Company’s Recruitment Management System 1.0 – ‘Add New user’ Cross-Site Request Forgery (CSRF)
# Exploit Title: Company's Recruitment Management System 1.0 - 'Add New user' Cross-Site Request Forgery (CSRF)
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Company’s Recruitment Management System 1.0 – ‘description’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Company's Recruitment Management System 1.0 - 'description' Stored Cross-Site Scripting (XSS)
Mitsubishi Electric & INEA SmartRTU – Reflected Cross-Site Scripting (XSS)
# Exploit Title: Mitsubishi Electric & INEA SmartRTU - Reflected Cross-Site Scripting (XSS)
Mitsubishi Electric & INEA SmartRTU – Source Code Disclosure
# Exploit Title: Mitsubishi Electric & INEA SmartRTU - Source Code Disclosure
Company’s Recruitment Management System 1.0. – ‘title’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Company's Recruitment Management System 1.0. - 'title' Stored Cross-Site Scripting (XSS)
WordPress Plugin Duplicator 1.3.26 – Unauthenticated Arbitrary File Read
# Exploit Title: Wordpress Plugin Duplicator 1.3.26 - Unauthenticated Arbitrary File Read
Support Board 3.3.4 – ‘Message’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Support Board 3.3.4 - 'Message' Stored Cross-Site Scripting (XSS)
i-Panel Administration System 2.0 – Reflected Cross-site Scripting (XSS)
# Exploit Title: i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS)
TextPattern CMS 4.8.7 – Remote Command Execution (RCE) (Authenticated)
# Exploit Title: TextPattern CMS 4.8.7 - Remote Command Execution (RCE) (Authenticated)
Sonicwall SonicOS 7.0 – Host Header Injection
# Exploit Title: Sonicwall SonicOS 7.0 - Host Header Injection
Logitech Media Server 8.2.0 – ‘Title’ Cross-Site Scripting (XSS)
# Exploit Title: Logitech Media Server 8.2.0 - 'Title' Cross-Site Scripting (XSS)
Student Quarterly Grading System 1.0 – ‘grade’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Student Quarterly Grading System 1.0 - 'grade' Stored Cross-Site Scripting (XSS)
Simple Issue Tracker System 1.0 – SQLi Authentication Bypass
# Exploit Title: Simple Issue Tracker System 1.0 - SQLi Authentication Bypass
Online Learning System 2.0 – ‘Multiple’ SQLi Authentication Bypass
# Exploit Title: Online Learning System 2.0 - 'Multiple' SQLi Authentication Bypass
Pharmacy Point of Sale System 1.0 – ‘Add New User’ Cross-Site Request Forgery (CSRF)
# Exploit Title: Pharmacy Point of Sale System 1.0 - 'Add New User' Cross-Site Request Forgery (CSRF)
Apache HTTP Server 2.4.50 – Path Traversal & Remote Code Execution (RCE)
# Exploit: Apache HTTP Server 2.4.50 - Path Traversal & Remote Code Execution (RCE)
Keycloak 12.0.1 – ‘request_uri ‘ Blind Server-Side Request Forgery (SSRF) (Unauthenticated)
# Exploit Title: Keycloak 12.0.1 - 'request_uri ' Blind Server-Side Request Forgery (SSRF) (Unauthenticated)
Company’s Recruitment Management System 1.0 – ‘Multiple’ SQL Injection (Unauthenticated)
# Title: Company's Recruitment Management System 1.0 - 'Multiple' SQL Injection (Unauthenticated)
Simple Payroll System 1.0 – SQLi Authentication Bypass
# Exploit Title: Simple Payroll System 1.0 - SQLi Authentication Bypass
Loan Management System 1.0 – SQLi Authentication Bypass
# Exploit Title: Loan Management System 1.0 - SQLi Authentication Bypass
Online Employees Work From Home Attendance System 1.0 – SQLi Authentication Bypass
# Exploit Title: Online Employees Work From Home Attendance System 1.0 - SQLi Authentication Bypass
Online Enrollment Management System 1.0 – Authentication Bypass
# Exploit Title: Online Enrollment Management System 1.0 - Authentication Bypass
Simple Online College Entrance Exam System 1.0 – ‘Multiple’ SQL injection
# Exploit Title: Simple Online College Entrance Exam System 1.0 - 'Multiple' SQL injection
Simple Online College Entrance Exam System 1.0 – Account Takeover
# Exploit Title: Simple Online College Entrance Exam System 1.0 - Account Takeover
Simple Online College Entrance Exam System 1.0 – Unauthenticated Admin Creation
# Exploit Title: Simple Online College Entrance Exam System 1.0 - Unauthenticated Admin Creation
WordPress Plugin Pie Register 3.7.1.4 – Admin Privilege Escalation (Unauthenticated)
# Exploit Title: WordPress Plugin Pie Register 3.7.1.4 - Admin Privilege Escalation (Unauthenticated)
Maian-Cart 3.8 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit title: Maian-Cart 3.8 - Remote Code Execution (RCE) (Unauthenticated)
django-unicorn 0.35.3 – Stored Cross-Site Scripting (XSS)
# Exploit Title: django-unicorn 0.35.3 - Stored Cross-Site Scripting (XSS)
Online Traffic Offense Management System 1.0 – Privilage escalation (Unauthenticated)
# Exploit Title: Online Traffic Offense Management System 1.0 - Privilage escalation (Unauthenticated)
IFSC Code Finder Project 1.0 – SQL injection (Unauthenticated)
# Title: IFSC Code Finder Project 1.0 - SQL injection (Unauthenticated)
Simple Online College Entrance Exam System 1.0 – SQLi Authentication Bypass
# Exploit Title: Simple Online College Entrance Exam System 1.0 - SQLi Authentication Bypass
Online Traffic Offense Management System 1.0 – Multiple RCE (Unauthenticated)
# Exploit Title: Online Traffic Offense Management System 1.0 - Multiple RCE (Unauthenticated)
Online Traffic Offense Management System 1.0 – Multiple XSS (Unauthenticated)
# Exploit Title: Online Traffic Offense Management System 1.0 - Multiple XSS (Unauthenticated)
Online Traffic Offense Management System 1.0 – Multiple SQL Injection (Unauthenticated)
# Exploit Title: Online Traffic Offense Management System 1.0 - Multiple SQL Injection (Unauthenticated)
Online DJ Booking Management System 1.0 – ‘Multiple’ Blind Cross-Site Scripting
# Exploit Title: Online DJ Booking Management System 1.0 - 'Multiple' Blind Cross-Site Scripting
Apache HTTP Server 2.4.49 – Path Traversal & Remote Code Execution (RCE)
# Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution (RCE)
WordPress Plugin BulletProof Security 5.1 – Sensitive Information Disclosure
# Exploit Title: Wordpress Plugin BulletProof Security 5.1 - Sensitive Information Disclosure
Odine Solutions GateKeeper 1.0 – ‘trafficCycle’ SQL Injection
# Exploit Title: Odine Solutions GateKeeper 1.0 - 'trafficCycle' SQL Injection
Atlassian Jira Server Data Center 8.16.0 – Arbitrary File Read
# Exploit Title: Atlassian Jira Server Data Center 8.16.0 - Arbitrary File Read
WordPress Plugin MStore API 2.0.6 – Arbitrary File Upload
# Exploit Title: Wordpress Plugin MStore API 2.0.6 - Arbitrary File Upload
WordPress Plugin TheCartPress 1.5.3.6 – Privilege Escalation (Unauthenticated)
# Exploit Title: Wordpress Plugin TheCartPress 1.5.3.6 - Privilege Escalation (Unauthenticated)
Atlassian Confluence 7.12.2 – Pre-Authorization Arbitrary File Read
# Exploit Title: Atlassian Confluence 7.12.2 - Pre-Authorization Arbitrary File Read
Student Quarterly Grading System 1.0 – SQLi Authentication Bypass
# Exploit Title: Student Quarterly Grading System 1.0 - SQLi Authentication Bypass
Young Entrepreneur E-Negosyo System 1.0 – ‘PRODESC’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Young Entrepreneur E-Negosyo System 1.0 - 'PRODESC' Stored Cross-Site Scripting (XSS)
Young Entrepreneur E-Negosyo System 1.0 – SQL Injection Authentication Bypass
# Exploit Title: Young Entrepreneur E-Negosyo System 1.0 - SQL Injection Authentication Bypass
Open Game Panel – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Open Game Panel - Remote Code Execution (RCE) (Authenticated)
Lodging Reservation Management System 1.0 – Authentication Bypass
# Exploit Title: Lodging Reservation Management System 1.0 - Authentication Bypass
Payara Micro Community 5.2021.6 – Directory Traversal
# Exploit Title: Payara Micro Community 5.2021.6 - Directory Traversal
Directory Management System 1.0 – SQL Injection Authentication Bypass
# Exploit Title: Directory Management System 1.0 - SQL Injection Authentication Bypass
CMSimple_XH 1.7.4 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: CMSimple_XH 1.7.4 - Remote Code Execution (RCE) (Authenticated)