Rukovoditel ERP & CRM 2.4.1 – ‘path’ Cross-Site Scripting
# Exploit Title: Rukovoditel ERP & CRM 2.4.1 - 'path' Cross-Site Scripting
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Jettweb Php Hazır İlan Sitesi Scripti V2 – SQL Injection
# Exploit Title: Jettweb Php Hazır İlan Sitesi Scripti V2 - SQL Injection
Zeeways Matrimony CMS – SQL Injection
# Exploit Title: Zeeways Matrimony CMS - SQL Injection
Zeeways Jobsite CMS – ‘id’ SQL Injection
# Exploit Title: Zeeways Jobsite CMS - 'id' SQL Injection
Jettweb PHP Hazır Haber Sitesi Scripti V3 – SQL Injection
# Exploit Title: Jettweb PHP Hazır Haber Sitesi Scripti V3 - Multiple Vulnerabilities
Jettweb PHP Hazır Haber Sitesi Scripti V2 – SQL Injection (Authentication Bypass)
# Exploit Title: Jettweb PHP Hazır Haber Sitesi Scripti V2 - Authentication Bypass
Jettweb PHP Hazır Haber Sitesi Scripti V1 – SQL Injection
# Exploit Title: Jettweb PHP Hazır Haber Sitesi Scripti V1 - Multiple Vulnerabilities
Inout Article Base CMS – SQL Injection
# Exploit Title: Inout Article Base CMS - SQL Injection
Meeplace Business Review Script – ‘id’ SQL Injection
# Exploit Title: Meeplace Business Review Script - 'id' SQL Injection
Matri4Web Matrimony Website Script – Multiple SQL Injection
# Exploit Title: Matrimony Website Script - Multiple SQL Injection
Bootstrapy CMS – Multiple SQL Injection
# Exploit Title: Bootstrapy CMS - Multiple SQL Injection
Placeto CMS Alpha v4 – ‘page’ SQL Injection
Placeto CMS Alpha v4 - 'page' SQL Injection
uHotelBooking System – ‘system_page’ SQL Injection
# Exploit Title: uHotelBooking System - 'system_page' SQL Injection
The Company Business Website CMS – Multiple Vulnerabilities
# Exploit Title: The Company Business Website CMS - 'user_name' SQL
Netartmedia Vlog System – ’email’ SQL Injection
# Exploit Title: Netartmedia Vlog System - 'email' SQL Injection
Netartmedia Deals Portal – ‘Email’ SQL Injection
# Exploit Title: Netartmedia Deals Portal - 'Email' SQL Injection
202CMS v10beta – Multiple SQL Injection
===========================================================================================
Netartmedia PHP Business Directory 4.2 – SQL Injection
# Exploit Title: Netartmedia PHP Business Directory 4.2 - SQL Injection
Netartmedia PHP Dating Site – SQL Injection
# Exploit Title: Netartmedia Php Dating Site - SQL Injection
Netartmedia Jobs Portal 6.1 – SQL Injection
# Exploit Title: Netartmedia Jobs Portal 6.1 - SQL Injection
Netartmedia PHP Real Estate Agency 4.0 – SQL Injection
# Exploit Title: Netartmedia PHP Real Estate Agency 4.0 - SQL Injection
Netartmedia PHP Car Dealer – SQL Injection
# Exploit Title: Netartmedia PHP Car Dealer- SQL Injection
Netartmedia Real Estate Portal 5.0 – SQL Injection
# Exploit Title: Netartmedia Real Estate Portal 5.0 - Multiple SQL Injection
Netartmedia PHP Mall 4.1 – SQL Injection
# Exploit Title: Netartmedia PHP Mall 4.1 - Multiple SQL Injection
Netartmedia Event Portal 2.0 – ‘Email’ SQL Injection
# Exploit Title: Netartmedia Event Portal 2.0 - 'Email' SQL Injection
eNdonesia Portal 8.7 – Multiple Vulnerabilities
===========================================================================================
MyBB Upcoming Events Plugin 1.32 – Cross-Site Scripting
# Exploit Title: MyBB Upcoming Events Plugin 1.32 - Cross-Site Scripting
Gila CMS 1.9.1 – Cross-Site Scripting
# Exploit Title: Gila CMS (search) Cross Site Scripting
TheCarProject 2 – Multiple SQL Injection
===========================================================================================
Laundry CMS – Multiple Vulnerabilities
===========================================================================================
Vembu Storegrid Web Interface 4.4.0 – Multiple Vulnerabilities
# Exploit Title: Vembu Storegrid Web Interface 4.4.0 - Multiple Vulnerabilities
ICE HRM 23.0 – Multiple Vulnerabilities
===========================================================================================
CMS Made Simple Showtime2 Module 3.6.2 – (Authenticated) Arbitrary File Upload
#!/usr/bin/env python
Pegasus CMS 1.0 – ‘extra_fields.php’ Plugin Remote Code Execution
# Exploit Title: Pegasus extra_fields.php Plugin Remote Code Execution
pfSense 2.4.4-p1 (HAProxy Package 0.59_14) – Persistent Cross-Site Scripting
# Exploit Title: pfSense 2.4.4-p1 (HAProxy Package 0.59_14) - Stored Cross-Site Scripting
WordPress Plugin GraceMedia Media Player 1.0 – Local File Inclusion
=============================================
PilusCart 1.4.1 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: PilusCart 1.4.1 - Cross-Site Request Forgery (Add Admin)
Flexpaper PHP Publish Service 2.3.6 – Remote Code Execution
#!/usr/bin/env python
DirectAdmin 1.55 – ‘CMD_ACCOUNT_ADMIN’ Cross-Site Request Forgery
# Exploit title: DirectAdmin v1.55 - CSRF via CMD_ACCOUNT_ADMIN Admin Panel
Kados R10 GreenBee – Multiple SQL Injection
===========================================================================================
OpenDocMan 1.3.4 – ‘search.php where’ SQL Injection
===========================================================================================
WordPress Plugin Cerber Security, Antispam & Malware Scan 8.0 – Multiple Bypass Vulnerabilities
# Exploit Title: WordPress Cerber Security, Antispam & Malware Scan - Multiple Bypass Vulnerabilities
Craft CMS 3.1.12 Pro – Cross-Site Scripting
# Exploit Title: Craft CMS 3.1.12 Pro - Cross-Site Scripting
Bolt CMS 3.6.4 – Cross-Site Scripting
# Exploit Title: Bolt CMS - 3.6.4 - Cross-Site Scripting
zzzphp CMS 1.6.1 – Cross-Site Request Forgery
# Exploit Title: Cross-Site Request Forgery(CSRF) of zzzphp cms 1.6.1