bypass
MPC Sharj 3.11.1 – Arbitrary File Download
# Exploit title : MPC Sharj 3.11.1 - Arbitrary File Download
YesWiki cercopitheque 2020.04.18.1 – ‘id’ SQL Injection
# Exploit Title: YesWiki cercopitheque 2020.04.18.1 - 'id' SQL Injection
webTareas 2.0.p8 – Arbitrary File Deletion
# Exploit Title: webTareas 2.0.p8 - Arbitrary File Deletion
Online Clothing Store 1.0 – ‘username’ SQL Injection
# Exploit Title: Online Clothing Store 1.0 - 'username' SQL Injection
Booked Scheduler 2.7.7 – Authenticated Directory Traversal
# Exploit Title: Booked Scheduler 2.7.7 - Authenticated Directory Traversal
i-doit Open Source CMDB 1.14.1 – Arbitrary File Deletion
# Exploit Title: i-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion
Online Clothing Store 1.0 – Persistent Cross-Site Scripting
# Exploit Title: Online Clothing Store 1.0 - Persistent Cross-Site Scripting
SimplePHPGal 0.7 – Remote File Inclusion
# Title: SimplePHPGal 0.7 - Remote File Inclusion
PhreeBooks ERP 5.2.5 – Remote Command Execution
# Exploit Title: PhreeBooks ERP 5.2.5 - Remote Command Execution