PerfexCRM 1.9.7 – Arbitrary File Upload
# Exploit Title: PerfexCRM 1.9.7 – Unrestricted php5 File upload
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
ImgHosting 1.5 – Cross-Site Scripting
# Exploit Title: ImgHosting Image Storage System 1.5 - Cross-Site-Scripting
pfSense < 2.1.4 - 'status_rrd_graph_img.php' Command Injection
#!/usr/bin/env python3
Xnami 1.0 – Cross-Site Scripting
# Exploit Title: Xnami Image Sharing - Persistent XSS Vulnerability
Joomla! Component Easydiscuss < 4.0.21 - Cross-Site Scripting
# Exploit Title: Joomla Plugin Easydiscuss
WordPress Plugin Events Calendar – ‘event_id’ SQL Injection
# Exploit Title: Wichipi Events Calendar - SQL Injection
Muviko 1.1 – SQL Injection
# Exploit Title: Muviko 1.1 - Multiple SQL Injection
WordPress Plugin Service Finder Booking < 3.2 - Local File Disclosure
# Exploit Title: Worpress Plugin Service Finder Booking < 3.2 - Local File Disclosure
Synology Photostation < 6.7.2-3429 - Multiple Vulnerabilities
Synology Photostation Multiple Vulnerabilities
Vanilla < 2.1.5 - Cross-Site Request Forgery
# Exploit Title: CSRF vulnerabilities in Vanilla Forums below 2.1.5-CVE-2017-1000432
WordPress Plugin LearnDash 2.5.3 – Arbitrary File Upload
# Exploit Title: WordPress LearnDash 2.5.3 Unauthenticated Arbitrary
gps-server.net GPS Tracking Software < 3.1 - Multiple Vulnerabilities
# Exploit Title: GPS-SERVER.NET SAAS CMS
WordPress Plugin Smart Google Code Inserter < 3.5 - Authentication Bypass / SQL Injection
Exploit Title: Smart Google Code Inserter < 3.5 - Auth Bypass/SQLi
PHP Melody 2.7.1 – ‘playlist’ SQL Injection
# Exploit Title: PHP Melody v2.7.1 - SQL Injection
Easy!Appointments 1.2.1 – Cross-Site Scripting
Easy!Appointments v1.2.1 Multiple Stored XSS Vulnerabilities
Xerox DC260 EFI Fiery Controller Webtools 2.0 – Arbitrary File Disclosure
Xerox DC260 EFI Fiery Controller Webtools 2.0 Arbitrary File Disclosure
SilverStripe CMS 3.6.2 – CSV Excel Macro Injection
Exploit Title: SilverStripe CMS - 3.6.2 CSV Excel Macro Injection
Sendroid < 6.5.0 - SQL Injection
# Exploit Title: Sendroid - Bulk SMS Portal, Marketing Script( 5.0.0 - 6.5.0 ) - SQL Injection
Monstra CMS 3.0.4 – (Authenticated) Arbitrary File Upload / Remote Code Execution
Exploit Title: Monstra CMS - 3.0.4 RCE
Ciuis CRM 1.0.7 – SQL Injection
# Exploit Title: [Ciuis CRM v 1.0.7 Sql Injection]
Movie Guide 2.0 – SQL Injection
# # # # #
Accesspress Anonymous Post Pro < 3.2.0 - Arbitrary File Upload
# Exploit Title: Unauthenticated Arbitrary File Upload
Vanguard 1.4 – SQL Injection
# # # # #