php

Online Inventory Manager 3.2 – Persistent Cross-Site Scripting

# Exploit Title: Online Inventory Manager 3.2 - Persistent Cross-Site Scripting

WordPress Core 5.3 – User Disclosure

# Exploit Title : Wordpress 5.3 - User Disclosure

Bludit – Directory Traversal Image File Upload (Metasploit)

##

OpenNetAdmin 18.1.1 – Remote Code Execution

# Exploit Title: OpenNetAdmin 18.1.1 - Remote Code Execution

TemaTres 3.0 – ‘value’ Persistent Cross-site Scripting

# Exploit Title: TemaTres 3.0 - 'value' Persistent Cross-site Scripting

TemaTres 3.0 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: TemaTres 3.0 — Cross-Site Request Forgery (Add Admin)

Xfilesharing 2.5.1 – Arbitrary File Upload

# Exploit Title: Xfilesharing 2.5.1 - Arbitrary File Upload

gSOAP 2.8 – Directory Traversal

# Title: gSOAP 2.8 - Directory Traversal

FUDForum 3.0.9 – Remote Code Execution

# Exploit Title : FUDForum 3.0.9 - Remote Code Execution

CBAS-Web 19.0.0 – ‘id’ Boolean-based Blind SQL Injection

# Exploit Title: CBAS-Web 19.0.0 - 'id' Boolean-based Blind SQL Injection

Nextcloud 17 – Cross-Site Request Forgery

# Exploit Title: Nextcloud 17 - Cross-Site Request Forgery

Adive Framework 2.0.7 – Privilege Escalation

# Exploit Title: Adive Framework 2.0.7 - Privilege Escalation

html5_snmp 1.11 – ‘Router_ID’ SQL Injection

# Exploit Title: html5_snmp 1.11 - 'Router_ID' SQL Injection

html5_snmp 1.11 – ‘Remark’ Persistent Cross-Site Scripting

# Exploit Title: html5_snmp 1.11 - 'Remark' Persistent Cross-Site Scripting

rimbalinux AhadPOS 1.11 – ‘alamatCustomer’ SQL Injection

# Exploit Title: rimbalinux AhadPOS 1.11 - 'alamatCustomer' SQL Injection

thrsrossi Millhouse-Project 1.414 – ‘content’ Persistent Cross-Site Scripting

# Exploit Title: thrsrossi Millhouse-Project 1.414 - 'content' Persistent Cross-Site Scripting

thejshen Globitek CMS 1.4 – ‘id’ SQL Injection

# Exploit Title: thejshen Globitek CMS 1.4 - 'id' SQL Injection

TheJshen contentManagementSystem 1.04 – ‘id’ SQL Injection

# Exploit Title: TheJshen contentManagementSystem 1.04 - 'id' SQL Injection

WordPress Plugin Google Review Slider 6.1 – ‘tid’ SQL Injection

# Exploit Title: Wordpress Plugin Google Review Slider 6.1 - 'tid' SQL Injection

WordPress Core 5.2.4 – Cross-Origin Resource Sharing

# Exploit Title: Wordpress 5.2.4 - Cross-Origin Resource Sharing

rConfig 3.9.2 – Remote Code Execution

# Exploit Title: rConfig 3.9.2 - Remote Code Execution

PHP-FPM + Nginx – Remote Code Execution

# PHuiP-FPizdaM

delpino73 Blue-Smiley-Organizer 1.32 – ‘datetime’ SQL Injection

Exploit Title: delpino73 Blue-Smiley-Organizer 1.32 - 'datetime' SQL Injection

waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 – ‘description’ Cross-Site Scripting

Exploit Title: waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 - 'description' Cross-Site Scripting

Part-DB 0.4 – Authentication Bypass

# Exploit Title: Part-DB 0.4 - Authentication Bypass

waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 – ‘start’ SQL Injection

Exploit Title: waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 - 'start' SQL Injection

ClonOs WEB UI 19.09 – Improper Access Control

# Exploit Title: ClonOs WEB UI 19.09 - Improper Access Control

WordPress Plugin Sliced Invoices 3.8.2 – ‘post’ SQL Injection

# Exploit Title: Wordpress Sliced Invoices 3.8.2 - 'post' SQL Injection

Joomla! 3.4.6 – Remote Code Execution (Metasploit)

# Exploit Title: Joomla! 3.4.6 - Remote Code Execution (Metasploit)

Joomla! 3.4.6 – Remote Code Execution

# Exploit Title: Joomla! 3.4.6 - Remote Code Execution

Restaurant Management System 1.0 – Remote Code Execution

# Exploit Title: Restaurant Management System 1.0 - Remote Code Execution

WordPress Plugin Popup Builder 3.49 – Persistent Cross-Site Scripting

# Exploit Title: Wordpress Popup Builder 3.49 - Persistent Cross-Site Scripting

WordPress Plugin Soliloquy Lite 2.5.6 – Persistent Cross-Site Scripting

# Exploit Title: Wordpress Soliloquy Lite 2.5.6 - Persistent Cross-Site Scripting

WordPress Plugin FooGallery 1.8.12 – Persistent Cross-Site Scripting

# Exploit Title: Wordpress FooGallery 1.8.12 - Persistent Cross-Site Scripting

Accounts Accounting 7.02 – Persistent Cross-Site Scripting

# Exploit Title: Express Accounts Accounting 7.02 - Persistent Cross-Site Scripting

Bolt CMS 3.6.10 – Cross-Site Request Forgery

# Exploit Title: Bolt CMS 3.6.10 - Cross-Site Request Forgery

Kirona-DRS 5.5.3.5 – Information Disclosure

# Exploit Title: Kirona-DRS 5.5.3.5 - Information Disclosure

Express Invoice 7.12 – ‘Customer’ Persistent Cross-Site Scripting

# Exploit Title: Express Invoice 7.12 - 'Customer' Persistent Cross-Site Scripting

WordPress Plugin Arforms 3.7.1 – Directory Traversal

# Exploit Title: WordPress Arforms 3.7.1 - Directory Traversal

Zabbix 4.4 – Authentication Bypass

# Exploit Title: Zabbix 4.4 - Authentication Bypass

vBulletin 5.0 < 5.5.4 - 'updateAvatar' Authenticated Remote Code Execution

';

Subrion 4.2.1 – ‘Email’ Persistant Cross-Site Scripting

# Title: Subrion 4.2.1 - 'Email' Persistant Cross-Site Scripting

Zabbix 4.2 – Authentication Bypass

# Exploit Title: Zabbix 4.2 - Authentication Bypass

Joomla! 3.4.6 – ‘configuration.php’ Remote Code Execution

# Exploit Title: Joomla 3.4.6 - 'configuration.php' Remote Code Execution

LabCollector 5.423 – SQL Injection

# Exploit Title: LabCollector (Laboratory Information System) 5.423 - Multiples SQL Injection

PHP 7.0 < 7.3 (Unix) - 'gc' disable_functions Bypass

Detrix EDMS 1.2.3.1505 – SQL Injection

#!/usr/bin/php

WordPress Plugin ARforms 3.7.1 – Arbitrary File Deletion

#!/usr/bin/env ruby

phpIPAM 1.4 – SQL Injection

#!/usr/bin/env python3

vBulletin 5.x – Remote Command Execution (Metasploit)

##