webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

WordPress Plugin Wp-FileManager 6.8 – RCE

# Exploit Title: WordPress Plugin Wp-FileManager 6.8 - RCE

2020-12-02 Mansoor R webapps

Car Rental Management System 1.0 – SQL Injection / Local File include

# Exploit Title: Car Rental Management System 1.0 - SQL Injection / Local File include

2020-12-02 Mosaaed webapps

Simple College Website 1.0 – ‘page’ Local File Inclusion

# Exploit Title: Simple College Website 1.0 - 'page' Local File Inclusion

2020-12-02 Mosaaed webapps

Anuko Time Tracker 1.19.23.5311 – Password Reset leading to Account Takeover

#Exploit Title: Anuko Time Tracker 1.19.23.5311 - Password Reset Vulnerability leading to Account Takeover

2020-12-02 Mufaddal Masalawala webapps

Anuko Time Tracker 1.19.23.5311 – No rate Limit on Password Reset functionality

#Exploit Title: Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality

2020-12-02 Mufaddal Masalawala webapps

ChurchCRM 4.2.1 – Persistent Cross Site Scripting (XSS)

#Exploit Title: ChurchCRM 4.2.1- Persistent Cross Site Scripting(XSS)

2020-12-02 Mufaddal Masalawala webapps

ChurchCRM 4.2.0 – CSV/Formula Injection

#Exploit Title: ChurchCRM 4.2.1- CSV/Formula Injection

2020-12-02 Mufaddal Masalawala webapps

WebDamn User Registration & Login System with User Panel – SQLi Auth Bypass

# Exploit Title: WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass

2020-12-02 Aakash Madaan webapps

DotCMS 20.11 – Stored Cross-Site Scripting

# Exploit Title: DotCMS 20.11 - Stored Cross-Site Scripting

2020-12-02 Hardik Solanki webapps

Artworks Gallery 1.0 – Arbitrary File Upload RCE (Authenticated) via Edit Profile

# Exploit Title: Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile

2020-12-02 Shahrukh Iqbal Mirza webapps

Artworks Gallery 1.0 – Arbitrary File Upload RCE (Authenticated) via Add Artwork

# Exploit Title: Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated)

2020-12-02 Shahrukh Iqbal Mirza webapps

Employee Record Management System 1.1 – Login Bypass SQL Injection

# Exploit Title: Employee Record Management System 1.1 - Login Bypass SQL Injection

2020-12-02 Anurag Kumar webapps

WonderCMS 3.1.3 – ‘Menu’ Persistent Cross-Site Scripting

# Exploit Title: WonderCMS 3.1.3 - 'menu' Persistent Cross-Site Scripting

2020-12-02 Hemant Patidar webapps

Local Service Search Engine Management System 1.0 – SQLi Authentication Bypass

# Exploit Title: Local Service Search Engine Management System 1.0 - SQLi Authentication Bypass

2020-12-02 Aditya Wakhlu webapps

Online News Portal System 1.0 – ‘Title’ Stored Cross Site Scripting

# Exploit Title: Online News Portal System 1.0 - 'Title' Stored Cross Site Scripting

2020-12-02 Parshwa Bhavsar webapps

Bakeshop Online Ordering System 1.0 – ‘Owner’ Persistent Cross-site scripting

# Exploit Title: Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting

2020-12-02 Parshwa Bhavsar webapps

NewsLister – Authenticated Persistent Cross-Site Scripting

# Exploit Title: NewsLister - Authenticated Persistent Cross-Site Scripting

2020-12-02 Emre Aslan webapps

Online Voting System Project in PHP – ‘username’ Persistent Cross-Site Scripting

# Exploit Title: Online Voting System Project in PHP - 'username' Persistent Cross-Site Scripting

2020-12-02 Sagar Banwa webapps

PRTG Network Monitor 20.4.63.1412 – ‘maps’ Stored XSS

# Exploit Title: PRTG Network Monitor 20.4.63.1412 - 'maps' Stored XSS

2020-12-02 Amin Rawah webapps

WonderCMS 3.1.3 – Authenticated Remote Code Execution

# Exploit Title: WonderCMS 3.1.3 - Authenticated Remote Code Execution

2020-12-02 zetc0de webapps

WonderCMS 3.1.3 – Authenticated SSRF to Remote Remote Code Execution

# Exploit Title: WonderCMS 3.1.3 - Authenticated SSRF to Remote Remote Code Execution

2020-12-02 zetc0de webapps

EgavilanMedia User Registration & Login System with Admin Panel 1.0 – Stored Cross Site Scripting

# Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Stored Cross Site Scripting

2020-12-02 Soushikta Chowdhury webapps

Student Result Management System 1.0 – Authentication Bypass SQL Injection

# Exploit Title: Student Result Management System 1.0 - Authentication Bypass SQL Injection

2020-12-02 Ritesh Gohil webapps

EgavilanMedia User Registration & Login System with Admin Panel 1.0 – CSRF

# Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel 1.0 - CSRF

2020-12-02 Hardik Solanki webapps

Under Construction Page with CPanel 1.0 – SQL injection

# Exploit Title: Under Construction Page with CPanel 1.0 - SQL injection

2020-12-02 Mayur Parmar webapps

Pharmacy Store Management System 1.0 – ‘id’ SQL Injection

# Exploit Title: Pharmacy Store Management System 1.0 - 'id' SQL Injection

2020-12-02 Aydın Baran Ertemir webapps

ILIAS Learning Management System 4.3 – SSRF

# Exploit Title: ILIAS Learning Management System 4.3 - SSRF

2020-12-02 Dot webapps

Expense Management System – ‘description’ Stored Cross Site Scripting

# Exploit Title: Expense Management System - 'description' Stored Cross Site Scripting

2020-12-02 Nikhil Kumar webapps

Tendenci 12.3.1 – CSV/ Formula Injection

#Exploit Title: Tendenci 12.3.1 - CSV/ Formula Injection

2020-12-01 Mufaddal Masalawala webapps

Social Networking Site – Authentication Bypass (SQli)

# Exploit Title: Social Networking Site - Authentication Bypass (SQli)

2020-12-01 gh1mau webapps

Pandora FMS 7.0 NG 749 – Multiple Persistent Cross-Site Scripting Vulnerabilities

# Exploit Title: Pandora FMS 7.0 NG 749 - Multiple Persistent Cross-Site Scripting Vulnerabilities

2020-12-01 Matthew Aberegg webapps

Medical Center Portal Management System 1.0 – ‘login’ SQL Injection

# Exploit Title: Medical Center Portal Management System 1.0 - 'login' SQL Injection

2020-12-01 Aydın Baran Ertemir webapps

LEPTON CMS 4.7.0 – ‘URL’ Persistent Cross-Site Scripting

# Exploit Title: LEPTON CMS 4.7.0 - 'URL' Persistent Cross-Site Scripting

2020-12-01 Sagar Banwa webapps

Tailor Management System 1.0 – Unrestricted File Upload to Remote Code Execution

# Exploit Title: Tailor Management System 1.0 - Unrestricted File Upload to Remote Code Execution

2020-12-01 Saeed Bala Ahmed webapps

Multi Restaurant Table Reservation System 1.0 – Multiple Persistent XSS

# Exploit Title: Multi Restaurant Table Reservation System 1.0 - Multiple Persistent XSS

2020-12-01 yunaranyancat webapps

Setelsa Conacwin 3.7.1.2 – Local File Inclusion

# Exploit Title: Setelsa Conacwin 3.7.1.2 - Local File Inclusion

2020-12-01 Bryan Rodriguez Martin webapps

Pharmacy/Medical Store & Sale Point 1.0 – ’email’ SQL Injection

# Exploit Title: Pharmacy/Medical Store & Sale Point 1.0 - 'email' SQL Injection

2020-12-01 naivenom webapps

Online Shopping Alphaware 1.0 – Error Based SQL injection

# Title: Online Shopping Alphaware 1.0 - Error-Based SQL injection

2020-12-01 Moaaz Taha webapps

WordPress Plugin EventON Calendar 3.0.5 – Reflected Cross-Site Scripting

# Exploit Title: Wordpress Plugin EventON Calendar 3.0.5 - Reflected Cross-Site Scripting

2020-12-01 B3KC4T webapps

Joomla! Component GMapFP 3.5 – Unauthenticated Arbitrary File Upload

# Exploit Title: Joomla! Component GMapFP 3.5 - Unauthenticated Arbitrary File Upload

2020-12-01 ThelastVvV webapps

TypeSetter 5.1 – CSRF (Change admin e-mail)

# Exploit Title: TypeSetter 5.1 - CSRF (Change admin e-mail)

2020-12-01 Alperen Ergel webapps

Intelbras Router RF 301K 1.1.2 – Authentication Bypass

# Exploit Title: Intelbras Router RF 301K 1.1.2 - Authentication Bypass

2020-11-30 Kaio Amaral webapps

Rejetto HttpFileServer 2.3.x – Remote Command Execution (3)

# Exploit Title: Rejetto HttpFileServer 2.3.x - Remote Command Execution (3)

2020-11-30 Óscar Andreu webapps

ATX MiniCMTS200a Broadband Gateway 2.0 – Credential Disclosure

# Exploit Title: ATX MiniCMTS200a Broadband Gateway 2.0 - Credential Disclosure

2020-11-30 Zagros Bingol webapps

Best Support System 3.0.4 – ‘ticket_body’ Persistent XSS (Authenticated)

# Exploit Title: Best Support System 3.0.4 - 'ticket_body' Persistent XSS (Authenticated)

2020-11-27 Ex.Mi webapps

ElkarBackup 1.3.3 – ‘Policy[name]’ and ‘Policy[Description]’ Stored Cross-site Scripting

# Exploit Title: ElkarBackup 1.3.3 - 'Policy[name]' and 'Policy[Description]' Stored Cross-site Scripting

2020-11-27 Vyshnav nk webapps

House Rental 1.0 – ‘keywords’ SQL Injection

# Exploit Title: House Rental 1.0 - 'keywords' SQL Injection

2020-11-27 boku webapps

WordPress Theme Accesspress Social Icons 1.7.9 – SQL injection (Authenticated)

# Exploit Title: Wordpress Theme Accesspress Social Icons 1.7.9 - SQL injection (Authenticated)

2020-11-27 SunCSR webapps

Moodle 3.8 – Unrestricted File Upload

# Exploit Title: Moodle 3.8 - Unrestricted File Upload

2020-11-27 Sirwan Veisi webapps

Acronis Cyber Backup 12.5 Build 16341 – Unauthenticated SSRF

# Exploit Title: Acronis Cyber Backup 12.5 Build 16341 - Unauthenticated SSRF

2020-11-27 Julien Ahrens webapps