Perch v3.2 – Stored XSS
Exploit Title: Perch v3.2 - Stored XSS
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Perch v3.2 – Remote Code Execution (RCE)
Exploit Title: Perch v3.2 - Remote Code Execution (RCE)
PaulPrinting CMS – Multiple Cross Site Web Vulnerabilities
Exploit Title: PaulPrinting CMS - Multiple Cross Site Web Vulnerabilities
Aures Booking & POS Terminal – Local Privilege Escalation
Exploit Title: Aures Booking & POS Terminal - Local Privilege Escalation
Webile v1.0.1 – Multiple Cross Site Scripting
Exploit Title: Webile v1.0.1 - Multiple Cross Site Scripting
Dooblou WiFi File Explorer 1.13.3 – Multiple Vulnerabilities
#Exploit Title: Dooblou WiFi File Explorer 1.13.3 - Multiple Vulnerabilities
PaulPrinting CMS – (Search Delivery) Cross Site Scripting
Exploit Title: PaulPrinting CMS - (Search Delivery) Cross Site Scripting
Active Super Shop CMS v2.5 – HTML Injection Vulnerabilities
# Exploit Title: Active Super Shop CMS v2.5 - HTML Injection Vulnerabilities
Boom CMS v8.0.7 – Cross Site Scripting
# Exploit Title: Boom CMS v8.0.7 - Cross Site Scripting
Wifi Soft Unibox Administration 3.0 & 3.1 – SQL Injection
# Exploit Title: Wifi Soft Unibox Administration 3.0 & 3.1 Login Page - Sql Injection
pfSense v2.7.0 – OS Command Injection
# Exploit Title: pfSense v2.7.0 - OS Command Injection
Blackcat Cms v1.4 – Remote Code Execution (RCE)
Exploit Title: Blackcat Cms v1.4 - Remote Code Execution (RCE)
Blackcat Cms v1.4 – Stored XSS
Exploit Title: Blackcat Cms v1.4 - Stored XSS
Statamic 4.7.0 – File-Inclusion
## Title: Statamic 4.7.0 - File-Inclusion
CmsMadeSimple v2.2.17 – Stored Cross-Site Scripting (XSS)
#Exploit Title: CmsMadeSimple v2.2.17 - Stored Cross-Site Scripting (XSS)
CmsMadeSimple v2.2.17 – Remote Code Execution (RCE)
#Exploit Title: CmsMadeSimple v2.2.17 - Remote Code Execution (RCE)
CmsMadeSimple v2.2.17 – session hijacking via Server-Side Template Injection (SSTI)
#Exploit Title: CmsMadeSimple v2.2.17 - session hijacking via Server-Side Template Injection (SSTI)
Backdrop Cms v1.25.1 – Stored Cross-Site Scripting (XSS)
#Exploit Title: Backdrop Cms v1.25.1 - Stored Cross-Site Scripting (XSS)
Vaidya-Mitra 1.0 – Multiple SQLi
## Title: Vaidya-Mitra 1.0 - Multiple SQLi
Joomla! com_booking component 2.4.9 – Information Leak (Account enumeration)
# Exploit Title: Joomla! com_booking component 2.4.9 - Information Leak (Account enumeration)
phpfm v1.7.9 – Authentication type juggling
# Exploit Title: phpfm v1.7.9 - Authentication type juggling
PimpMyLog v1.7.14 – Improper access control
# Exploit Title: PimpMyLog v1.7.14 - Improper access control
Pluck v4.7.18 – Remote Code Execution (RCE)
#Exploit Title: Pluck v4.7.18 - Remote Code Execution (RCE)
WinterCMS < 1.2.3 - Persistent Cross-Site Scripting
# Exploit Title: WinterCMS < 1.2.3 - Persistent Cross-Site Scripting
Admidio v4.2.10 – Remote Code Execution (RCE)
Exploit Title: Admidio v4.2.10 - Remote Code Execution (RCE)
ProjeQtOr Project Management System v10.4.1 – Multiple XSS
Exploit Title: ProjeQtOr Project Management System V10.4.1 - Multiple XSS
News Portal v4.0 – SQL Injection (Unauthorized)
# Exploit Title: News Portal v4.0 - SQL Injection (Unauthorized)
Icinga Web 2.10 – Authenticated Remote Code Execution
#!/usr/bin/env python3
BuildaGate5library v5 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: BuildaGate5library v5 - Reflected Cross-Site Scripting (XSS)
Faculty Evaluation System v1.0 – SQL Injection
# Exploit Title: Faculty Evaluation System v1.0 - SQL Injection
Piwigo v13.7.0 – Stored Cross-Site Scripting (XSS) (Authenticated)
#Exploit Title: Piwigo v13.7.0 - Stored Cross-Site Scripting (XSS) (Authenticated)
Lost and Found Information System v1.0 – SQL Injection
# Exploit Title: Lost and Found Information System v1.0 - SQL Injection
Gila CMS 1.10.9 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Gila CMS 1.10.9 - Remote Code Execution (RCE) (Authenticated)
Beauty Salon Management System v1.0 – SQLi
# Exploit Title: Beauty Salon Management System v1.0 - SQLi
Car Rental Script 1.8 – Stored Cross-site scripting (XSS)
# Exploit Title: Car Rental Script 1.8 - Stored Cross-site scripting (XSS)
WBCE CMS 1.6.1 – Open Redirect & CSRF
Exploit Title: WBCE CMS 1.6.1 - Open Redirect & CSRF
PodcastGenerator 3.2.9 – Blind SSRF via XML Injection
#Exploit Title: PodcastGenerator 3.2.9 - Blind SSRF via XML Injection
Prestashop 8.0.4 – Cross-Site Scripting (XSS)
Exploit Title: Prestashop 8.0.4 - Cross-Site Scripting (XSS)
Vacation Rental 1.8 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Vacation Rental 1.8 - Stored Cross-Site Scripting (XSS)
WP AutoComplete 1.0.4 – Unauthenticated SQLi
# Exploit Title: WP AutoComplete 1.0.4 - Unauthenticated SQLi
GZ Forum Script 1.8 – Stored Cross-Site Scripting (XSS)
# Exploit Title: GZ Forum Script 1.8 - Stored Cross-Site Scripting (XSS)
Time Slot Booking Calendar 1.8 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Time Slot Booking Calendar 1.8 - Stored XSS
spip v4.1.10 – Spoofing Admin account
## Exploit Title: spip v4.1.10 - Spoofing Admin account
WebsiteBaker v2.13.3 – Directory Traversal
Exploit Title: WebsiteBaker v2.13.3 - Directory Traversal
WebsiteBaker v2.13.3 – Stored XSS
Exploit Title: WebsiteBaker v2.13.3 - Stored XSS
POS Codekop v2.0 – Authenticated Remote Code Execution (RCE)
# Exploit Title: POS Codekop v2.0 - Authenticated Remote Code Execution (RCE)
Sales of Cashier Goods v1.0 – Cross Site Scripting (XSS)
# Exploit Title: Sales of Cashier Goods v1.0 - Cross Site Scripting (XSS)
Rukovoditel 3.4.1 – Multiple Stored XSS
Exploit Title: Rukovoditel 3.4.1 - Multiple Stored XSS
Xenforo Version 2.2.13 – Authenticated Stored XSS
# Exploit Title: Xenforo Version 2.2.13 - Authenticated Stored XSS