php

ClipperCMS 1.3.3 – Cross-Site Scripting

# Exploit Title: ClipperCMS 1.3.3 Persistent XSS on 'Site name' field

Listing Hub CMS 1.0 – SQL Injection

# Exploit Title: Listing Hub CMS 1.0 - Multiple SQL Injection

BookingWizz Booking System 5.5 – ‘id’ SQL Injection

# Exploit Title: BookingWizz Booking System 5.5 - 'bs-services-add.php' SQL Injection

Lyrist – ‘id’ SQL Injection

# Exploit Title: Lyrist - Music Lyrics Script - SQL Injection

Sharetronix CMS 3.6.2 – Cross-Site Request Forgery / Cross-Site Scripting

# Exploit Title: Sharetronix CMS XSRF Vulnerability

Ingenious School Management System – ‘id’ SQL Injection

# Exploit Title: Ingenious School Management System - SQL Injection

WordPress Plugin Booking Calendar 3.0.0 – SQL Injection / Cross-Site Scripting

# Exploit Title: Wordpress Plugin Booking Calendar 3.0.0 - SQL Injection / Cross-Site Scripting

Symfony 2.7.0 < 4.0.10 - Denial of Service

The PDOSessionHandler class allows to store sessions on a PDO connection. Under some configurations (see below) and w...

easyLetters 1.0 – ‘id’ SQL Injection

# Exploit Title: easyLetters 1.0 - 'id' SQL Injection

mySurvey 1.0 – ‘id’ SQL Injection

# Exploit Title: mySurvey 1.0 - 'statistic.php' SQL Injection

EasyService Billing 1.0 – ‘q’ SQL Injection

EasyService Billing 1.0 – Cross-Site Scripting

EasyService Billing 1.0 – Cross-Site Request Forgery

Ajax Full Featured Calendar 2.0 – ‘search’ SQL Injection

# Exploit Title: Ajax Full Featured Calendar 2.0 - 'search' SQL Injection

Employee Work Schedule 5.9 – ‘cal_id’ SQL Injection

# Exploit Title: EWS 5.9 - 'search' SQL Injection

MyBB Moderator Log Notes Plugin 1.1 – Cross-Site Scripting

# Exploit Title: MyBB Moderator Log Notes Plugin 1.1 - Cross-Site Scripting

KomSeo Cart 1.3 – ‘my_item_search’ SQL Injection

# Exploit Title: KomSeo Cart 1.3 - 'edit.php' SQL Injection

Timber 1.1 – Cross-Site Request Forgery

# Exploit Title: Timber - Ultimate Freelancer Platform 1.1 - Cross site request forgery

PaulNews 1.0 – ‘keyword’ SQL Injection / Cross-Site Scripting

# Exploit Title: PaulNews 1.0 - 'keyword' SQL Injection / Cross-Site Scripting

WordPress Plugin Peugeot Music – Arbitrary File Upload

# Exploit Title: Wordpress Plugin Peugeot Music - Arbitrary File Upload

Mcard Mobile Card Selling Platform 1 – SQL Injection

# Exploit Title: # Exploit Title: Mcard Mobile Card Selling Platform 1 - SQL Injection

eWallet Online Payment Gateway 2 – Cross-Site Request Forgery

# Exploit Title: eWallet - Online Payment Gateway 2 - Cross-Site Request Forgery

Wecodex Restaurant CMS 1.0 – ‘Login’ SQL Injection

# Exploit Title: Wecodex Restaurant CMS 1.0 - 'Login' SQL Injection

Wecodex Hotel CMS 1.0 – ‘Admin Login’ SQL Injection

# Exploit Title: Wecodex Hotel CMS 1.0 - 'Admin Login' SQL Injection

Library CMS 1.0 – SQL Injection

# Exploit Title: Library CMS 1.0 - SQL Injection

School Management System CMS 1.0 – ‘username’ SQL Injection

# Exploit Title: School Management System CMS 1.0 - Admin Login SQL

SAT CFDI 3.3 – SQL Injection

# Exploit Title: SAT CFDI 3.3 - SQL Injection

Wecodex Store Paypal 1.0 – SQL Injection

# Exploit Title: Wecodex Store Paypal 1.0 - SQL Injection

Shipping System CMS 1.0 – SQL Injection

# Exploit Title: Shipping System CMS 1.0 - SQL Injection

GPSTracker 1.0 – ‘id’ SQL Injection

# Exploit Title: GPSTracker v1.0 - Login Page SQL Injection

Online Store System CMS 1.0 – SQL Injection

# Exploit Title: Online Store System CMS 1.0 - SQL Injection

Gigs 2.0 – ‘username’ SQL Injection

# Exploit Title: Gigs v2.0 - Login Page SQL Injection

Mobile Card Selling Platform 1 – Cross-Site Request Forgery

# Exploit Title: Mcard - Mobile Card Selling Platform 1 - Cross-Site Request Forgery

PHP Dashboards 4.5 – SQL Injection

# Exploit Title: PHP Dashboards 4.5 - SQL Injection

PHP Dashboards 4.5 – ’email’ SQL Injection

# Exploit Title: PHP Dashboards v4.5 - Registration Page SQL Injection

MySQL Blob Uploader 1.7 – ‘home-filet-edit.php’ SQL Injection

# Exploit Title: MySQL Blob Uploader 1.7 - 'home-filet-edit.php' SQL Injection

MySQL Blob Uploader 1.7 – ‘home-filet-edit.php’ SQL Injection / Cross-Site Scripting

# Exploit Title: MySQL Blob Uploader 1.7 - 'home-filet-edit.php' SQL Injection / Cross-Site Scripting

MySQL Blob Uploader 1.7 – ‘home-file-edit.php’ SQL Injection / Cross-Site Scripting

# Exploit Title: MySQL Blob Uploader 1.7 - 'home-file-edit.php' SQL Injection / Cross-Site Scripting

MySQL Blob Uploader 1.7 – ‘download.php’ SQL Injection / Cross-Site Scripting

# Exploit Title: MySQL Blob Uploader 1.7 - 'download.php' SQL Injection / Cross-Site Scripting

MySQL Smart Reports 1.0 – ‘id’ SQL Injection / Cross-Site Scripting

# Exploit Title: MySQL Smart Reports 1.0 - SQL Injection / Cross-Site Scripting

EasyService Billing 1.0 – ‘p1’ SQL Injection

# Exploit Title: EasyService Billing 1.0 - 'customer-new-s.php' SQL

EasyService Billing 1.0 – SQL Injection / Cross-Site Scripting

# Exploit Title: EasyService Billing 1.0 - 'template_().php' SQL Injection / Cross-Site Scripting

Easy File Uploader 1.7 – SQL Injection / Cross-Site Scripting

# Exploit Title: Easy File Uploader 1.7 - SQL Injection / Cross-Site

NewsBee CMS 1.4 – ‘download.php’ SQL Injection

# Exploit Title: NewsBee CMS 1.4 - 'download.php' SQL Injection

Feedy RSS News Ticker 2.0 – ‘cat’ SQL Injection

# Exploit Title: Feedy RSS News Ticker 2.0 - 'cat' SQL Injection

NewsBee CMS 1.4 – ‘home-text-edit.php’ SQL Injection

# Exploit Title: NewsBee CMS 1.4 - 'home-text-edit.php' SQL Injection

Auto Car 1.2 – ‘car_title’ SQL Injection / Cross-Site Scripting

# Exploit Title: Auto car 1.2 - 'car_title' SQL Injection / Cross-Site Scripting

iSocial 1.2.0 – Cross-Site Scripting / Cross-Site Request Forgery

# Exploit Title: iSocial 1.2.0 - Cross-Site Scripting / Cross-Site Request Forgery

PaulPrinting CMS Printing 1.0 – SQL Injection

# Exploit Title: PaulPrinting CMS Printing 1.0 - SQL Injection

WebSocket Live Chat – Cross-Site Scripting

# Exploit Title: WebSocket Live Chat - Cross-Site Scripting