webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
CMS Auditor Website 1.0 – SQL Injection
# # # # #
FS Quibids Clone 1.0 – SQL Injection
# # # # #
OpenEMR 5.0.0 – OS Command Injection / Cross-Site Scripting
SEC Consult Vulnerability Lab Security Advisory < 20171130-1 >
FS Facebook Clone – ‘token’ SQL Injection
# Exploit Title: FS Facebook Clone - 'token' SQL Injection
FS IMDB Clone – ‘id’ SQL Injection
# Exploit Title: FS IMDB Clone - 'id' SQL Injection
FS Shaadi Clone – ‘token’ SQL Injection
# Exploit Title: FS Shaadi Clone - SQL Injection
WinduCMS 3.1 – Local File Disclosure
#!/usr/bin/python
FS Makemytrip Clone – ‘id’ SQL Injection
# Exploit Title: FS Makemytrip Clone - SQL Injection
Perspective ICM Investigation & Case 5.1.1.16 – Privilege Escalation
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # ## # # # # # # # # # # ...
Artica Web Proxy 3.06 – Remote Code Execution
[+] Credits: John Page (aka Hyp3rlinX)
MistServer 2.12 – Cross-Site Scripting
[+] Credits: John Page (aka Hyp3rlinX)
Jobs2Careers / Coroflot Clone – SQL Injection
# Exploit Title: Jobs2Careers / Coroflot Clone - SQL Injection
WordPress Plugin WooCommerce 2.0/3.0 – Directory Traversal
# Exploit Title: WordPress woocommerce directory traversal
ZTE ZXDSL 831CII – Improper Access Restrictions
# Exploit Title: ZTE ZXDSL 831 Unauthorized Configuration Access
DblTek – Multiple Vulnerabilities
## Vulnerabilities summary
Icon Time Systems RTC-1000 Firmware 2.5.7458 – Cross-Site Scripting
# Exploit Title: Icon Time Systems RTC-1000 (
Zeta Components Mail 1.8.1 – Remote Code Execution
Vendor: Zeta Components
Vonage VDV23 – Cross-Site Scripting
# Exploit Title: Vonage Home Router – Stored Xss
LanSweeper 6.0.100.75 – Cross-Site Scripting
LanSweeper - Cross Site Scripting and HTMLi
TP-Link TL-WR740N – Cross-Site Scripting
# Exploit Title: XSS Vuln - TP-LINK TL-WR740N
CommuniGatePro 6.1.16 – Cross-Site Scripting
# Exploit Title: CommuniGatePro webmails Multiple Stored XSS
Kirby CMS < 2.5.7 - Cross-Site Scripting
# Exploit Title: KirbyCMS