WordPress Plugin Time Capsule 1.21.16 – Authentication Bypass
# Exploit Title: Wordpress Time Capsule Plugin 1.21.16 - Authentication Bypass
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WordPress Plugin InfiniteWP Client 1.9.4.5 – Authentication Bypass
# Exploit Title: Wordpress Plugin InfiniteWP Client 1.9.4.5 - Authentication Bypass
Rukovoditel Project Management CRM 2.5.2 – ‘filters’ SQL Injection
# Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'filters' SQL Injection
Rukovoditel Project Management CRM 2.5.2 – ‘entities_id’ SQL Injection
# Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'entities_id' SQL Injection
Online Book Store 1.0 – Arbitrary File Upload
# Exploit Title: Online Book Store 1.0 - Arbitrary File Upload
Rukovoditel Project Management CRM 2.5.2 – ‘reports_id’ SQL Injection
# Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'reports_id' SQL Injection
WordPress Plugin Postie 1.9.40 – Persistent Cross-Site Scripting
# Exploit Title: WordPress Plugin Postie 1.9.40 - Persistent Cross-Site Scripting
Online Book Store 1.0 – ‘bookisbn’ SQL Injection
# Exploit Title: Online Book Store 1.0 - 'bookisbn' SQL Injection
Digi AnywhereUSB 14 – Reflective Cross-Site Scripting
# Exploit Title: Digi AnywhereUSB 14 - Reflective Cross-Site Scripting
Chevereto 3.13.4 Core – Remote Code Execution
# Exploit Title: Chevereto 3.13.4 Core - Remote Code Execution
PixelStor 5000 K:4.0.1580-20150629 – Remote Code Execution
# Exploit Title: PixelStor 5000 - Remote Code Execution
Pandora 7.0NG – Remote Code Execution
# Exploit Title: Pandora 7.0NG - Remote Code Execution
Online Book Store 1.0 – Unauthenticated Remote Code Execution
# Exploit Title: Online Book Store 1.0 - Unauthenticated Remote Code Execution
Codoforum 4.8.3 – ‘input_txt’ Persistent Cross-Site Scripting
# Exploit Title: Codoforum 4.8.3 - Persistent Cross-Site Scripting
Complaint Management System 4.0 – Remote Code Execution
# Exploit Title: Complaint Management System 4.0 - Remote Code Execution
Job Portal 1.0 – Remote Code Execution
# Exploit Title: Job Portal 1.0 - Remote Code Execution
Codoforum 4.8.3 – Persistent Cross-Site Scripting
# Exploit Title: Codoforum 4.8.3 - Persistent Cross-Site Scripting
Voyager 1.3.0 – Directory Traversal
# Exploit Title: Voyager 1.3.0 - Directory Traversal
Small CRM 2.0 – Authentication Bypass
# Exploit Title: Small CRM 2.0 - Authentication Bypass
elaniin CMS 1.0 – Authentication Bypass
# Exploit Title: elaniin CMS 1.0 - Authentication Bypass
Hostel Management System 2.0 – ‘id’ SQL Injection
# Exploit Title: Hostel Management System 2.0 - 'id' SQL Injection
Subrion CMS 4.0.5 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Subrion CMS 4.0.5 - Cross-Site Request Forgery (Add Admin)
Complaint Management System 4.0 – ‘cid’ SQL injection
# Exploit Title: Complaint Management System 4.0 - 'cid' SQL injection
Dairy Farm Shop Management System 1.0 – ‘username’ SQL Injection
# Exploit Title: Dairy Farm Shop Management System 1.0 - 'username' SQL Injection
Karakuzu ERP Management Web 5.7.0 – ‘k_adi_duz’ SQL Injection
# Exploit Title: Karakuzu ERP Management Web 5.7.0 - 'k_adi_duz' SQL Injection
Online Course Registration 2.0 – Remote Code Execution
# Exploit Title: Online Course Registration 2.0 - Remote Code Execution
BloodX 1.0 – Authentication Bypass
# Exploit Title: BloodX 1.0 - Authentication Bypass
Hospital Management System 4.0 – Persistent Cross-Site Scripting
# Exploit Title: Hospital Management System 4.0 - Persistent Cross-Site Scripting
Hospital Management System 4.0 – ‘searchdata’ SQL Injection
# Exploit Title: Hospital Management System 4.0 - 'searchdata' SQL Injection
Hospital Management System 4.0 – Authentication Bypass
# Exploit Title: Hospital Management System 4.0 - Authentication Bypass
Shopping Portal ProVersion 3.0 – Authentication Bypass
# Exploit Title: Shopping Portal ProVersion 3.0 - Authentication Bypass
WordPress Plugin Ultimate Addons for Beaver Builder 1.2.4.1 – Authentication Bypass
# Exploit Title: Wordpress Ultimate Addons for Beaver Builder 1.2.4.1 - Authentication Bypass
Thrive Smart Home 1.1 – Authentication Bypass
# Exploit: Thrive Smart Home 1.1 - Authentication Bypass
HomeAutomation 3.3.2 – Remote Code Execution
# Exploit: HomeAutomation 3.3.2 - Remote Code Execution
HomeAutomation 3.3.2 – Cross-Site Request Forgery (Add Admin)
# Exploit: HomeAutomation 3.3.2 - Cross-Site Request Forgery (Add Admin)
HomeAutomation 3.3.2 – Authentication Bypass
# Exploit: HomeAutomation 3.3.2 - Authentication Bypass
phpMyChat-Plus 1.98 – ‘pmc_username’ Reflected Cross-Site Scripting
# Exploit Title: phpMyChat-Plus 1.98 - 'pmc_username' Reflected Cross-Site Scripting
WordPress Core < 5.3.x - 'xmlrpc.php' Denial of Service
#!/usr/bin/env python
Bullwark Momentum Series JAWS 1.0 – Directory Traversal
# Title: Bullwark Momentum Series JAWS 1.0 - Directory Traversal
OpenNetAdmin 18.1.1 – Command Injection Exploit (Metasploit)
class MetasploitModule < Msf::Exploit::Remote
Alcatel-Lucent Omnivista 8770 – Remote Code Execution
# Exploit Title: Alcatel-Lucent Omnivista 8770 - Remote Code Execution
PRO-7070 Hazır Profesyonel Web Sitesi 1.0 – Authentication Bypass
# Exploit Title: PRO-7070 Hazır Profesyonel Web Sitesi 1.0 - Authentication Bypass
Snipe-IT Open Source Asset Management 4.7.5 – Persistent Cross-Site Scripting
# Exploit Title: Snipe-IT Open Source Asset Management 4.7.5 - Persistent Cross-Site Scripting
Verot 2.0.3 – Remote Code Execution
# Exploit Title: Verot 2.0.3 - Remote Code Execution
OwnCloud 8.1.8 – Username Disclosure
# Exploit Title: OwnCloud 8.1.8 - Username Disclosure
Online Clinic Management System 2.2 – HTML Injection
# Exploit Title: Online Clinic Management System 2.2 - HTML Injection
Revive Adserver 4.2 – Remote Code Execution
# Exploit Title: Revive Adserver 4.2 - Remote Code Execution
Online Invoicing System 2.6 – ‘description’ Persistent Cross-Site Scripting
# Exploit Title: Online Invoicing System 2.6 - 'description' Persistent Cross-Site Scripting
Dokuwiki 2018-04-22b – Username Enumeration
# Exploit Title: Dokuwiki 2018-04-22b - Username Enumeration
SmartHouse Webapp 6.5.33 – Cross-Site Request Forgery
# Exploit Title: SmartHouse Webapp 6.5.33 - Cross-Site Request Forgery