php

FrontAccounting 2.4.5 – ‘SubmitUser’ SQL Injection

# Exploit Title: FrontAccounting 2.4.5 - 'SubmitUser' SQL Injection

WSTMart 2.0.8 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: WSTMart 2.0.8 - Cross-Site Request Forgery (Add Admin)

WSTMart 2.0.8 – Cross-Site Scripting

# Exploit Title: WSTMart 2.0.8 - Cross-Site Scripting

ZeusCart 4.0 – Cross-Site Request Forgery (Deactivate Customer Accounts)

# Exploit Title: ZeusCart 4.0 Deactivate Customer Accounts CSRF

Yeswiki Cercopitheque – ‘id’ SQL Injection

# Exploit Title: SQL Injection in Yeswiki (Cercopitheque)

Bolt CMS < 3.6.2 - Cross-Site Scripting

# Exploit Title: Bolt CMS [ https://github.com/rdincel1/Bolt-CMS-3.6.2---Cross-Site-Scripting/raw/master/bolt-v3.6.2...

Integria IMS 5.0.83 – Cross-Site Request Forgery

# Exploit Title: Integria IMS 5.0.83 - Cross-Site Request Forgery

Integria IMS 5.0.83 – ‘search_string’ Cross-Site Scripting

# Exploit Title: Integria IMS 5.0.83 - Cross-Site Scripting

Rukovoditel Project Management CRM 2.3.1 – Remote Code Execution (Metasploit)

##

Hotel Booking Script 3.4 – Cross-Site Request Forgery (Change Admin Password)

# Exploit Title: Admin Account take over Via CSRF

phpMyAdmin 4.8.4 – ‘AllowArbitraryServer’ Arbitrary File Read

#!/usr/bin/env python

Double Your Bitcoin Script Automatic – Authentication Bypass

# Exploit Title: Double Your Bitcoin Script Automatic 2018 for $50 - Authentication Bypass

Facebook And Google Reviews System For Businesses 1.1 – Remote Code Execution

# Exploit Title: Facebook And Google Reviews System For Businesses 1.1 - Remote Code Execution

Facebook And Google Reviews System For Businesses 1.1 – SQL Injection

# Exploit Title: Facebook And Google Reviews System For Businesses 1.1 - SQL Injection

Facebook And Google Reviews System For Businesses – Cross-Site Request Forgery (Change Admin Password)

# Exploit Title: Facebook And Google Reviews System For Businesses - Cross-Site Request Forgery

Responsive FileManager 9.13.4 – Multiple Vulnerabilities

Responsive FileManager 9.13.4 - Multiple Vulnerabilities

phpBB 3.2.3 – Remote Code Execution

// All greets goes to RIPS Tech

ThinkPHP 5.0.23/5.1.31 – Remote Code Execution

# Exploit Title: ThinkPHP 5.x < v5.0.23,v5.1.31 Remote Code Execution

WordPress Plugin AutoSuggest 0.24 – ‘wpas_keys’ SQL Injection

# Exploit Title: WP AutoSuggest 0.24 - SQL Injection

HotelDruid 2.3.0 – ‘id_utente_mod’ SQL Injection

# Exploit Title: SQL Injection in HotelDruid version 2.3

DomainMOD 4.11.01 – Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

PrestaShop 1.6.x/1.7.x – Remote Code Execution

Alumni Tracer SMS Notification – SQL Injection / Cross-Site Request Forgery

# Exploit Title: Alumni Tracer SMS Notification - SQL Injection / Cross-Site Request Forgery (Add/Update Admin)

Tourism Website Blog – Remote Code Execution / SQL Injection

# Exploit Title: Tourism Website Blog - Remote Code Execution / SQL Injection

DomainMOD 4.11.01 – ‘DisplayName’ Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

Adiscon LogAnalyzer < 4.1.7 - Cross-Site Scripting

# Exploit Title: Adiscon LogAnalyzer 4.1.7 - Cross-Site Scripting

i-doit CMDB 1.11.2 – Remote Code Execution

# Exploit Title: i-doit CMDB 1.11.2 - Remote Code Execution

HasanMWB 1.0 – SQL Injection

# Exploit Title: HasanMWB 1.0 - SQL Injection

FreshRSS 1.11.1 – Cross-Site Scripting

Multiple Cross-Site Scripting Vulnerabilities in FreshRSS 1.11.1

DomainMOD 4.11.01 – Registrar Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

NUUO NVRMini2 3.9.1 – (Authenticated) Command Injection

# Exploit Title: NUUO NVRMini2 Authenticated Command Injection

DomainMOD 4.11.01 – Custom SSL Fields Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 – Custom Domain Fields Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

Dolibarr ERP/CRM 8.0.3 – Cross-Site Scripting

# Exploit Title: Dolibarr ERP/CRM

KeyBase Botnet 1.5 – SQL Injection

################################

DomainMOD 4.11.01 – Owner name Field Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

WordPress Plugin Advanced-Custom-Fields 5.7.7 – Cross-Site Scripting

# Exploit Title: Wordpress Plugins Advanced-custom-fields 5.7.7 - Cross-Site Scripting

PHP Server Monitor 3.3.1 – Cross-Site Request Forgery

# Exploit Title: PHP Server Monitor 3.3.1 - Cross-Site Request Forgery

Joomla! Component JE Photo Gallery 1.1 – ‘categoryid’ SQL Injection

# Exploit Title: Joomla! Component JE Photo Gallery 1.1 - SQL Injection

Fleetco Fleet Maintenance Management 1.2 – Remote Code Execution

# Exploit Title: Fleetco Fleet Maintenance Management 1.2 - Remote Code Execution

PhpSpreadsheet < 1.5.0 - XML External Entity (XXE)

# Product Description

No-Cms 1.0 – ‘order_by’ SQL Injection

# Exploit Title: No-Cms 1.0 - 'order_by' SQL Injection

Ticketly 1.0 – ‘kind_id’ SQL Injection

# Exploit Title: Ticketly 1.0 – Multiple SQL Injection

WordPress Plugin Easy Testimonials 3.2 – Cross-Site Scripting

# Exploit Title: Wordpress Plugins Easy Testimonials 3.2 - Cross-Site Scripting

WebOfisi E-Ticaret V4 – ‘urun’ SQL Injection

# Exploit Title: WebOfisi E-Ticaret V4 - 'urun' SQL Injection

WordPress Theme CherryFramework 3.1.4 – Backup File Download

# Exploit Title: Wordpress CherryFramework Themes 3.1.4 - Backup File Download

Ticketly 1.0 – ‘name’ SQL Injection

# Exploit Title: Ticketly 1.0 – 'name' SQL Injection

Ticketly 1.0 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: Ticketly 1.0 - Cross-Site Request Forgery (Add Admin)

DomainMOD 4.11.01 – ‘raid’ Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

Helpdezk 1.1.1 – Arbitrary File Upload

# Exploit Title: Helpdezk 1.1.1 - Arbitrary File Upload