webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Point of Sale System 1.0 – Multiple Stored XSS

# Exploit Title: Point of Sale System 1.0 - Multiple Stored XSS

2020-12-21 Saeed Bala Ahmed webapps

Flexmonster Pivot Table & Charts 2.7.17 – ‘Remote JSON’ Reflected XSS

# Exploit Title: Flexmonster Pivot Table & Charts 2.7.17 - 'Remote JSON' Reflected XSS

2020-12-21 Marco Nappi webapps

Flexmonster Pivot Table & Charts 2.7.17 – ‘To remote CSV’ Reflected XSS

# Exploit Title: Flexmonster Pivot Table & Charts 2.7.17 - 'To remote CSV' Reflected XSS

2020-12-21 Marco Nappi webapps

Flexmonster Pivot Table & Charts 2.7.17 – ‘To OLAP’ Reflected XSS

# Exploit Title: Flexmonster Pivot Table & Charts 2.7.17 - 'To OLAP' Reflected XSS

2020-12-21 Marco Nappi webapps

Flexmonster Pivot Table & Charts 2.7.17 – ‘Remote Report’ Reflected XSS

# Exploit Title: Flexmonster Pivot Table & Charts 2.7.17 - 'Remote Report' Reflected XSS

2020-12-21 Marco Nappi webapps

SCO Openserver 5.0.7 – ‘outputform’ Command Injection

# Exploit Title: SCO Openserver 5.0.7 - 'outputform' Command Injection

2020-12-21 Ramikan webapps

SCO Openserver 5.0.7 – ‘section’ Reflected XSS

# Exploit Title: SCO Openserver 5.0.7 - 'section' Reflected XSS

2020-12-21 Ramikan webapps

Spiceworks 7.5 – HTTP Header Injection

# Exploit Title: Spiceworks 7.5 - HTTP Header Injection

2020-12-21 Ramikan webapps

Academy-LMS 4.3 – Stored XSS

# Exploit Title: Academy-LMS 4.3 - Stored XSS

2020-12-21 Vinicius Alves webapps

Spotweb 1.4.9 – ‘search’ SQL Injection

# Exploit Title: Spotweb 1.4.9 - 'search' SQL Injection

2020-12-21 BouSalman webapps

Queue Management System 4.0.0 – “Add User” Stored XSS

# Exploit Title: Queue Management System 4.0.0 - "Add User" Stored XSS

2020-12-21 Kislay Kumar webapps

Xeroneit Library Management System 3.1 – “Add Book Category ” Stored XSS

# Exploit Title: Xeroneit Library Management System 3.1 - "Add Book Category " Stored XSS

2020-12-18 Kislay Kumar webapps

SyncBreeze 10.0.28 – ‘login’ Denial of Service (Poc)

# Exploit Title: SyncBreeze 10.0.28 - 'login' Denial of Service (Poc)

2020-12-18 Ahmed Elkhressy webapps

Smart Hospital 3.1 – “Add Patient” Stored XSS

# Exploit Title: Smart Hospital 3.1 - "Add Patient" Stored XSS

2020-12-18 Kislay Kumar webapps

WordPress Plugin Duplicator 1.3.26 – Unauthenticated Arbitrary File Read (Metasploit)

##

2020-12-18 SunCSR Team webapps

Alumni Management System 1.0 – ‘id’ SQL Injection

# Exploit Title: Alumni Management System 1.0 - 'id' SQL Injection

2020-12-18 Aakash Madaan webapps

Alumni Management System 1.0 – “Course Form” Stored XSS

# Exploit Title: Alumni Management System 1.0 - "Course Form" Stored XSS

2020-12-18 Aakash Madaan webapps

Alumni Management System 1.0 – Unrestricted File Upload To RCE

# Exploit Title: Alumni Management System 1.0 - Unrestricted File Upload To RCE

2020-12-18 Aakash Madaan webapps

Point of Sale System 1.0 – Authentication Bypass

# Exploit Title: Point of Sale System 1.0 - Authentication Bypass

2020-12-18 Saeed Bala Ahmed webapps

Victor CMS 1.0 – Multiple SQL Injection (Authenticated)

# Exploit Title: Victor CMS 1.0 - Multiple SQL Injection (Authenticated)

2020-12-17 Furkan Göksel webapps

PHPJabbers Appointment Scheduler 2.3 – Reflected XSS (Cross-Site Scripting)

# Exploit Title: PHPJabbers Appointment Scheduler 2.3 - Reflected XSS (Cross-Site Scripting)

2020-12-17 Andrea Intilangelo webapps