webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

WordPress Plugin BBPress 2.5 – Unauthenticated Privilege Escalation

# Exploit Title: Wordpress Plugin BBPress 2.5 - Unauthenticated Privilege Escalation

2020-06-01 Raphael Karger webapps

Crystal Shard http-protection 0.2.0 – IP Spoofing Bypass

# Exploit Title : Crystal Shard http-protection 0.2.0 - IP Spoofing Bypass

2020-05-29 Halis Duraki webapps

WordPress Plugin Multi-Scheduler 1.0.0 – Cross-Site Request Forgery (Delete User)

# Exploit Title: WordPress Plugin Multi-Scheduler 1.0.0 - Cross-Site Request Forgery (Delete User)

2020-05-29 UnD3sc0n0c1d0 webapps

QNAP QTS and Photo Station 6.0.3 – Remote Command Execution

# Exploit Title: QNAP QTS and Photo Station 6.0.3 - Remote Command Execution

2020-05-28 Th3GundY webapps

EyouCMS 1.4.6 – Persistent Cross-Site Scripting

# Exploit Title: EyouCMS 1.4.6 - Persistent Cross-Site Scripting

2020-05-28 China Banking and Insurance Information Technology Management Co. webapps

Online-Exam-System 2015 – ‘fid’ SQL Injection

# Exploit Title: Online-Exam-System 2015 - 'fid' SQL Injection

2020-05-28 Berk Dusunur webapps

NOKIA VitalSuite SPM 2020 – ‘UserName’ SQL Injection

# Exploit Title: NOKIA VitalSuite SPM 2020 - 'UserName' SQL Injection

2020-05-28 Berk Dusunur webapps

OXID eShop 6.3.4 – ‘sorting’ SQL Injection

# Exploit Title: OXID eShop 6.3.4 - 'sorting' SQL Injection

2020-05-27 VulnSpy webapps

Kuicms PHP EE 2.0 – Persistent Cross-Site Scripting

# Exploit Title: Kuicms Php EE 2.0 - Persistent Cross-Site Scripting

2020-05-27 China Banking and Insurance Information Technology Management Co. webapps

osTicket 1.14.1 – ‘Saved Search’ Persistent Cross-Site Scripting

# Exploit Title: osTicket 1.14.1 - 'Saved Search' Persistent Cross-Site Scripting

2020-05-27 Matthew Aberegg webapps

osTicket 1.14.1 – ‘Ticket Queue’ Persistent Cross-Site Scripting

# Exploit Title: osTicket 1.14.1 - 'Ticket Queue' Persistent Cross-Site Scripting

2020-05-27 Matthew Aberegg webapps

LimeSurvey 4.1.11 – ‘Permission Roles’ Persistent Cross-Site Scripting

# Exploit Title: LimeSurvey 4.1.11 - 'Permission Roles' Persistent Cross-Site Scripting

2020-05-27 Matthew Aberegg webapps

Online Marriage Registration System 1.0 – Persistent Cross-Site Scripting

Exploit Title: Online Marriage Registration System 1.0 - Persistent Cross-Site Scripting

2020-05-27 that faceless coder webapps

WordPress Plugin Drag and Drop File Upload Contact Form 1.3.3.2 – Remote Code Execution

# Exploit Title: WordPress Plugin Drag and Drop File Upload Contact Form 1.3.3.2 - Remote Code Execution

2020-05-26 Austin Martin webapps

Pi-hole 4.4.0 – Remote Code Execution (Authenticated)

# Exploit Title: Pi-hole 4.4.0 - Remote Code Execution (Authenticated)

2020-05-26 Photubias webapps

Joomla! Plugin XCloner Backup 3.5.3 – Local File Inclusion (Authenticated)

# Exploit Title: Joomla! Plugin XCloner Backup 3.5.3 - Local File Inclusion (Authenticated)

2020-05-26 Mehmet Kelepçe webapps

Open-AudIT 3.3.0 – Reflective Cross-Site Scripting (Authenticated)

# Exploit Title: Open-AudIT 3.3.0 - Reflective Cross-Site Scripting (Authenticated)

2020-05-26 Kamaljeet Kumar webapps

OpenEMR 5.0.1 – Remote Code Execution (1)

# Title: OpenEMR 5.0.1 - Remote Code Execution (1)

2020-05-26 Musyoka Ian webapps

Online Discussion Forum Site 1.0 – Remote Code Execution

# Exploit Title: Online Discussion Forum Site 1.0 - Remote Code Execution

2020-05-25 Enesdex webapps

Victor CMS 1.0 – ‘add_user’ Persistent Cross-Site Scripting

# Exploit Title: Victor CMS 1.0 - 'add_user' Persistent Cross-Site Scripting

2020-05-25 Nitya Nand webapps

WordPress Plugin Form Maker 5.4.1 – ‘s’ SQL Injection (Authenticated)

# Exploit Title: Wordpress Plugin Form Maker 5.4.1 - 's' SQL Injection (Authenticated)

2020-05-25 SunCSR webapps

Gym Management System 1.0 – Unauthenticated Remote Code Execution

# Exploit Title: Gym Management System 1.0 - Unauthenticated Remote Code Execution

2020-05-22 boku webapps

Dolibarr 11.0.3 – Persistent Cross-Site Scripting

# Title: Dolibarr 11.0.3 - Persistent Cross-Site Scripting

2020-05-22 Mehmet Kelepçe webapps

OpenEDX platform Ironwood 2.5 – Remote Code Execution

# Exploit Title: OpenEDX platform Ironwood 2.5 - Remote Code Execution

2020-05-21 Daniel Monzón webapps

PHPFusion 9.03.50 – Persistent Cross-Site Scripting

# Exploit Title: PHPFusion 9.03.50 - Persistent Cross-Site Scripting

2020-05-21 coiffeur webapps

Composr CMS 10.0.30 – Persistent Cross-Site Scripting

# Title: Composr CMS 10.0.30 - Persistent Cross-Site Scripting

2020-05-21 Manuel García Cárdenas webapps

forma.lms 5.6.40 – Cross-Site Request Forgery (Change Admin Email)

# Exploit Title: forma.lms 5.6.40 - Cross-Site Request Forgery (Change Admin Email)

2020-05-21 Daniel Ortiz webapps

CraftCMS 3 vCard Plugin 1.0.0 – Remote Code Execution

# Exploit Title: CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution

2020-05-20 Wade Guest webapps

Victor CMS 1.0 – Authenticated Arbitrary File Upload

# Exploit Title: Victor CMS 1.0 - Authenticated Arbitrary File Upload

2020-05-19 Kishan Lal Choudhary webapps

NukeViet VMS 4.4.00 – Cross-Site Request Forgery (Change Admin Password)

# Exploit Title: NukeViet VMS 4.4.00 - Cross-Site Request Forgery (Change Admin Password)

2020-05-19 JEBARAJ webapps

Submitty 20.04.01 – Persistent Cross-Site Scripting

# Exploit Title: Submitty 20.04.01 - Persistent Cross-Site Scripting

2020-05-19 humblelad webapps

php-fusion 9.03.50 – ‘ctype’ SQL Injection

# Exploit Title: php-fusion 9.03.50 - 'ctype' SQL Injection

2020-05-19 SunCSR webapps

qdPM 9.1 – ‘cfg[app_app_name]’ Persistent Cross-Site Scripting

# Exploit Title: qdPM 9.1 - 'cfg[app_app_name]' Persistent Cross-Site Scripting

2020-05-19 Kishan Lal Choudhary webapps

Victor CMS 1.0 – ‘cat_id’ SQL Injection

# Exploit Title: Victor CMS 1.0 - 'cat_id' SQL Injection

2020-05-19 Kishan Lal Choudhary webapps

Victor CMS 1.0 – ‘comment_author’ Persistent Cross-Site Scripting

# Exploit Title: Victor CMS 1.0 - 'comment_author' Persistent Cross-Site Scripting

2020-05-19 Kishan Lal Choudhary webapps

Online Healthcare management system 1.0 – Authentication Bypass

# Exploit Title: Online Healthcare management system 1.0 - Authentication Bypass

2020-05-18 BKpatron webapps

Online Healthcare Patient Record Management System 1.0 – Authentication Bypass

# Exploit Title: Online Healthcare Patient Record Management System 1.0 - Authentication Bypass

2020-05-18 Daniel Monzón webapps

online Chatting System 1.0 – ‘id’ SQL Injection

# Exploit Title: online Chatting System 1.0 - 'id' SQL Injection

2020-05-18 BKpatron webapps

Monstra CMS 3.0.4 – Authenticated Arbitrary File Upload

# Exploit Title: Monstra CMS 3.0.4 - Authenticated Arbitrary File Upload

2020-05-18 Kishan Lal Choudhary webapps

forma.lms The E-Learning Suite 2.3.0.2 – Persistent Cross-Site Scripting

# Exploit Title: forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site Scripting

2020-05-18 Daniel Ortiz webapps

Oracle Hospitality RES 3700 5.7 – Remote Code Execution

# Exploit Title: Oracle Hospitality RES 3700 5.7 - Remote Code Execution

2020-05-18 Walid Faour webapps

Online Examination System 1.0 – ‘eid’ SQL Injection

# Exploit Title: Online Examination System 1.0 - 'eid' SQL Injection

2020-05-18 BKpatron webapps

WordPress Plugin Ajax Load More 5.3.1 – ‘#1’ Authenticated SQL Injection

# Exploit Title: Wordpress Plugin Ajax Load More 5.3.1 - '#1' Authenticated SQL Injection

2020-05-18 Nguyen Khang webapps

Mikrotik Router Monitoring System 1.2.3 – ‘community’ SQL Injection

# Exploit Title: Mikrotik Router Monitoring System 1.2.3 - 'community' SQL Injection

2020-05-18 jul10l1r4 webapps

ManageEngine Service Desk 10.0 – Cross-Site Scripting

# Exploit Title: ManageEngine Service Desk 10.0 - Cross-Site Scripting

2020-05-15 Felipe Molina webapps

vBulletin 5.6.1 – ‘nodeId’ SQL Injection

# Exploit Title: vBulletin 5.6.1 - 'nodeId' SQL Injection

2020-05-15 Photubias webapps

E-Commerce System 1.0 – Unauthenticated Remote Code Execution

# Exploit Title: E-Commerce System 1.0 - Unauthenticated Remote Code Execution

2020-05-14 SunCSR webapps

Netlink XPON 1GE WiFi V2801RGW – Remote Command Execution

# Exploit Title: Netlink XPON 1GE WiFi V2801RGW - Remote Command Execution

2020-05-14 Seecko Das webapps

Complaint Management System 1.0 – ‘username’ SQL Injection

# Exploit Title: Complaint Management System 1.0 - 'username' SQL Injection

2020-05-14 Daniel Ortiz webapps

Sellacious eCommerce 4.6 – Persistent Cross-Site Scripting

# Exploit Title: Sellacious eCommerce 4.6 - Persistent Cross-Site Scripting

2020-05-13 Vulnerability-Lab webapps