Victor CMS 1.0 – ‘user_firstname’ Persistent Cross-Site Scripting
# Exploit Title: Victor CMS 1.0 - 'user_firstname' Persistent Cross-Site Scripting
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
OpenEMR 5.0.1 – ‘controller’ Remote Code Execution
# Exploit Title: OpenEMR 5.0.1 - 'controller' Remote Code Execution
FHEM 6.0 – Local File Inclusion
# Exploit Title: FHEM 6.0 - Local File Inclusion
BSA Radar 1.6.7234.24750 – Persistent Cross-Site Scripting
# Exploit title: BSA Radar 1.6.7234.24750 - Persistent Cross-Site Scripting
Online Student Enrollment System 1.0 – Cross-Site Request Forgery (Add Student)
# Exploit Title: Online Student Enrollment System 1.0 - Cross-Site Request Forgery (Add Student)
Responsive Online Blog 1.0 – ‘id’ SQL Injection
# Exploit Title: Responsive Online Blog 1.0 - 'id' SQL Injection
Eaton Intelligent Power Manager 1.6 – Directory Traversal
# Exploit Title: Eaton Intelligent Power Manager 1.6 - Directory Traversal
WebPort 1.19.1 – ‘setup’ Reflected Cross-Site Scripting
# Exploit Title: WebPort 1.19.1 - 'setup' Reflected Cross-Site Scripting
WebPort 1.19.1 – Reflected Cross-Site Scripting
# Exploit Title: WebPort 1.19.1 - Reflected Cross-Site Scripting
Online Student Enrollment System 1.0 – Unauthenticated Arbitrary File Upload
# Exploit Title: Online Student Enrollment System 1.0 - Unauthenticated Arbitrary File Upload
Odoo 12.0 – Local File Inclusion
# Exploit Title: Odoo 12.0 - Local File Inclusion
Student Enrollment 1.0 – Unauthenticated Remote Code Execution
# Exploit Title: Student Enrollment 1.0 - Unauthenticated Remote Code Execution
FileRun 2019.05.21 – Reflected Cross-Site Scripting
# Exploit Title: FileRun 2019.05.21 - Reflected Cross-Site Scripting
Beauty Parlour Management System 1.0 – Authentication Bypass
# Exploit Title: Beauty Parlour Management System 1.0 - Authentication Bypass
OpenCTI 3.3.1 – Directory Traversal
# Exploit Title: OpenCTI 3.3.1 - Directory Traversal
College-Management-System-Php 1.0 – Authentication Bypass
# Exploit Title: College-Management-System-Php 1.0 - Authentication Bypass / SQL Injection
Gila CMS 1.11.8 – ‘query’ SQL Injection
# Exploit Title: Gila CMS 1.11.8 - 'query' SQL Injection
Netgear R7000 Router – Remote Code Execution
# EDB Note: Download ~ https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/48588.zip
Sysax MultiServer 6.90 – Reflected Cross Site Scripting
# Exploit Title: Sysax MultiServer 6.90 - Reflected Cross Site Scripting
Avaya IP Office 11 – Password Disclosure
# Exploit Title: Avaya IP Office 11 - Password Disclosure
SmarterMail 16 – Arbitrary File Upload
# Exploit Title: SmarterMail 16 - Arbitrary File Upload
Virtual Airlines Manager 2.6.2 – ‘id’ SQL Injection
# Exploit Title: Virtual Airlines Manager 2.6.2 - 'id' SQL Injection
Joomla! J2 Store 3.3.11 – ‘filter_order_Dir’ Authenticated SQL Injection
# Exploit Title: Joomla J2 Store 3.3.11 - 'filter_order_Dir' SQL Injection (Authenticated)
Sistem Informasi Pengumuman Kelulusan Online 1.0 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery (Add Admin)
Bludit 3.9.12 – Directory Traversal
# Exploit Title: Bludit 3.9.12 - Directory Traversal
Virtual Airlines Manager 2.6.2 – ‘airport’ SQL Injection
# Exploit Title: Virtual Airlines Manager 2.6.2 - 'airport' SQL Injection
Virtual Airlines Manager 2.6.2 – ‘notam’ SQL Injection
# Exploit Title: Virtual Airlines Manager 2.6.2 - 'notam' SQL Injection
Kyocera Printer d-COPIA253MF – Directory Traversal (PoC)
# Exploit Title : Kyocera Printer d-COPIA253MF - Directory Traversal (PoC)
Online-Exam-System 2015 – ‘feedback’ SQL Injection
# Exploit Title: Online-Exam-System 2015 - 'feedback' SQL Injection
Online Course Registration 1.0 – Authentication Bypass
# Exploit Title: Online Course Registration 1.0 - Authentication Bypass
Cayin Digital Signage System xPost 2.5 – Remote Command Injection
# Title: Cayin Digital Signage System xPost 2.5 - Remote Command Injection
Cayin Signage Media Player 3.0 – Remote Command Injection (root)
# Title: Cayin Signage Media Player 3.0 - Remote Command Injection (root)
Secure Computing SnapGear Management Console SG560 3.1.5 – Arbitrary File Read
# Title: Secure Computing SnapGear Management Console SG560 3.1.5 - Arbitrary File Read
SnapGear Management Console SG560 3.1.5 – Cross-Site Request Forgery (Add Super User)
# Title: SnapGear Management Console SG560 3.1.5 - Cross-Site Request Forgery (Add Super User)
Cayin Content Management Server 11.0 – Remote Command Injection (root)
# Title: Cayin Content Management Server 11.0 - Remote Command Injection (root)
Online Marriage Registration System 1.0 – Remote Code Execution (1)
# Exploit Title: Online Marriage Registration System 1.0 Remote Code Execution
D-Link DIR-615 T1 20.10 – CAPTCHA Bypass
# Exploit Title: D-Link DIR-615 T1 20.10 - CAPTCHA Bypass
Navigate CMS 2.8.7 – Authenticated Directory Traversal
# Exploit Title: Navigate CMS 2.8.7 - Authenticated Directory Traversal
VMWAre vCloud Director 9.7.0.15498291 – Remote Code Execution
# Exploit Title: VMWAre vCloud Director 9.7.0.15498291 - Remote Code Execution
Navigate CMS 2.8.7 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Navigate CMS 2.8.7 - Cross-Site Request Forgery (Add Admin)
Clinic Management System 1.0 – Authenticated Arbitrary File Upload
# Exploit Title: Clinic Management System 1.0 - Authenticated Arbitrary File Upload
Oriol Espinal CMS 1.0 – ‘id’ SQL Injection
# Exploit Title: Oriol Espinal CMS 1.0 - 'id' SQL Injection
Navigate CMS 2.8.7 – ”sidx’ SQL Injection (Authenticated)
# Exploit Title: Navigate CMS 2.8.7 - ''sidx' SQL Injection (Authenticated)
Clinic Management System 1.0 – Unauthenticated Remote Code Execution
# Exploit Title: Clinic Management System 1.0 - Unauthenticated Remote Code Execution
Hostel Management System 2.0 – ‘id’ SQL Injection (Unauthenticated)
# Exploit Title: Hostel Management System 2.0 - 'id' SQL Injection (Unauthenticated)
AirControl 1.4.2 – PreAuth Remote Code Execution
# Exploit Title: AirControl 1.4.2 - PreAuth Remote Code Execution
OpenCart 3.0.3.2 – Stored Cross Site Scripting (Authenticated)
# Exploit Title: OpenCart 3.0.3.2 - Stored Cross Site Scripting (Authenticated)
Clinic Management System 1.0 – Authentication Bypass
# Exploit Title: Clinic Management System 1.0 - Authentication Bypass
QuickBox Pro 2.1.8 – Authenticated Remote Code Execution
# Exploit Title: QuickBox Pro 2.1.8 - Authenticated Remote Code Execution
VMware vCenter Server 6.7 – Authentication Bypass
# Exploit Title: VMware vCenter Server 6.7 - Authentication Bypass