WebHMI 4.1 – Stored Cross Site Scripting (XSS) (Authenticated)
# Exploit Title: WebHMI 4.1 - Stored Cross Site Scripting (XSS) (Authenticated)
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WebHMI 4.1.1 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: WebHMI 4.1.1 - Remote Code Execution (RCE) (Authenticated)
Student Record System 1.0 – ‘cid’ SQLi (Authenticated)
# Exploit Title: Student Record System 1.0 - 'cid' SQLi (Authenticated)
aaPanel 6.8.21 – Directory Traversal (Authenticated)
# Exploit Title: aaPanel 6.8.21 - Directory Traversal (Authenticated)
Air Cargo Management System v1.0 – SQLi
# Title: Air Cargo Management System v1.0 - SQLi
Simple Real Estate Portal System 1.0 – ‘id’ SQLi
# Exploit Title: Simple Real Estate Portal System 1.0 - 'id' SQL Injection
Dbltek GoIP – Local File Inclusion
# Exploit Title: Dbltek GoIP - Local File Inclusion
FileCloud 21.2 – Cross-Site Request Forgery (CSRF)
# Exploit Title: FileCloud 21.2 - Cross-Site Request Forgery (CSRF)
WordPress Plugin WP User Frontend 3.5.25 – SQLi (Authenticated)
# Exploit Title: WordPress Plugin WP User Frontend 3.5.25 - SQLi (Authenticated)
Thinfinity VirtualUI 2.5.26.2 – Information Disclosure
Exploit Title: Thinfinity VirtualUI 2.5.26.2 - Information Disclosure
Thinfinity VirtualUI 2.5.41.0 – IFRAME Injection
Exploit Title: Thinfinity VirtualUI 2.5.41.0 - IFRAME Injection
Cab Management System 1.0 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Cab Management System 1.0 - Remote Code Execution (RCE) (Authenticated)
Microweber 1.2.11 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Microweber 1.2.11 - Remote Code Execution (RCE) (Authenticated)
Cab Management System 1.0 – ‘id’ SQLi (Authenticated)
# Exploit Title: Cab Management System 1.0 - 'id' SQLi (Authenticated)
WordPress Plugin Perfect Survey – 1.5.1 – SQLi (Unauthenticated)
# Exploit Title: WordPress Plugin Perfect Survey - 1.5.1 - SQLi (Unauthenticated)
Fortinet Fortimail 7.0.1 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: Fortinet Fortimail 7.0.1 - Reflected Cross-Site Scripting (XSS)
Hotel Druid 3.0.3 – Remote Code Execution (RCE)
# Exploit Title: Hotel Druid 3.0.3 - Remote Code Execution (RCE)
WordPress Plugin dzs-zoomsounds 6.60 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: WordPress Plugin dzs-zoomsounds - Remote Code Execution (RCE) (Unauthenticated)
WordPress Plugin MasterStudy LMS 2.7.5 – Unauthenticated Admin Account Creation
# Title: WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation
WordPress Plugin Error Log Viewer 1.1.1 – Arbitrary File Clearing (Authenticated)
# Exploit Title: WordPress Plugin Error Log Viewer 1.1.1 - Arbitrary File Clearing (Authenticated)
Network Video Recorder NVR304-16EP – Reflected Cross-Site Scripting (XSS) (Unauthenticated)
# Exploit Title: Network Video Recorder NVR304-16EP - Reflected Cross-Site Scripting (XSS) (Unauthenticated)
ServiceNow – Username Enumeration
# Exploit Title: ServiceNow - Username Enumeration
Simple Student Quarterly Result/Grade System 1.0 – SQLi Authentication Bypass
# Exploit Title: Simple Student Quarterly Result/Grade System 1.0 - SQLi Authentication Bypass
Multi-Vendor Online Groceries Management System 1.0 – ‘id’ Blind SQL Injection
# Exploit Title: Multi-Vendor Online Groceries Management System 1.0 - 'id' Blind SQL Injection
Kyocera Command Center RX ECOSYS M2035dn – Directory Traversal File Disclosure (Unauthenticated)
# Exploit Title: Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)
Subrion CMS 4.2.1 – Cross Site Request Forgery (CSRF) (Add Amin)
# Exploit Title: Subrion CMS 4.2.1 - Cross Site Request Forgery (CSRF) (Add Amin)
Accounting Journal Management System 1.0 – ‘id’ SQLi (Authenticated)
# Exploit Title: Accounting Journal Management System 1.0 - 'id' SQLi (Authenticated)
WordPress Plugin Jetpack 9.1 – Cross Site Scripting (XSS)
# Exploit Title: WordPress Plugin Jetpack 9.1 - Cross Site Scripting (XSS)
WordPress Plugin Contact Form Builder 1.6.1 – Cross-Site Scripting (XSS)
# Exploit Title: Wordpress Plugin Contact Form Builder 1.6.1 - Cross-Site Scripting (XSS)
WordPress Plugin Secure Copy Content Protection and Content Locking 2.8.1 – SQL-Injection (Unauthenticated)
# Exploit Title: WordPress Plugin Secure Copy Content Protection and Content Locking 2.8.1 - SQL-Injection (Unauthent...
Home Owners Collection Management System 1.0 – ‘id’ Blind SQL Injection
# Exploit Title: Home Owners Collection Management System 1.0 - 'id' Blind SQL Injection
Home Owners Collection Management System 1.0 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Home Owners Collection Management System 1.0 - Remote Code Execution (RCE) (Authenticated)
Home Owners Collection Management System 1.0 – Account Takeover (Unauthenticated)
# Exploit Title: Home Owners Collection Management System 1.0 - Account Takeover (Unauthenticated)
Hospital Management Startup 1.0 – ‘Multiple’ SQLi
# Exploit Title: Hospital Management Startup 1.0 - 'loginid' SQLi
AtomCMS v2.0 – SQLi
# Exploit Title: AtomCMS v2.0 - SQLi
Exam Reviewer Management System 1.0 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Exam Reviewer Management System 1.0 - Remote Code Execution (RCE) (Authenticated)
Exam Reviewer Management System 1.0 – ‘id’ SQL Injection
# Exploit Title: Exam Reviewer Management System 1.0 - ‘id’ SQL Injection
WordPress Plugin CP Blocks 1.0.14 – Stored Cross Site Scripting (XSS)
# Exploit Title: WordPress Plugin CP Blocks 1.0.14 - Stored Cross Site Scripting (XSS)
WordPress Plugin Security Audit 1.0.0 – Stored Cross Site Scripting (XSS)
# Exploit Title: WordPress Plugin Security Audit 1.0.0 - Stored Cross Site Scripting (XSS)
WordPress Plugin Simple Job Board 2.9.3 – Local File Inclusion
# Exploit Title: Wordpress Plugin Simple Job Board 2.9.3 - Local File Inclusion
WordPress Plugin International Sms For Contact Form 7 Integration V1.2 – Cross Site Scripting (XSS)
# Exploit Title: WordPress Plugin International Sms For Contact Form 7 Integration V1.2 - Cross Site Scripting (XSS)
Hospital Management System 4.0 – ‘multiple’ SQL Injection
# Title: Hospital Management System 4.0 - 'multiple' SQL Injection
FileBrowser 2.17.2 – Cross Site Request Forgery (CSRF) to Remote Code Execution (RCE)
# Exploit Title: FileBrowser 2.17.2 - Cross Site Request Forgery (CSRF) to Remote Code Execution (RCE)
Hotel Reservation System 1.0 – SQLi (Unauthenticated)
# Exploit Title: Hotel Reservation System 1.0 - SQLi (Unauthenticated)
WordPress Plugin IP2Location Country Blocker 2.26.7 – Stored Cross Site Scripting (XSS) (Authenticated)
# Exploit Title: WordPress Plugin IP2Location Country Blocker 2.26.7 - Stored Cross Site Scripting (XSS) (Authenticated)
WBCE CMS 1.5.2 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: WBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated)