php

doorGets CMS 7.0 – Arbitrary File Download

# Exploit Title: doorGets CMS 7.0 - Arbitrary File Download

Roxy Fileman 1.4.5 – Arbitrary File Download

# Exploit Title: Roxy Fileman 1.4.5 - Arbitrary File Download

ownDMS 4.7 – SQL Injection

# Exploit Title: ownDMS 4.7 - SQL Injection

Bigcart – Ecommerce Multivendor System 1.0 – SQL Injection

# Exploit Title: Bigcart - Ecommerce Multivendor System 1.0 - SQL Injection

Job Portal Platform 1.0 – SQL Injection

# Exploit Title: Job Portal 1.0 - SQL Injection

Real Estate Custom Script 2.0 – SQL Injection

# Exploit Title: Real Estate Custom Script 2.0 - SQL Injection

ThinkPHP 5.X – Remote Command Execution

# Exploit Title: thinkphp 5.X RCE

Hucart CMS 5.7.4 – Cross-Site Request Forgery (Add Administrator Account)

HealthNode Hospital Management System 1.0 – SQL Injection

# Exploit Title: HealthNode Hospital Management System 1.0 - SQL Injection

Cleanto 5.0 – SQL Injection

# Exploit Title: Cleanto 5.0 - SQL Injection

Find a Place CMS Directory 1.5 – SQL Injection

# Exploit Title: Locations CMS 1.5 - SQL Injection

Craigs Classified Ads CMS Theme 1.0.2 – SQL Injection

# Exploit Title: Craigs CMS 1.0.2 - SQL Injection

Live Call Support Widget 1.5 – Remote Code Execution / SQL Injection

# Exploit Title: Live Call Support 1.5 - Remote Code Execution / SQL Injection

Live Call Support Widget 1.5 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: Live Call Support 1.5 - Cross-Site Request Forgery (Add Admin)

Twilio WEB To Fax Machine System Application 1.0 – SQL Injection

# Exploit Title: Fax Machine System Application 1.0 - SQL Injection

Modern POS 1.3 – SQL Injection

# Exploit Title: Modern POS 1.3 - SQL Injection

Modern POS 1.3 – Arbitrary File Download

# Exploit Title: Modern POS 1.3 - Arbitrary File Download

Horde Imp – ‘imap_open’ Remote Command Execution

# Exploit Title: Horde Imp Unauthenticated Remote Command Execution

i-doit CMDB 1.12 – SQL Injection

# Exploit Title: i-doit CMDB 1.12 - SQL Injection

i-doit CMDB 1.12 – Arbitrary File Download

# Exploit Title: i-doit CMDB 1.12 - Arbitrary File Download

Joomla! Component JoomCRM 1.1.1 – SQL Injection

# Exploit Title: Joomla! Component JoomCRM 1.1.1 - SQL Injection

Joomla! Component JoomProject 1.1.3.2 – Information Disclosure

# Exploit Title: Joomla! Component JoomProject 1.1.3.2 - Information Disclosure

Adapt Inventory Management System 1.0 – SQL Injection

# Exploit Title: Adapt Inventory Management System 1.0 - SQL Injection

eBrigade ERP 4.5 – SQL Injection

# Exploit Title: eBrigade ERP 4.5 - SQL Injection

Event Locations 1.0.1 – ‘id’ SQL Injection

# Exploit Title: Event Locations 1.0.1 - SQL Injection

Event Calendar 3.7.4 – ‘id’ SQL Injection

# Exploit Title: Event Calendar 3.7.4 - SQL Injection

MLMPro 1.0 – SQL Injection

# Exploit Title: Matrix MLM Script 1.0 - SQL Injection

Architectural 1.0 – ’email’ SQL Injection

# Exploit Title: Architectural Cms 1.0 - SQL Injection

Shield CMS 2.2 – ’email’ SQL Injection

# Exploit Title: SHIELD - Freelancer Content Management System 2.2 - SQL Injection / CSRF

doitX 1.0 – ‘search’ SQL Injection

# Exploit Title: doitX 1.0 - SQL Injection

Matrix MLM Script 1.0 – Information Disclosure

# Exploit Title: Matrix MLM Script 1.0 - Information Leakage

eBrigade ERP 4.5 – Arbitrary File Download

#!/usr/bin/python

PEAR Archive_Tar < 1.4.4 - PHP Object Injection

PEAR Archive_Tar < 1.4.4 - PHP Object Injection

Dolibarr ERP-CRM 8.0.4 – ‘rowid’ SQL Injection

# Title: Dolibarr ERP-CRM 8.0.4 - 'rowid' SQL Injection

CF Image Hosting Script 1.6.5 – (Delete all Pictures) Privilege Escalation

#!/usr/bin/env python

Roxy Fileman 1.4.5 – Unrestricted File Upload / Directory Traversal

======================================================================

MyT Project Management 1.5.1 – ‘Charge[group_total]’ SQL Injection

# Exploit Title: MyT-PM 1.5.1 - 'Charge[group_total]' SQL Injection

WordPress Plugin UserPro < 4.9.21 - User Registration Privilege Escalation

# Exploit Title: Wordpress Plugin UserPro < 4.9.21 User Registration With Administrator Role

phpMoAdmin MongoDB GUI 1.1.5 – Cross-Site Request Forgery / Cross-Site Scripting

#####################################################################################################################...

MyBB OUGC Awards Plugin 1.8.3 – Persistent Cross-Site Scripting

# Exploit Title: MyBB OUGC Awards Plugin v1.8.3 - Cross-Site Scripting

LayerBB 1.1.1 – Persistent Cross-Site Scripting

# Exploit Title: LayerBB 1.1.1 - Cross-Site Scripting

All in One Video Downloader 1.2 – (Authenticated) SQL Injection

# Exploit Title: All in One Video Downloader 1.2 - SQL Injection

Embed Video Scripts – Persistent Cross-Site Scripting

# Exploit Title: Embed Video Scripts - Cross-site Script (stored)

Frog CMS 0.9.5 – Cross-Site Scripting

# Exploit Title: Frog CMS 0.9.5 - Cross-Site Scripting

WordPress Plugin Adicon Server 1.2 – ‘selectedPlace’ SQL Injection

# Exploit Title: WordPress Plugin Adicon Server 1.2 - 'selectedPlace' SQL Injection

Vtiger CRM 7.1.0 – Remote Code Execution

# Exploit Title: Vtiger CRM 7.1.0 - Remote Code Execution

WordPress Plugin Baggage Freight Shipping Australia 0.1.0 – Arbitrary File Upload

# Exploit Title: WordPress Plugin Baggage Freight Shipping Australia 0.1.0 - Arbitrary File Upload

bludit Pages Editor 3.0.0 – Arbitrary File Upload

# Exploit Title: bludit Pages Editor 3.0.0 - Arbitrary File Upload

WordPress Plugin Audio Record 1.0 – Arbitrary File Upload

# Exploit Title: WordPress Plugin Audio Record 1.0 - Arbitrary File Upload

Craft CMS 3.0.25 – Cross-Site Scripting

# Exploit Title: Craft CMS 3.0.25 - Cross-Site Scripting