Montiorr 1.7.6m – Persistent Cross-Site Scripting
# Exploit Title: Montiorr 1.7.6m - Persistent Cross-Site Scripting
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Kimai 1.14 – CSV Injection
# Exploit Title: Kimai 1.14 - CSV Injection
SEO Panel 4.8.0 – ‘order_col’ Blind SQL Injection (2)
# Exploit Title: SEO Panel 4.8.0 - 'order_col' Blind SQL Injection (2)
OpenPLC 3 – Remote Code Execution (Authenticated)
# Exploit Title: OpenPLC 3 - Remote Code Execution (Authenticated)
Hasura GraphQL 1.3.3 – Remote Code Execution
# Exploit Title: Hasura GraphQL 1.3.3 - Remote Code Execution
Sipwise C5 NGCP CSC – Click2Dial Cross-Site Request Forgery (CSRF)
# Exploit Title: Sipwise C5 NGCP CSC - Click2Dial Cross-Site Request Forgery (CSRF)
Sipwise C5 NGCP CSC – ‘Multiple’ Persistent Cross-Site Scripting (XSS)
# Exploit Title: Sipwise C5 NGCP CSC - 'Multiple' Stored/Reflected Cross-Site Scripting (XSS)
DzzOffice 2.02.1 – ‘Multiple’ Cross-Site Scripting (XSS)
# Exploit Title: DzzOffice 2.02.1 - 'Multiple' Cross-Site Scripting (XSS)
GetSimple CMS My SMTP Contact Plugin 1.1.2 – Persistent Cross-Site Scripting
# Exploit Title: GetSimple CMS My SMTP Contact Plugin 1.1.2 - CSRF to Stored XSS to RCE
Moodle 3.10.3 – ‘url’ Persistent Cross Site Scripting
# Exploit Title: Moodle 3.10.3 - 'url' Persistent Cross Site Scripting
RemoteClinic 2.0 – ‘Multiple’ Stored Cross-Site Scripting (XSS)
# Exploit Title: RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
OTRS 6.0.1 – Remote Command Execution (2)
# Exploit Title: OTRS 6.0.1 - Remote Command Execution (2)
CMS Made Simple 2.2.15 – ‘title’ Cross-Site Scripting (XSS)
# Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)
Hasura GraphQL 1.3.3 – Service Side Request Forgery (SSRF)
# Exploit Title: Hasura GraphQL 1.3.3 - Service Side Request Forgery (SSRF)
Hasura GraphQL 1.3.3 – Local File Read
# Exploit Title: Hasura GraphQL 1.3.3 - Local File Read
Adtran Personal Phone Manager 10.8.1 – DNS Exfiltration
# Exploit Title: Adtran Personal Phone Manager 10.8.1 - DNS Exfiltration
Adtran Personal Phone Manager 10.8.1 – ‘Multiple’ Reflected Cross-Site Scripting (XSS)
# Exploit Title: Adtran Personal Phone Manager 10.8.1 - 'Multiple' Reflected Cross-Site Scripting (XSS)
Adtran Personal Phone Manager 10.8.1 – ’emailAddress’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Adtran Personal Phone Manager 10.8.1 - 'emailAddress' Stored Cross-Site Scripting (XSS)
OpenEMR 5.0.2.1 – Remote Code Execution
# Exploit Title: OpenEMR 5.0.2.1 - Remote Code Execution
rconfig 3.9.6 – Arbitrary File Upload
# Exploit Title: rconfig 3.9.6 - Arbitrary File Upload to Remote Code Execution (Authenticated) (2)
RemoteClinic 2 – ‘Multiple’ Cross-Site Scripting (XSS)
# Exploit Title: RemoteClinic 2 - 'Multiple' Cross-Site Scripting (XSS)
BlackCat CMS 1.3.6 – ‘Multiple’ Stored Cross-Site Scripting (XSS)
# Exploit Title: BlackCat CMS 1.3.6 - 'Multiple' Stored Cross-Site Scripting (XSS)
WordPress Plugin RSS for Yandex Turbo 1.29 – Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin RSS for Yandex Turbo 1.29 - Stored Cross-Site Scripting (XSS)
Fast PHP Chat 1.3 – ‘my_item_search’ SQL Injection
# Exploit Title: Fast PHP Chat 1.3 - 'my_item_search' SQL Injection
Multilaser Router RE018 AC1200 – Cross-Site Request Forgery (Enable Remote Access)
# Exploit Title: Multilaser Router RE018 AC1200 - Cross-Site Request Forgery (Enable Remote Access)
GetSimple CMS My SMTP Contact Plugin 1.1.1 – Cross-Site Request Forgery
# Exploit Title: GetSimple CMS My SMTP Contact Plugin 1.1.1 - CSRF to RCE
htmly 2.8.0 – ‘description’ Stored Cross-Site Scripting (XSS)
# Exploit Title: htmly 2.8.0 - 'description' Stored Cross-Site Scripting (XSS)
Tileserver-gl 3.0.0 – ‘key’ Reflected Cross-Site Scripting (XSS)
# Exploit Title: Tileserver-gl 3.0.0 - 'key' Reflected Cross-Site Scripting (XSS)
Horde Groupware Webmail 5.2.22 – Stored XSS
# Exploit Title: Horde Groupware Webmail 5.2.22 - Stored XSS
jQuery 1.0.3 – Cross-Site Scripting (XSS)
# Exploit Title: jQuery 1.0.3 - Cross-Site Scripting (XSS)
jQuery 1.2 – Cross-Site Scripting (XSS)
# Exploit Title: jQuery 1.2 - Cross-Site Scripting (XSS)
Genexis PLATINUM 4410 2.1 P4410-V2-1.28 – RCE
# Exploit Title: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE
CITSmart ITSM 9.1.2.27 – ‘query’ Time-based Blind SQL Injection (Authenticated)
# Exploit Title: CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection (Authenticated)
CITSmart ITSM 9.1.2.22 – LDAP Injection
# Exploit Title: CITSmart ITSM 9.1.2.22 - LDAP Injection
Digital Crime Report Management System 1.0 – SQL Injection (Authentication Bypass)
# Exploit Title: Digital Crime Report Management System 1.0 - SQL Injection (Authentication Bypass)
ExpressVPN VPN Router 1.0 – Router Login Panel’s Integer Overflow
# Exploit Title: ExpressVPN VPN Router 1.0 - Router Login Panel's Integer Overflow
Blitar Tourism 1.0 – Authentication Bypass SQLi
# Exploit Title: Blitar Tourism 1.0 - Authentication Bypass SQLi
Simple Student Information System 1.0 – SQL Injection (Authentication Bypass)
# Exploit Title: Simple Student Information System 1.0 - SQL Injection (Authentication Bypass)
PrestaShop 1.7.6.7 – ‘location’ Blind Sql Injection
# Exploit Title: PrestaShop 1.7.6.7 - 'location' Blind Sql Injection
Composr 10.0.36 – Remote Code Execution
# Exploit Title: Composr 10.0.36 - Remote Code Execution
DMA Radius Manager 4.4.0 – Cross-Site Request Forgery (CSRF)
# Exploit Title: DMA Radius Manager 4.4.0 - Cross-Site Request Forgery (CSRF)
CMSimple 5.2 – ‘External’ Stored XSS
# Exploit Title: CMSimple 5.2 - 'External' Stored XSS
Dell OpenManage Server Administrator 9.4.0.0 – Arbitrary File Read
# Exploit Title: Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read
Composr CMS 10.0.36 – Cross Site Scripting
# Exploit Title: Composr CMS 10.0.36 - Cross Site Scripting
Atlassian Jira Service Desk 4.9.1 – Unrestricted File Upload to XSS
# Exploit Title: Atlassian Jira Service Desk 4.9.1 - Unrestricted File Upload to XSS
Mini Mouse 9.3.0 – Local File inclusion
# Exploit Title: Mini Mouse 9.3.0 - Local File inclusion / Path Traversal
Mini Mouse 9.2.0 – Path Traversal
# Exploit Title: Mini Mouse 9.2.0 - Path Traversal
Mini Mouse 9.2.0 – Remote Code Execution
# Exploit Title: Mini Mouse 9.2.0 - Remote Code Execution
OpenEMR 4.1.0 – ‘u’ SQL Injection
# Exploit Title: OpenEMR 4.1.0 - 'u' SQL Injection