php

JFrog Artifactory < 7.25.4 - Blind SQL Injection

# Exploit Title: artifactory low-privileged blind sql injection

Employee Management System v1 – ’email’ SQL Injection

# Exploit Title: Employee Management System v1 - 'email' SQL Injection

phpFox < 4.8.13 - (redirect) PHP Object Injection Exploit

Lost and Found Information System v1.0 – ( IDOR ) leads to Account Take over

# Exploit Title: Lost and Found Information System v1.0 - idor leads to Account Take over

Online Nurse Hiring System 1.0 – Time-Based SQL Injection

# Exploit Title: Online Nurse Hiring System 1.0 - 'bookid' Time-Based SQL Injection

Rail Pass Management System 1.0 – Time-Based SQL Injection

# Exploit Title: Rail Pass Management System - 'searchdata' Time-Based SQL Injection

WordPress Seotheme – Remote Code Execution Unauthenticated

# Exploit Title: Wordpress Seotheme - Remote Code Execution Unauthenticated

WordPress Augmented-Reality – Remote Code Execution Unauthenticated

# Exploit Title: Wordpress Augmented-Reality - Remote Code Execution Unauthenticated

Advanced Page Visit Counter 1.0 – Admin+ Stored Cross-Site Scripting (XSS) (Authenticated)

# Exploit Title: Advanced Page Visit Counter 1.0 - Admin+ Stored Cross-Site

MISP 2.4.171 – Stored XSS

# Exploit Title: MISP 2.4.171 Stored XSS [CVE-2023-37307] (Authenticated)

Clinic’s Patient Management System 1.0 – Unauthenticated RCE

# Exploit Title: Clinic's Patient Management System 1.0 - Unauthenticated RCE

Curfew e-Pass Management System 1.0 – FromDate SQL Injection

# Exploit Title: Curfew e-Pass Management System 1.0 - FromDate SQL

GYM MS – GYM Management System – Cross Site Scripting (Stored)

# Exploit Title: GYM MS - GYM Management System - Cross Site Scripting (Stored)

Juniper-SRX-Firewalls&EX-switches – (PreAuth-RCE) (PoC)

# ***************************************************************************************************

Grocy <=4.0.2 - CSRF

# Exploit Title: Grocy

101 News 1.0 – Multiple-SQLi

## Title: 101 News-1.0 Multiple-SQLi

Academy LMS 6.2 – SQL Injection

# Exploit Title: Academy LMS 6.2 - SQL Injection

PHP Shopping Cart 4.2 – Multiple-SQLi

## Title: PHP Shopping Cart-4.2 Multiple-SQLi

Fundraising Script 1.0 – SQLi

## Title: Fundraising Script-1.0 SQLi

Bank Locker Management System – SQL Injection

# Exploit Title: Bank Locker Management System - SQL Injection

Blood Bank & Donor Management System using v2.2 – Stored XSS

# Exploit Title: Blood Bank & Donor Management System using v2.2 - Stored XSS

Equipment Rental Script-1.0 – SQLi

## Title: Equipment Rental Script-1.0 - SQLi

Shuttle-Booking-Software v1.0 – Multiple-SQLi

## Title: Shuttle-Booking-Software v1.0 - Multiple-SQLi

Limo Booking Software v1.0 – CORS

## Title: Limo Booking Software v1.0 - CORS

Webedition CMS v2.9.8.8 – Blind SSRF

Exploit Title: Webedition CMS v2.9.8.8 - Blind SSRF

BoidCMS v2.0.0 – authenticated file upload vulnerability

#!/usr/bin/python3

Cacti 1.2.24 – Authenticated command injection when using SNMP options

# Exploit Title: Cacti 1.2.24 - Authenticated command injection when using SNMP options

WordPress Sonaar Music Plugin 4.7 – Stored XSS

# Exploit Title: Wordpress Sonaar Music Plugin 4.7 - Stored XSS

Coppermine Gallery 1.6.25 – RCE

Exploit Title: coppermine-gallery 1.6.25 RCE

Media Library Assistant WordPress Plugin – RCE and LFI

# Exploit Title: Media Library Assistant Wordpress Plugin - RCE and LFI

WEBIGniter v28.7.23 File Upload – Remote Code Execution

## Title: WEBIGniter v28.7.23 File Upload - Remote Code Execution

WordPress Plugin Masterstudy LMS – 3.0.17 – Unauthenticated Instructor Account Creation

# Exploit Title: Wordpress Plugin Masterstudy LMS - 3.0.17 - Unauthenticated Instructor Account Creation

Clcknshop 1.0.0 – SQL Injection

# Exploit Title: Clcknshop 1.0.0 - SQL Injection

Online ID Generator 1.0 – Remote Code Execution (RCE)

## Title: Online ID Generator 1.0 - Remote Code Execution (RCE)

GLPI GZIP(Py3) 9.4.5 – RCE

#!/usr/bin/env python3

Drupal 10.1.2 – web-cache-poisoning-External-service-interaction

## Title: drupal-10.1.2 web-cache-poisoning-External-service-interaction

soosyze 2.0.0 – File Upload

## Title: soosyze 2.0.0 - File Upload

Wp2Fac – OS Command Injection

# Exploit Title: Wp2Fac v1.0 - OS Command Injection

WordPress Plugin Elementor 3.5.5 – Iframe Injection

# Exploit Title: Wordpress Plugin Elementor < 3.5.5 - Iframe Injection

Jorani v1.0.3-(c)2014-2023 – XSS Reflected & Information Disclosure

## Title: Jorani v1.0.3-(c)2014-2023 - XSS Reflected & Information Disclosure

SPA-Cart eCommerce CMS 1.9.0.3 – SQL Injection

# Exploit Title: SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection

SPA-Cart eCommerce CMS 1.9.0.3 – Reflected XSS

# Exploit Title: SPA-Cart eCommerce CMS 1.9.0.3 - Reflected XSS

Bus Reservation System 1.1 – Multiple-SQLi

## Title: Bus Reservation System-1.1 Multiple-SQLi

WP Statistics Plugin 13.1.5 current_page_id – Time based SQL injection (Unauthenticated)

# Exploit Title: WP Statistics Plugin = 5.0:

Member Login Script 3.3 – Client-side desync

## Title: Member Login Script 3.3 - Client-side desync

AdminLTE PiHole 5.18 – Broken Access Control

# Exploit Title: AdminLTE PiHole < 5.18 - Broken Access Control

CSZ CMS 1.3.0 – Stored Cross-Site Scripting (Plugin ‘Gallery’)

# Exploit Title: CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery')

CSZ CMS 1.3.0 – Stored Cross-Site Scripting (‘Photo URL’ and ‘YouTube URL’ )

# Exploit Title: CSZ CMS 1.3.0 - Stored Cross-Site Scripting ('Photo URL' and 'YouTube URL' )

Academy LMS 6.1 – Arbitrary File Upload

# Exploit Title: Academy LMS 6.1 - Arbitrary File Upload

Credit Lite 1.5.4 – SQL Injection

# Exploit Title: Credit Lite 1.5.4 - SQL Injection