rConfig 3.9.4 – ‘searchField’ Unauthenticated Root Remote Code Execution
# Exploit Title: rConfig 3.9.4 - 'searchField' Unauthenticated Root Remote Code Execution
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
ECK Hotel 1.0 – Cross-Site Request Forgery (Add Admin)
# Exploit Title : ECK Hotel 1.0 - Cross-Site Request Forgery (Add Admin)
Centreo 19.10.8 – ‘DisplayServiceStatus’ Remote Code Execution
# Exploit Title: Centreo 19.10.8 - 'DisplayServiceStatus' Remote Code Execution
LeptonCMS 4.5.0 – Persistent Cross-Site Scripting
# Exploit Title: LeptonCMS 4.5.0 - Persistent Cross-Site Scripting
Joomla! Component GMapFP 3.30 – Arbitrary File Upload
# Exploit Title: Joomla! Component GMapFP 3.30 - Arbitrary File Upload
WordPress Plugin WPForms 1.5.8.2 – Persistent Cross-Site Scripting
# Exploit Title: Wordpress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting
UliCMS 2020.1 – Persistent Cross-Site Scripting
# Exploit Title: UliCMS 2020.1 - Persistent Cross-Site Scripting
Joomla! com_hdwplayer 4.2 – ‘search.php’ SQL Injection
# Exploit Title: Joomla! com_hdwplayer 4.2 - 'search.php' SQL Injection
rConfig 3.9.4 – ‘search.crud.php’ Remote Command Injection
# Exploit Title: rConfig 3.9.4 - 'search.crud.php' Remote Command Injection
WordPress Plugin PicUploader 1.0 – Remote File Upload
Vulnerable Source:
Exagate Sysguard 6001 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin)
Joomla! Component ACYMAILING 3.9.0 – Unauthenticated Arbitrary File Upload
# Exploit Title: Joomla! ACYMAILING 3.9.0 component - Unauthenticated Arbitrary File Upload
UADMIN Botnet 1.0 – ‘link’ SQL Injection
# Exploit Title: UADMIN Botnet 1.0 - 'link' SQL Injection
PHPKB Multi-Language 9 – ‘image-upload.php’ Authenticated Remote Code Execution
# Exploit Title: PHPKB Multi-Language 9 - 'image-upload.php' Authenticated Remote Code Execution
PHPKB Multi-Language 9 – Authenticated Directory Traversal
# Exploit Title: PHPKB Multi-Language 9 - Authenticated Directory Traversal
PHPKB Multi-Language 9 – Authenticated Remote Code Execution
# Exploit Title: PHPKB Multi-Language 9 - Authenticated Remote Code Execution
MiladWorkShop VIP System 1.0 – ‘lang’ SQL Injection
# Exploit Title: MiladWorkShop VIP System 1.0 - 'lang' SQL Injection
WordPress Plugin Custom Searchable Data System – Unauthenticated Data M]odification
# Exploit Title: Wordpress Plugin Custom Searchable Data System -
rConfig 3.9 – ‘searchColumn’ SQL Injection
# Exploit Title: rConfig 3.9 - 'searchColumn' SQL Injection
rConfig 3.93 – ‘ajaxAddTemplate.php’ Authenticated Remote Code Execution
# Exploit Title: rConfig 3.93 - 'ajaxAddTemplate.php' Authenticated Remote Code Execution
HRSALE 1.1.8 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: HRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin)
WordPress Plugin Appointment Booking Calendar 1.3.34 – CSV Injection
# Exploit Title: Wordpress Plugin Appointment Booking Calendar 1.3.34 - CSV Injection
Joomla! Component com_newsfeeds 1.0 – ‘feedid’ SQL Injection
# Exploit Title: Joomla! Component com_newsfeeds 1.0 - 'feedid' SQL Injection
Horde Groupware Webmail Edition 5.2.22 – PHAR Loading
## exploit-phar-loading.py
Horde Groupware Webmail Edition 5.2.22 – PHP File Inclusion
## exploit-inc-inclusion.py
TeamCity Agent XML-RPC 10.0 – Remote Code Execution
# Exploit Title: TeamCity Agent XML-RPC 10.0 - Remote Code Execution
Wing FTP Server – Authenticated CSRF (Delete Admin)
# Exploit Title: Wing FTP Server 6.2.3 - Privilege Escalation
Joomla! 3.9.0 < 3.9.7 - CSV Injection
#!/usr/bin/python3
WordPress Plugin Search Meter 2.13.2 – CSV injection
# Exploit Title: Wordpress Plugin Search Meter 2.13.2 - CSV Injection
Persian VIP Download Script 1.0 – ‘active’ SQL Injection
# Exploit Title: Persian VIP Download Script 1.0 - 'active' SQL Injection
YzmCMS 5.5 – ‘url’ Persistent Cross-Site Scripting
# Exploit Title: YzmCMS 5.5 - 'url' Persistent Cross-Site Scripting
Sentrifugo HRMS 3.2 – ‘id’ SQL Injection
# Exploit Title: Sentrifugo HRMS 3.2 - 'id' SQL Injection
60CycleCMS – ‘news.php’ SQL Injection
# Exploit Title: 60CycleCMS - 'news.php' Multiple vulnerability
UniSharp Laravel File Manager 2.0.0 – Arbitrary File Read
# Exploit Title: UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read
GUnet OpenEclass 1.7.3 E-learning platform – ‘month’ SQL Injection
# Exploit Title: GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection
Alfresco 5.2.4 – Persistent Cross-Site Scripting
# Exploit Title: Alfresco 5.2.4 - Persistent Cross-Site Scripting
Cacti v1.2.8 – Unauthenticated Remote Code Execution (Metasploit)
# Exploit Title: Cacti v1.2.8 - Unauthenticated Remote Code Execution (Metasploit)
WordPress Plugin Tutor LMS 1.5.3 – Cross-Site Request Forgery (Add User)
# Exploit Title: Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery (Add User)
Business Live Chat Software 1.0 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Business Live Chat Software 1.0 - Cross-Site Request Forgery (Add Admin)
PhpIX 2012 Professional – ‘id’ SQL Injection
# Title: PhpIX 2012 Professional - 'id' SQL Injection
Magento WooCommerce CardGate Payment Gateway 2.0.30 – Payment Process Bypass
# Exploit Title: Magento WooCommerce CardGate Payment Gateway 2.0.30 - Payment Process Bypass
WordPress Plugin WooCommerce CardGate Payment Gateway 3.1.15 – Payment Process Bypass
# Exploit Title: WordPress Plugin WooCommerce CardGate Payment Gateway 3.1.15 - Payment Process Bypass
Cacti 1.2.8 – Remote Code Execution
# Exploit Title: Cacti 1.2.8 - Remote Code Execution
eLection 2.0 – ‘id’ SQL Injection
# Title: eLection 2.0 - 'id' SQL Injection
ATutor 2.2.4 – ‘id’ SQL Injection
# Exploit Title: ATutor 2.2.4 - 'id' SQL Injection
AMSS++ 4.7 – Backdoor Admin Account
# Title: AMSS++ 4.7 - Backdoor Admin Account