WordPress Plugin Learnpress 4.1.4.1 – Arbitrary Image Renaming
# Exploit Title: WordPress Plugin Learnpress 4.1.4.1 - Arbitrary Image Renaming
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WordPress Plugin Post Grid 2.1.1 – Cross Site Scripting (XSS)
# Exploit Title: WordPress Plugin Post Grid 2.1.1 - Cross Site Scripting (XSS)
WordPress Plugin Product Slider for WooCommerce 1.13.21 – Cross Site Scripting (XSS)
# Exploit Title: WordPress Plugin Product Slider for WooCommerce 1.13.21 - Cross Site Scripting (XSS)
WordPress Plugin Contact Form Check Tester 1.0.2 – Broken Access Control
# Exploit Title: WordPress Plugin Contact Form Check Tester 1.0.2 - Broken Access Control
PHP Unit 4.8.28 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: PHP Unit 4.8.28 - Remote Code Execution (RCE) (Unauthenticated)
Huawei DG8045 Router 1.0 – Credential Disclosure
# Title: Huawei DG8045 Router 1.0 - Credential Disclosure
Moodle 3.11.4 – SQL Injection
# Exploit Title: Moodle 3.11.4 - SQL Injection
PHP Restaurants 1.0 – SQLi (Unauthenticated)
# Exploit Title: PHP Restaurants 1.0 - SQLi (Unauthenticated)
WordPress Plugin 404 to 301 2.0.2 – SQL-Injection (Authenticated)
# Exploit Title: Wordpress Plugin 404 to 301 2.0.2 - SQL-Injection (Authenticated)
WordPress Plugin Domain Check 1.0.16 – Reflected Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: WordPress Plugin Domain Check 1.0.16 - Reflected Cross-Site Scripting (XSS) (Authenticated)
WordPress Plugin Download Monitor WordPress V 4.4.4 – SQL Injection (Authenticated)
# Exploit Title: Wordpress Plugin Download Monitor WordPress V 4.4.4 - SQL Injection (Authenticated)
Chamilo LMS 1.11.14 – Account Takeover
# Exploit Title: Chamilo LMS 1.11.14 - Account Takeover
uBidAuction v2.0.1 – ‘Multiple’ Cross Site Scripting (XSS)
# Exploit Title: uBidAuction v2.0.1 - 'Multiple' Cross Site Scripting (XSS)
Ametys CMS v4.4.1 – Cross Site Scripting (XSS)
# Exploit Title: Ametys CMS v4.4.1 - Cross Site Scripting (XSS)
WordPress Plugin Modern Events Calendar V 6.1 – SQL Injection (Unauthenticated)
# Exploit Title: WordPress Plugin Modern Events Calendar V 6.1 - SQL Injection (Unauthenticated)
WordPress Plugin RegistrationMagic V 5.0.1.5 – SQL Injection (Authenticated)
# Exploit Title: WordPress Plugin RegistrationMagic V 5.0.1.5 - SQL Injection (Authenticated)
WordPress Plugin Mortgage Calculators WP 1.52 – Stored Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: WordPress Plugin Mortgage Calculators WP 1.52 - Stored Cross-Site Scripting (XSS) (Authenticated)
PHPIPAM 1.4.4 – SQLi (Authenticated)
# Exploit Title: PHPIPAM 1.4.4 - SQLi (Authenticated)
Online Project Time Management System 1.0 – Multiple Stored Cross Site Scripting (XSS) (Authenticated)
# Exploit Title: Online Project Time Management System 1.0 - Multiple Stored XSS (Authenticated)
Online Project Time Management System 1.0 – SQLi (Authenticated)
# Exploit Title: Online Project Time Management System 1.0 - SQLi (Authenticated)
Landa Driving School Management System 2.0.1 – Arbitrary File Upload
# Exploit Title: Landa Driving School Management System 2.0.1 - Arbitrary File Upload
Affiliate Pro 1.7 – ‘Multiple’ Cross Site Scripting (XSS)
# Exploit Title: Affiliate Pro 1.7 - 'Multiple' Cross Site Scripting (XSS)
Rocket LMS 1.1 – Persistent Cross Site Scripting (XSS)
# Exploit Title: Rocket LMS 1.1 - Persistent Cross Site Scripting (XSS)
uDoctorAppointment v2.1.1 – ‘Multiple’ Cross Site Scripting (XSS)
# Exploit Title: uDoctorAppointment v2.1.1 - 'Multiple' Cross Site Scripting (XSS)
Creston Web Interface 1.0.0.2159 – Credential Disclosure
# Exploit Title: Creston Web Interface 1.0.0.2159 - Credential Disclosure
Nyron 1.0 – SQLi (Unauthenticated)
# Exploit Title: Nyron 1.0 - SQLi (Unauthenticated)
Simple Chatbot Application 1.0 – ‘message’ Blind SQLi
# Exploit Title: Simple Chatbot Application 1.0 - 'message' Blind SQLi
Simple Chatbot Application 1.0 – Remote Code Execution (RCE)
# Exploit Title: Simple Chatbot Application 1.0 - Remote Code Execution (RCE)
OpenBMCS 2.4 – Information Disclosure
# Exploit Title: OpenBMCS 2.4 - Information Disclosure
OpenBMCS 2.4 – Server Side Request Forgery (SSRF) (Unauthenticated)
# Exploit Title: OpenBMCS 2.4 - Server Side Request Forgery (SSRF) (Unauthenticated)
OpenBMCS 2.4 – Create Admin / Remote Privilege Escalation
# Exploit Title: OpenBMCS 2.4 - Create Admin / Remote Privilege Escalation
OpenBMCS 2.4 – SQLi (Authenticated)
# Exploit Title: OpenBMCS 2.4 - SQLi (Authenticated)
OpenBMCS 2.4 – Cross Site Request Forgery (CSRF)
# Exploit Title: OpenBMCS 2.4 - Cross Site Request Forgery (CSRF)
Online Resort Management System 1.0 – SQLi (Authenticated)
# Exploit Title: Online Resort Management System 1.0 - SQLi (Authenticated)
WordPress Core 5.8.2 – ‘WP_Query’ SQL Injection
# Exploit Title: WordPress Core 5.8.2 - 'WP_Query' SQL Injection
Online Diagnostic Lab Management System 1.0 – SQL Injection (Unauthenticated)
#Exploit Title: Online Diagnostic Lab Management System 1.0 - SQL Injection (Unauthenticated)
Online Diagnostic Lab Management System 1.0 – Stored Cross Site Scripting (XSS)
#Exploit Title: Online Diagnostic Lab Management System 1.0 - Stored Cross Site Scripting (XSS)
Online Diagnostic Lab Management System 1.0 – Account Takeover (Unauthenticated)
#Exploit Title: Online Diagnostic Lab Management System 1.0 - Account Takeover (Unauthenticated)
SalonERP 3.0.1 – ‘sql’ SQL Injection (Authenticated)
# Exploit Title: SalonERP 3.0.1 - 'sql' SQL Injection (Authenticated)
Hospitals Patient Records Management System 1.0 – ‘doctors’ Stored Cross Site Scripting (XSS)
# Exploit Title: Hospitals Patient Records Management System 1.0 - 'doctors' Stored Cross Site Scripting (XSS)
Hospitals Patient Records Management System 1.0 – ‘room_list’ Stored Cross Site Scripting (XSS)
# Exploit Title: Hospitals Patient Records Management System 1.0 - 'room_list' Stored Cross Site Scripting (XSS)
Hospitals Patient Records Management System 1.0 – ‘room_types’ Stored Cross Site Scripting (XSS)
# Exploit Title: Hospitals Patient Records Management System 1.0 - 'room_types' Stored Cross Site Scripting (XSS)
WordPress Plugin Frontend Uploader 1.3.2 – Stored Cross Site Scripting (XSS) (Unauthenticated)
# Exploit Title: WordPress Plugin Frontend Uploader 1.3.2 - Stored Cross Site Scripting (XSS) (Unauthenticated)
Open-AudIT Community 4.2.0 – Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: Open-AudIT Community 4.2.0 - Cross-Site Scripting (XSS) (Authenticated)
Online Railway Reservation System 1.0 – ‘Multiple’ Stored Cross Site Scripting (XSS) (Unauthenticated)
#Exploit Title: Online Railway Reservation System 1.0 - 'Multiple' Stored Cross Site Scripting (XSS) (Unauthenticated)
Online Railway Reservation System 1.0 – Admin Account Creation (Unauthenticated)
#Exploit Title: Online Railway Reservation System 1.0 - Admin Account Creation (Unauthenticated)
Online Railway Reservation System 1.0 – Remote Code Execution (RCE) (Unauthenticated)
#Exploit Title: Online Railway Reservation System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
Online Railway Reservation System 1.0 – ‘id’ SQL Injection (Unauthenticated)
# Exploit Title: Online Railway Reservation System 1.0 - 'id' SQL Injection (Unauthenticated)
HTTP Commander 3.1.9 – Stored Cross Site Scripting (XSS)
# Exploit Title: HTTP Commander 3.1.9 - Stored Cross Site Scripting (XSS)
Online Veterinary Appointment System 1.0 – ‘Multiple’ SQL Injection
# Exploit Title: Online Veterinary Appointment System 1.0 - 'Multiple' SQL Injection