AirStar Airbnb Clone Script 1.0 – SQL Injection
# Exploit Title: AirStar Airbnb Clone Script v1.0 - SQL Injection
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
EduStar Udemy Clone Script 1.0 – SQL Injection
# Exploit Title: EduStar Udemy Clone Script v1.0 - SQL Injection
iTech StockPhoto Script 2.02 – SQL Injection
# Exploit Title: iTech StockPhoto Script v2.02 - SQL Injection
iTech Book Store Script 2.02 – SQL Injection
# Exploit Title: iTech Book Store Script v2.02 - SQL Injection / Reflected XSS
JobStar Monster Clone Script 1.0 – SQL Injection
# Exploit Title: JobStar Monster Clone Script v1.0 - SQL Injection
PHP Dashboards NEW 4.4 – SQL Injection
# # # # #
Law Firm 1.0 – SQL Injection
# # # # #
Job Board Software 1.0 – SQL Injection
# # # # #
Escort Marketplace 1.0 – SQL Injection
# # # # #
EzInvoice 6.02 – SQL Injection
# # # # #
EzBan 5.3 – ‘id’ SQL Injection
# # # # #
Cory Support – ‘pr’ SQL Injection
# Exploit : Cory Support (pr) SQL Injection Vulnerability
Ultimate HR System < 1.2 - Directory Traversal / Cross-Site Scripting
# Exploit Title: HRM - Workable Zone : Ultimate HR System Last Name
The Car Project 1.0 – SQL Injection
# # # # #
A2billing 2.x – SQL Injection
# Title : A2billing 2.x , Sql injection vulnerability
iGreeting Cards 1.0 – SQL Injection
# # # # #
A2billing 2.x – Backup File Download / Remote Code Execution
# Title : A2billing 2.x , Unauthenticated Backup dump / RCE flaw
WordPress Plugin Participants Database < 1.7.5.10 - Cross-Site Scripting
# Exploit Title: Wordpress Plugin Participants Database < 1.7.5.10 - XSS
Joomla! Component Huge-IT Portfolio Gallery Plugin 1.0.7 – SQL Injection
# Exploit Title Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla
Joomla! Component Huge-IT Portfolio Gallery Plugin 1.0.6 – SQL Injection
# Exploit Title Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6
Joomla! Component Huge-IT Video Gallery 1.0.9 – SQL Injection
# Exploit Title Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla
Oracle Java JDK/JRE < 1.8.0.131 / Apache Xerces 2.11.0 - 'PDF/Docx' Server Side Denial of Service
## Vulnerabilities Summary
PHP-SecureArea < 2.7 - Multiple Vulnerabilities
# Exploit Title: PHP-SecureArea
Invoice Manager 3.1 – Cross-Site Request Forgery (Add Admin)
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
FineCMS 1.0 – Multiple Vulnerabilities
# # # # #
User Login and Management – Multiple Vulnerabilities
-----------------------------------------------------------------------------------
PHP Appointment Booking Script – Authentication Bypass
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
Car or Cab Booking Script – Authentication Bypass
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
Schools Alert Management Script – Authentication Bypass
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
Flash Poker 2.0 – ‘game’ SQL Injection
# # # # #
PHP Search Engine 1.0 – SQL Injection
# # # # #