Isshue Shopping Cart 3.5 – ‘Title’ Cross Site Scripting (XSS)
# Exploit Title: Isshue Shopping Cart 3.5 - 'Title' Cross Site Scripting (XSS)
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Mult-e-Cart Ultimate 2.4 – ‘id’ SQL Injection
# Exploit Title: Mult-e-Cart Ultimate 2.4 - 'id' SQL Injection
PHP Melody 3.0 – Persistent Cross-Site Scripting (XSS)
# Exploit Title: PHP Melody 3.0 - Persistent Cross-Site Scripting (XSS)
PHP Melody 3.0 – ‘vid’ SQL Injection
# Exploit Title: PHP Melody 3.0 - 'vid' SQL Injection
PHP Melody 3.0 – ‘Multiple’ Cross-Site Scripting (XSS)
# Exploit Title: PHP Melody 3.0 - 'Multiple' Cross-Site Scripting (XSS)
Sonicwall SonicOS 6.5.4 – ‘Common Name’ Cross-Site Scripting (XSS)
# Exploit Title: Sonicwall SonicOS 6.5.4 - 'Common Name' Cross-Site Scripting (XSS)
Simplephpscripts Simple CMS 2.1 – ‘Multiple’ SQL Injection
# Exploit Title: Simplephpscripts Simple CMS 2.1 - 'Multiple' SQL Injection
Simplephpscripts Simple CMS 2.1 – ‘Multiple’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Simplephpscripts Simple CMS 2.1 - 'Multiple' Stored Cross-Site Scripting (XSS)
OpenAM 13.0 – LDAP Injection
# Exploit Title: OpenAM 13.0 - LDAP Injection
WordPress Plugin Popup Anything 2.0.3 – ‘Multiple’ Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Popup Anything 2.0.3 - 'Multiple' Stored Cross-Site Scripting (XSS)
Eclipse Jetty 11.0.5 – Sensitive File Disclosure
# Exploit Title: Eclipse Jetty 11.0.5 - Sensitive File Disclosure
Fuel CMS 1.4.1 – Remote Code Execution (3)
# Exploit Title: Fuel CMS 1.4.1 - Remote Code Execution (3)
WordPress Plugin Hotel Listing 3 – ‘Multiple’ Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Hotel Listing 3 - 'Multiple' Cross-Site Scripting (XSS)
PHPJabbers Simple CMS 5 – ‘name’ Persistent Cross-Site Scripting (XSS)
# Exploit Title: PHPJabbers Simple CMS 5 - 'name' Persistent Cross-Site Scripting (XSS)
Codiad 2.8.4 – Remote Code Execution (Authenticated) (4)
# Exploit Title: Codiad 2.8.4 - Remote Code Execution (Authenticated) (4)
i3 International Annexxus Cameras Ax-n 5.2.0 – Application Logic Flaw
# Exploit Title: i3 International Annexxus Cameras Ax-n 5.2.0 - Application Logic Flaw
Employee Record Management System 1.2 – ’empid’ SQL injection (Unauthenticated)
# Title: Employee Record Management System 1.2 - 'empid' SQL injection (Unauthenticated)
Movable Type 7 r.5002 – XMLRPC API OS Command Injection (Metasploit)
class MetasploitModule < Msf::Exploit::Remote
WebCTRL OEM 6.5 – ‘locale’ Reflected Cross-Site Scripting (XSS)
# Exploit Title: WebCTRL OEM 6.5 - 'locale' Reflected Cross-Site Scripting (XSS)
Umbraco v8.14.1 – ‘baseUrl’ SSRF
# Exploit Title: Umbraco v8.14.1 - 'baseUrl' SSRF
PHPGurukul Hostel Management System 2.1 – Cross-site request forgery (CSRF) to Cross-site Scripting (XSS)
# Exploit Title: PHPGurukul Hostel Management System 2.1 - Cross-site request forgery (CSRF) to Cross-site Scripting ...
WordPress Plugin Supsystic Contact Form 1.7.18 – ‘label’ Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Supsystic Contact Form 1.7.18 - 'label' Stored Cross-Site Scripting (XSS)
WordPress Plugin Filterable Portfolio Gallery 1.0 – ‘title’ Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Filterable Portfolio Gallery 1.0 - 'title' Stored Cross-Site Scripting (XSS)
phpMyAdmin 4.8.1 – Remote Code Execution (RCE)
# Exploit Title: phpMyAdmin 4.8.1 - Remote Code Execution (RCE)
WordPress 4.9.6 – Arbitrary File Deletion (Authenticated) (2)
# Exploit Title: Wordpress 4.9.6 - Arbitrary File Deletion (Authenticated) (2)
WordPress Plugin Ninja Tables 4.1.7 – Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Ninja Tables 4.1.7 - Stored Cross-Site Scripting (XSS)
WordPress Plugin Media-Tags 3.2.0.2 – Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Media-Tags 3.2.0.2 - Stored Cross-Site Scripting (XSS)
Engineers Online Portal 1.0 – ‘id’ SQL Injection
# Exploit Title: Engineers Online Portal 1.0 - 'id' SQL Injection
Engineers Online Portal 1.0 – ‘multiple’ Authentication Bypass
# Exploit Title: Engineers Online Portal 1.0 - 'multiple' Authentication Bypass
Engineers Online Portal 1.0 – ‘multiple’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Engineers Online Portal 1.0 - 'multiple' Stored Cross-Site Scripting (XSS)
Online Event Booking and Reservation System 1.0 – ‘reason’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Online Event Booking and Reservation System 1.0 - 'reason' Stored Cross-Site Scripting (XSS)
Balbooa Joomla Forms Builder 2.0.6 – SQL Injection (Unauthenticated)
# Exploit Title: Balbooa Joomla Forms Builder 2.0.6 - SQL Injection (Unauthenticated)
Apache HTTP Server 2.4.50 – Remote Code Execution (RCE) (2)
# Exploit: Apache HTTP Server 2.4.50 - Remote Code Execution (RCE) (2)
Build Smart ERP 21.0817 – ‘eidValue’ SQL Injection (Unauthenticated)
# Exploit Title: Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Unauthenticated)
Engineers Online Portal 1.0 – File Upload Remote Code Execution (RCE)
# Exploit Title: Engineers Online Portal 1.0 - File Upload Remote Code Execution (RCE)
WordPress Plugin TaxoPress 3.0.7.1 – Stored Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: WordPress Plugin TaxoPress 3.0.7.1 - Stored Cross-Site Scripting (XSS) (Authenticated)
Hikvision Web Server Build 210702 – Command Injection
# Exploit Title: Hikvision Web Server Build 210702 - Command Injection
Online Course Registration 1.0 – Blind Boolean-Based SQL Injection (Authenticated)
# Exploit Title: Online Course Registration 1.0 - Blind Boolean-Based SQL Injection (Authenticated)
Clinic Management System 1.0 – SQL injection to Remote Code Execution
# Exploit Title: Clinic Management System 1.0 - SQL injection to Remote Code Execution
Jetty 9.4.37.v20210219 – Information Disclosure
# Exploit Title: Jetty 9.4.37.v20210219 - Information Disclosure
Easy Chat Server 3.1 – Directory Traversal and Arbitrary File Read
# Exploit Title: Easy Chat Server 3.1 - Directory Traversal and Arbitrary File Read
Small CRM 3.0 – ‘description’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Small CRM 3.0 - 'description' Stored Cross-Site Scripting (XSS)
Dolibarr ERP-CRM 14.0.2 – Stored Cross-Site Scripting (XSS) / Privilege Escalation
# Exploit Title: Dolibarr ERP-CRM 14.0.2 - Stored Cross-Site Scripting (XSS) / Privilege Escalation
SonicWall SMA 10.2.1.0-17sv – Password Reset
# Exploit Title: SonicWall SMA 10.2.1.0-17sv - Password Reset
Online Motorcycle (Bike) Rental System 1.0 – Blind Time-Based SQL Injection (Unauthenticated)
# Exploit Title: Online Motorcycle (Bike) Rental System 1.0 - Blind Time-Based SQL Injection (Unauthenticated)
myfactory FMS 7.1-911 – ‘Multiple’ Reflected Cross-Site Scripting (XSS)
# Exploit Title: myfactory FMS 7.1-911 - 'Multiple' Reflected Cross-Site Scripting (XSS)
WordPress Theme Enfold 4.8.3 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: WordPress Theme Enfold 4.8.3 - Reflected Cross-Site Scripting (XSS)
Plastic SCM 10.0.16.5622 – WebAdmin Server Access
# Exploit Title: Plastic SCM 10.0.16.5622 - WebAdmin Server Access