Joomla JLex Review 6.0.1 – Reflected XSS
# Exploit Title: Joomla JLex Review 6.0.1 - Reflected XSS
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WordPress Plugin Ninja Forms 3.6.25 – Reflected XSS
# Exploit Title: WordPress Plugin Ninja Forms 3.6.25 - Reflected XSS (Authenticated)
Adiscon LogAnalyzer v.4.1.13 – Cross Site Scripting
# Exploit Title: Adiscon LogAnalyzer v.4.1.13 - Cross Site Scripting
Joomla iProperty Real Estate 4.1.1 – Reflected XSS
# Exploit Title: Joomla iProperty Real Estate 4.1.1 - Reflected XSS
Uvdesk v1.1.3 – File Upload Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Uvdesk v1.1.3 - File Upload Remote Code Execution (RCE) (Authenticated)
Joomla Solidres 2.13.3 – Reflected XSS
# Exploit Title: Joomla Solidres 2.13.3 - Reflected XSS
copyparty 1.8.2 – Directory Traversal
# Exploit Title: copyparty 1.8.2 - Directory Traversal
copyparty v1.8.6 – Reflected Cross Site Scripting (XSS)
# Exploit Title: copyparty v1.8.6 - Reflected Cross Site Scripting (XSS)
WordPress Plugin AN_Gradebook 5.0.1 – SQLi
#!/usr/bin/python3
Joomla VirtueMart Shopping Cart 4.0.12 – Reflected XSS
# Exploit Title: Joomla VirtueMart Shopping-Cart 4.0.12 - Reflected XSS
October CMS v3.4.4 – Stored Cross-Site Scripting (XSS) (Authenticated)
#Exploit Title: October CMS v3.4.4 - Stored Cross-Site Scripting (XSS) (Authenticated)
Joomla HikaShop 4.7.4 – Reflected XSS
# Exploit Title: Joomla HikaShop 4.7.4 - Reflected XSS
mooDating 1.2 – Reflected Cross-site scripting (XSS)
# Exploit Title: mooDating 1.2 - Reflected Cross-site scripting (XSS)
Perch v3.2 – Persistent Cross Site Scripting (XSS)
# Exploit Title: Perch v3.2 - Persistent Cross Site Scripting (XSS)
Availability Booking Calendar v1.0 – Multiple Cross-site scripting (XSS)
# Exploit Title: Availability Booking Calendar v1.0 - Multiple Cross-site scripting (XSS)
Zomplog 3.9 – Cross-site scripting (XSS)
Exploit Title: Zomplog 3.9 - Cross-site scripting (XSS)
zomplog 3.9 – Remote Code Execution (RCE)
#Exploit Title: zomplog 3.9 - Remote Code Execution (RCE)
RosarioSIS 10.8.4 – CSV Injection
# Exploit Title: RosarioSIS 10.8.4 - CSV Injection
Perch v3.2 – Stored XSS
Exploit Title: Perch v3.2 - Stored XSS
Perch v3.2 – Remote Code Execution (RCE)
Exploit Title: Perch v3.2 - Remote Code Execution (RCE)
RWS WorldServer 11.7.3 – Session Token Enumeration
Exploit Title: RWS WorldServer 11.7.3 - Session Token Enumeration
PaulPrinting CMS – Multiple Cross Site Web Vulnerabilities
Exploit Title: PaulPrinting CMS - Multiple Cross Site Web Vulnerabilities
Aures Booking & POS Terminal – Local Privilege Escalation
Exploit Title: Aures Booking & POS Terminal - Local Privilege Escalation
Webile v1.0.1 – Multiple Cross Site Scripting
Exploit Title: Webile v1.0.1 - Multiple Cross Site Scripting
Dooblou WiFi File Explorer 1.13.3 – Multiple Vulnerabilities
#Exploit Title: Dooblou WiFi File Explorer 1.13.3 - Multiple Vulnerabilities
PaulPrinting CMS – (Search Delivery) Cross Site Scripting
Exploit Title: PaulPrinting CMS - (Search Delivery) Cross Site Scripting
Active Super Shop CMS v2.5 – HTML Injection Vulnerabilities
# Exploit Title: Active Super Shop CMS v2.5 - HTML Injection Vulnerabilities
Boom CMS v8.0.7 – Cross Site Scripting
# Exploit Title: Boom CMS v8.0.7 - Cross Site Scripting
Wifi Soft Unibox Administration 3.0 & 3.1 – SQL Injection
# Exploit Title: Wifi Soft Unibox Administration 3.0 & 3.1 Login Page - Sql Injection
pfSense v2.7.0 – OS Command Injection
# Exploit Title: pfSense v2.7.0 - OS Command Injection
TP-Link TL-WR740N – Authenticated Directory Transversal
# Exploit Title: TP-Link TL-WR740N - Authenticated Directory Transversal
Blackcat Cms v1.4 – Remote Code Execution (RCE)
Exploit Title: Blackcat Cms v1.4 - Remote Code Execution (RCE)
Blackcat Cms v1.4 – Stored XSS
Exploit Title: Blackcat Cms v1.4 - Stored XSS
ABB FlowX v4.00 – Exposure of Sensitive Information
# Exploit Title: ABB FlowX v4.00 - Exposure of Sensitive Information
Statamic 4.7.0 – File-Inclusion
## Title: Statamic 4.7.0 - File-Inclusion
CmsMadeSimple v2.2.17 – Stored Cross-Site Scripting (XSS)
#Exploit Title: CmsMadeSimple v2.2.17 - Stored Cross-Site Scripting (XSS)
CmsMadeSimple v2.2.17 – Remote Code Execution (RCE)
#Exploit Title: CmsMadeSimple v2.2.17 - Remote Code Execution (RCE)
CmsMadeSimple v2.2.17 – session hijacking via Server-Side Template Injection (SSTI)
#Exploit Title: CmsMadeSimple v2.2.17 - session hijacking via Server-Side Template Injection (SSTI)
Backdrop Cms v1.25.1 – Stored Cross-Site Scripting (XSS)
#Exploit Title: Backdrop Cms v1.25.1 - Stored Cross-Site Scripting (XSS)
Vaidya-Mitra 1.0 – Multiple SQLi
## Title: Vaidya-Mitra 1.0 - Multiple SQLi
Joomla! com_booking component 2.4.9 – Information Leak (Account enumeration)
# Exploit Title: Joomla! com_booking component 2.4.9 - Information Leak (Account enumeration)
phpfm v1.7.9 – Authentication type juggling
# Exploit Title: phpfm v1.7.9 - Authentication type juggling
PimpMyLog v1.7.14 – Improper access control
# Exploit Title: PimpMyLog v1.7.14 - Improper access control
Pluck v4.7.18 – Remote Code Execution (RCE)
#Exploit Title: Pluck v4.7.18 - Remote Code Execution (RCE)
WinterCMS < 1.2.3 - Persistent Cross-Site Scripting
# Exploit Title: WinterCMS < 1.2.3 - Persistent Cross-Site Scripting
Admidio v4.2.10 – Remote Code Execution (RCE)
Exploit Title: Admidio v4.2.10 - Remote Code Execution (RCE)
Cisco UCS-IMC Supervisor 2.2.0.0 – Authentication Bypass
[+] Exploit Title: Cisco UCS-IMC Supervisor 2.2.0.0 - Authentication Bypass
ProjeQtOr Project Management System v10.4.1 – Multiple XSS
Exploit Title: ProjeQtOr Project Management System V10.4.1 - Multiple XSS
News Portal v4.0 – SQL Injection (Unauthorized)
# Exploit Title: News Portal v4.0 - SQL Injection (Unauthorized)