php

KORA 2.7.0 – ‘cid’ SQL Injection

# Exploit Title: KORA 2.7.0 - SQL Injection

Academic Timetable Final Build 7.0 – Information Disclosure

Centos Web Panel 0.9.8.480 – Multiple Vulnerabilities

# Exploit Title: Centos Web Panel 0.9.8.480 Multiple Vulnerabilities

MaxOn ERP Software 8.x-9.x – ‘nomor’ SQL Injection

# Exploit Title: MaxOn ERP Software 8.x-9.x - 'nomor' SQL Injection

Advanced HRM 1.6 – Remote Code Execution

# Exploit Title: Advanced HRM 1.6 - Remote Code Execution

College Notes Management System 1.0 – ‘user’ SQL Injection

# Exploit Title: College Notes Management System 1.0 - 'user' SQL Injection

Academic Timetable Final Build 7.0b – Cross-Site Request Forgery (Add Admin)

# Exploit Title: Academic Timetable Final Build 7.0b - Cross-Site Request Forgery (Add Admin)

Academic Timetable Final Build 7.0a-7.0b – ‘id’ SQL Injection

# Exploit Title: Academic Timetable Final Build 7.0a-7.0b - 'id' SQL Injection

SugarCRM 6.5.26 – Cross-Site Scripting

# Exploit Title: SugarCRM 6.5.26 - Cross-Site Scripting

HaPe PKH 1.1 – Arbitrary File Upload

# Exploit Title: HaPe PKH 1.1 - Arbitrary File Upload

HaPe PKH 1.1 – Cross-Site Request Forgery (Update Admin)

# Exploit Title: HaPe PKH 1.1 - Cross-Site Request Forgery (Update Admin)

LUYA CMS 1.0.12 – Cross-Site Scripting

# Exploit Title: LUYA CMS 1.0.12 - Cross-Site Scripting

HaPe PKH 1.1 – ‘id’ SQL Injection

# Exploit Title: HaPe PKH 1.1 - 'id' SQL Injection

jQuery-File-Upload 9.22.0 – Arbitrary File Upload

# Title: jQuery-File-Upload 9.22.0 - Arbitrary File Upload

E-Registrasi Pencak Silat 18.10 – ‘id_partai’ SQL Injection

# Exploit Title: E-Registrasi Pencak Silat 18.10 - 'id_partai' SQL Injection

Wikidforum 2.20 – Cross-Site Scripting

# Exploit Title: Wikidforum 2.20 - Cross-Site Scripting

Wikidforum 2.20 – ‘message_id’ SQL Injection

# Exploit Title: Wikidforum 2.20 - 'message_id' SQL Injection

Wikidforum 2.20 – ‘select_sort’ SQL Injection

# Exploit Title: Wikidforum 2.20 - 'select_sort' SQL Injection

Navigate CMS – (Unauthenticated) Remote Code Execution (Metasploit)

##

Chamilo LMS 1.11.8 – ‘firstname’ Cross-Site Scripting

# Exploit Title: Chamilo LMS 1.11.8 - 'firstname' Cross-Site Scripting

Chamilo LMS 1.11.8 – Cross-Site Scripting

# Exploit Title: Chamilo LMS 1.11.8 - Cross-Site Scripting

ISPConfig < 3.1.13 - Remote Command Execution

# Title: ISPConfig < 3.1.13 - Remote Command Execution

D-Link Central WiFiManager Software Controller 1.03 – Multiple Vulnerabilities

Core Security - Corelabs Advisory

LayerBB Forum 1.1.1 – ‘search_query’ SQL Injection

# Exploit Title: LayerBB Forum 1.1.1 - 'search_query' SQL Injection

Joomla! Component Jimtawl 2.2.7 – ‘id’ SQL Injection

# Exploit Title: Joomla! Component Jimtawl 2.2.7 - 'id' SQL Injection

Zechat 1.5 – ‘uname’ SQL Injection

# Exploit Title: Zechat 1.5 - 'uname' SQL Injection

OPAC EasyWeb Five 5.7 – ‘nome’ SQL Injection

# Exploit Title: OPAC EasyWeb Five 5.7 - 'nome' SQL Injection

Coaster CMS 5.5.0 – Cross-Site Scripting

# Exploit Title: Coaster CMS 5.5.0 - Cross-Site Scripting

OPAC EasyWeb Five 5.7 – ‘biblio’ SQL Injection

# Exploit Title: OPAC EasyWeb Five 5.7 - 'biblio' SQL Injection

WUZHICMS 2.0 – Cross-Site Scripting

# Title: WUZHICMS 2.0 - Cross-Site Scripting

Flippa Marketplace Clone 1.0 – ‘date_started’ SQL Injection

# Exploit Title: Flippa Marketplace Clone 1.0 - 'date_started' SQL Injection

Binary MLM Software 1.0 – ‘pid’ SQL Injection

# Exploit Title: Binary MLM Software 1.0 - 'pid' SQL Injection

Singleleg MLM Software 1.0 – ‘msg_id’ SQL Injection

# Exploit Title: Singleleg MLM Software 1.0 - 'msg_id' SQL Injection

Education Website 1.0 – ‘subject’ SQL Injection

# Exploit Title: Education Website 1.0 - 'subject' SQL Injection

Hotel Booking Engine 1.0 – ‘h_room_type’ SQL Injection

# Exploit Title: Hotel Booking Engine 1.0 - 'h_room_type' SQL Injection

Fork CMS 5.4.0 – Cross-Site Scripting

# Exploit Title: Fork CMS 5.4.0 - Cross-Site Scripting

Joomla! Component Responsive Portfolio 1.6.1 – ‘filter_order_Dir’ SQL Injection

# Exploit Title: Joomla! Component Responsive Portfolio 1.6.1 - 'filter_order_Dir' SQL Injection

Joomla! Component Timetable Schedule 3.6.8 – SQL Injection

# # # # #

Joomla! Component Article Factory Manager 4.3.9 – SQL Injection

# # # # #

Joomla! Component AlphaIndex Dictionaries 1.0 – SQL Injection

# # # # #

Joomla! Component Reverse Auction Factory 4.3.8 – SQL Injection

# # # # #

Joomla! Component Collection Factory 4.1.9 – SQL Injection

# # # # #

Joomla! Component Swap Factory 2.2.1 – SQL Injection

# # # # #

Joomla! Component eXtroForms 2.1.5 – ‘filter_type_id’ SQL Injection

# Exploit Title: Joomla Component eXtroForms 2.1.5 - 'filter_type_id' SQL Injection

Joomla! Component Social Factory 3.8.3 – SQL Injection

# # # # #

Joomla! Component Jobs Factory 2.0.4 – SQL Injection

# # # # #

Joomla! Component Questions 1.4.3 – SQL Injection

# # # # #

Joomla! Component Penny Auction Factory 2.0.4 – SQL Injection

# # # # #

Joomla! Component Music Collection 3.0.3 – SQL Injection

# # # # #

Joomla! Component Raffle Factory 3.5.2 – SQL Injection

# # # # #