WordPress Plugin AAWP 3.16 – ‘tab’ Reflected Cross Site Scripting (XSS) (Authenticated)
# Exploit Title: WordPress Plugin AAWP 3.16 - 'tab' Reflected Cross Site Scripting (XSS) (Authenticated)
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Projeqtor v9.3.1 – Stored Cross Site Scripting (XSS)
# Exploit Title: Projeqtor v9.3.1 - Stored Cross Site Scripting (XSS)
openSIS Student Information System 8.0 – ‘multiple’ SQL Injection
# Exploit Title: openSIS Student Information System 8.0 - 'multiple' SQL Injection
Vodafone H-500-s 3.5.10 – WiFi Password Disclosure
# Exploit Title: Vodafone H-500-s 3.5.10 - WiFi Password Disclosure
Terramaster TOS 4.2.15 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: Terramaster TOS 4.2.15 - Remote Code Execution (RCE) (Unauthenticated)
Virtual Airlines Manager 2.6.2 – ‘multiple’ SQL Injection
# Exploit Title: Virtual Airlines Manager 2.6.2 - 'multiple' SQL Injection
BeyondTrust Remote Support 6.0 – Reflected Cross-Site Scripting (XSS) (Unauthenticated)
# Exploit Title: BeyondTrust Remote Support 6.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)
Hospitals Patient Records Management System 1.0 – Account TakeOver
# Exploit Title: Hospitals Patient Records Management System 1.0 - Account TakeOver
Hospitals Patient Records Management System 1.0 – ‘id’ SQL Injection (Authenticated)
# Exploit Title: Hospitalss Patient Records Management System 1.0 - 'id' SQL Injection (Authenticated)
Hostel Management System 2.1 – Cross Site Scripting (XSS)
# Exploit Title: Hostel Management System 2.1 - Cross Site Scripting (XSS)
Nettmp NNT 5.1 – SQLi Authentication Bypass
# Exploit Title: Nettmp NNT 5.1 - SQLi Authentication Bypass
SAFARI Montage 8.5 – Reflected Cross Site Scripting (XSS)
# Exploit Title: SAFARI Montage 8.5 - Reflected Cross Site Scripting (XSS)
Library System in PHP 1.0 – ‘publisher name’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Library System in PHP 1.0 - 'publisher name' Stored Cross-Site Scripting (XSS)
WordPress Plugin The True Ranker 2.2.2 – Arbitrary File Read (Unauthenticated)
# Exploit Title: WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read (Unauthenticated)
Online Admission System 1.0 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: Online Admission System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
Movie Rating System 1.0 – SQLi to RCE (Unauthenticated)
# Exploit Title: Movie Rating System 1.0 - SQLi to RCE (Unauthenticated)
Movie Rating System 1.0 – Broken Access Control (Admin Account Creation) (Unauthenticated)
# Exploit Title: Movie Rating System 1.0 - Broken Access Control (Admin Account Creation) (Unauthenticated)
WordPress Plugin WP Visitor Statistics 4.7 – SQL Injection
# Exploit Title: WordPress Plugin WP Visitor Statistics 4.7 - SQL Injection
WordPress Plugin Contact Form Entries 1.1.6 – Cross Site Scripting (XSS) (Unauthenticated)
# Exploit Title: WordPress Plugin Contact Form Entries 1.1.6 - Cross Site Scripting (XSS) (Unauthenticated)
RiteCMS 3.1.0 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: RiteCMS 3.1.0 - Remote Code Execution (RCE) (Authenticated)
RiteCMS 3.1.0 – Arbitrary File Deletion (Authenticated)
# Exploit Title: RiteCMS 3.1.0 - Arbitrary File Deletion (Authenticated)
RiteCMS 3.1.0 – Arbitrary File Overwrite (Authenticated)
# Exploit Title: RiteCMS 3.1.0 - Arbitrary File Overwrite (Authenticated)
CMSimple 5.4 – Cross Site Scripting (XSS)
# Exploit Title: CMSimple 5.4 - Cross Site Scripting (XSS)
Exponent CMS 2.6 – Multiple Vulnerabilities
# Exploit Title: Exponent CMS 2.6 - Multiple Vulnerabilities
phpKF CMS 3.00 Beta y6 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: phpKF CMS 3.00 Beta y6 - Remote Code Execution (RCE) (Unauthenticated)
WBCE CMS 1.5.1 – Admin Password Reset
# Exploit Title: WBCE CMS 1.5.1 - Admin Password Reset
Arunna 1.0.0 – ‘Multiple’ Cross-Site Request Forgery (CSRF)
# Exploit Title: Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery (CSRF)
Croogo 3.0.2 – ‘Multiple’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Croogo 3.0.2 - 'Multiple' Stored Cross-Site Scripting (XSS)
Croogo 3.0.2 – Unrestricted File Upload
# Exploit Title: Croogo 3.0.2 - Unrestricted File Upload
Cibele Thinfinity VirtualUI 2.5.41.0 – User Enumeration
# Exploit Title: Cibele Thinfinity VirtualUI 2.5.41.0 - User Enumeration
Online Thesis Archiving System 1.0 – SQLi Authentication Bypass
# Exploit Title: Online Thesis Archiving System 1.0 - SQLi Authentication Bypass
meterN v1.2.3 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: meterN v1.2.3 - Remote Code Execution (RCE) (Authenticated)
Zucchetti Axess CLOKI Access Control 1.64 – Cross Site Request Forgery (CSRF)
# Exploit Title: Zucchetti Axess CLOKI Access Control 1.64 - Cross Site Request Forgery (CSRF)
Booked Scheduler 2.7.5 – Remote Command Execution (RCE) (Authenticated)
# Exploit Title: Booked Scheduler 2.7.5 - Remote Command Execution (RCE) (Authenticated)
WordPress Plugin Typebot 1.4.3 – Stored Cross Site Scripting (XSS) (Authenticated)
# Exploit Title: WordPress Plugin Typebot 1.4.3 - Stored Cross Site Scripting (XSS) (Authenticated)
WebHMI 4.0 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: WebHMI 4.0 - Remote Code Execution (RCE) (Authenticated)
Free School Management Software 1.0 – Remote Code Execution (RCE)
# Exploit Title: Free School Management Software 1.0 - Remote Code Execution (RCE)
Free School Management Software 1.0 – ‘multiple’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Free School Management Software 1.0 - 'multiple' Stored Cross-Site Scripting (XSS)
OpenCATS 0.9.4 – Remote Code Execution (RCE)
# Exploit Title: OpenCATS 0.9.4 - Remote Code Execution (RCE)
Employees Daily Task Management System 1.0 – ‘multiple’ Cross Site Scripting (XSS)
# Exploit Title: Employees Daily Task Management System 1.0 - 'multiple' Cross Site Scripting (XSS)
Employees Daily Task Management System 1.0 – ‘username’ SQLi Authentication Bypass
# Exploit Title: Employees Daily Task Management System 1.0 - 'username' SQLi Authentication Bypass
Grafana 8.3.0 – Directory Traversal and Arbitrary File Read
# Exploit Title: Grafana 8.3.0 - Directory Traversal and Arbitrary File Read
WordPress Plugin Catch Themes Demo Import 1.6.1 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Wordpress Plugin Catch Themes Demo Import 1.6.1 - Remote Code Execution (RCE) (Authenticated)
Student Management System 1.0 – SQLi Authentication Bypass
# Exploit Title: Student Management System 1.0 - SQLi Authentication Bypass
TestLink 1.19 – Arbitrary File Download (Unauthenticated)
# Exploit Title: TestLink 1.19 - Arbitrary File Download (Unauthenticated)
LimeSurvey 5.2.4 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: LimeSurvey 5.2.4 - Remote Code Execution (RCE) (Authenticated)
Chikitsa Patient Management System 2.0.2 – ‘backup’ Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)
Chikitsa Patient Management System 2.0.2 – ‘plugin’ Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Chikitsa Patient Management System 2.0.2 - Remote Code Execution (RCE) (Authenticated)
Croogo 3.0.2 – Remote Code Execution (Authenticated)
# Exploit Title: Croogo 3.0.2 - Remote Code Execution (Authenticated)
WordPress Plugin DZS Zoomsounds 6.45 – Arbitrary File Read (Unauthenticated)
# Exploit Title: WordPress Plugin DZS Zoomsounds 6.45 - Arbitrary File Read (Unauthenticated)