WUZHI CMS 4.1.0 – Cross-Site Request Forgery
# Exploit Title: WUZHI CMS 4.1.0 - Cross-Site Request Forgery
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
UK Cookie Consent – Persistent Cross-Site Scripting
# Exploit Title: UK Cookie Consent v2.3.9 - Persistent Cross-Site Scripting
Monstra cms 3.0.4 – Persitent Cross-Site Scripting
# Exploit Title: Monstra cms 3.0.4 - Persitent Cross-Site Scripting
Drupal avatar_uploader v7.x-1.0-beta8 – Arbitrary File Disclosure
#Title: Drupal avatar_uploader v7.x-1.0-beta8 - Arbitrary File Disclosure
phpMyAdmin 4.8.0 < 4.8.0-1 - Cross-Site Request Forgery
# Exploit Title: phpMyAdmin 4.8.0 < 4.8.0-1 - Cross-Site Request Forgery
Cobub Razor 0.8.0 – Physical Path Leakage
# Exploit Title: Cobub Razor 0.8.0 Physical path Leakage Vulnerability
Joomla! Component JS Jobs 1.2.0 – Cross-Site Request Forgery
#######################################
WordPress Plugin Caldera Forms 1.5.9.1 – Cross-Site Scripting
# Exploit Title: CalderaForms 1.5.9.1 - multiple XSS
Match Clone Script 1.0.4 – Cross-Site Scripting
########################################################################
Rvsitebuilder CMS – Database Backup Download
# Exploit Title: Rvsitebuilder CMS Database Backup Download
MySQL Squid Access Report 2.1.4 – SQL Injection / Cross-Site Scripting
# Exploit Title: MySQL Squid Access Report 2.1.4 Multiple Vulnerabilities
Joomla! Component jDownloads 3.2.58 – Cross Site Scripting
#######################################
Cobub Razor 0.8.0 – SQL injection
# Exploit Title: Cobub Razor 0.8.0 SQL injection Vulnerability
Joomla! Convert Forms version 2.0.3 – Formula Injection (CSV Injection)
# Exploit Title: Joomla Extension Convert Forms version 2.0.3 is vulnerable to Formula Injection (CSV Injection)
WordPress Plugin File Upload 4.3.3 – Stored Cross-Site Scripting (PoC)
# Exploit Title: WordPress Plugin WordPress File Upload 4.3.3 - Stored XSS
WordPress Plugin File Upload 4.3.2 – Stored Cross-Site Scripting
# Exploit Title: WordPress Plugin WordPress File Upload 4.3.2 - Stored XSS
WUZHI CMS 4.1.0 – Cross-Site Request Forgery (Add User)
# Exploit Title: WUZHI CMS 4.1.0 CSRF vulnerability add user account
WUZHI CMS 4.1.0 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: WUZHI CMS 4.1.0 CSRF vulnerability add admin account
WordPress Plugin Activity Log 2.4.0 – Stored Cross-Site Scripting
# Exploit Title : Activity Log Wordpress Plugin Stored Cross Site Scripting (XSS)
iScripts Easycreate 3.2.1 – Stored Cross-Site Scripting
# Exploit Title: iScripts Easycreate 3.2.1 - Stored Cross-Site Scripting
WordPress Plugin Google Drive 2.2 – Remote Code Execution
# Exploit Title: Plugin Google Drive for WordPress 2.2 – RCE – Unlik
iScripts SonicBB 1.0 – Reflected Cross-Site Scripting (PoC)
# Exploit Title: iScripts SonicBB 1.0 - Reflected Cross-Site Scripting
WooCommerce CSV-Importer-Plugin 3.3.6 – Remote Code Execution
# Exploit Title: Plugin Woocommerce CSV importer 3.3.6 – RCE – Unlink
Buddypress Xprofile Custom Fields Type 2.6.3 – Remote Code Execution
# Exploit Title: Plugin Buddypress Xprofile Custom Fields Type 2.6.3 RCE – Unlink
WordPress Plugin Simple Fields 0.2 – 0.3.5 – Local/Remote File Inclusion / Remote Code Execution
# Exploit Title: Simple Fields 0.2 - 0.3.5 LFI/RFI/RCE
Yahei PHP Prober 0.4.7 – Cross-Site Scripting
# Exploit title: Yahei-PHP Proberv0.4.7 - Cross-Site Scripting
WolfCMS 0.8.3.1 – Open Redirection
#######################################
MyBB Plugin Recent Threads On Index – Cross-Site Scripting
# Exploit Title: MyBB Recent threads
Cobub Razor 0.7.2 – Add New Superuser Account
# Exploit Title: [Cobub Razor 0.7.2 Add New Superuser User]
WolfCMS 0.8.3.1 – Cross-Site Request Forgery
#######################################
WordPress Plugin Background Takeover < 4.1.4 - Directory Traversal
# Exploit Title: WP Background Takeover, Directory Traversal
Cobub Razor 0.7.2 – Cross-Site Request Forgery
# Exploit Title: Cobub Razor 0.7.2 Cross Site Request Forgery
WordPress Plugin Activity Log 2.4.0 – Cross-Site Scripting
# Exploit Title : Activity Log Wordpress Plugin Stored Cross Site Scripting (XSS)
GetSimple CMS 3.3.13 – Cross-Site Scripting
#######################################
Z-Blog 1.5.1.1740 – Full Path Disclosure
# Exploit Title: Z-Blog 1.5.1.1740 Web Site physical path leakage Vulnerability
Z-Blog 1.5.1.1740 – Cross-Site Scripting
# Exploit Title: Z-Blog 1.5.1.1740 XSS Vulnerability
YzmCMS 3.6 – Cross-Site Scripting
# Exploit Title: YzmCMS 3.6 XSS Vulnerability
Joomla! Component JS Jobs 1.2.0 – Cross-Site Scripting
#######################################
MyBB Plugin Downloads 2.0.3 – Cross-Site Scripting
# Exploit Title: MyBB Downloads Plugin v2.0.3 - Persistent XSS
OpenCMS 10.5.3 – Cross-Site Scripting
# Exploit Title: OpenCMS 10.5.3 Stored Cross Site Scripting Vulnerability
OpenCMS 10.5.3 – Cross-Site Request Forgery
# Exploit Title: OpenCMS 10.5.3 Multiple Cross Site Request Forgery Vulnerabilities
WampServer 3.1.2 – Cross-Site Request Forgery
# Exploit Title: WampServer 3.1.2 CSRF to add or delete any virtual hostsremotely
WampServer 3.1.1 – Cross-Site Scripting / Cross-Site Request Forgery
# Exploit Title: WampServer 3.1.1 XSS via CSRF
Frog CMS 0.9.5 – Cross-Site Request Forgery (Add User)
# Exploit Title: Cross Site Request Forgery- Frog CMS
D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router – Authentication Bypass
# Exploit Title: D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Route Authentication Bypass