Tryton 5.4 – Persistent Cross-Site Scripting
# Exploit Title: Tryton 5.4 - Persistent Cross-Site Scripting
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
TylerTech Eagle 2018.3.11 – Remote Code Execution
# Exploit Title: TylerTech Eagle 2018.3.11 - Remote Code Execution
qdPM 9.1 – Arbitrary File Upload
# Exploit Title: qdPM 9.1 - Arbitrary File Upload
Cisco Digital Network Architecture Center 1.3.1.4 – Persistent Cross-Site Scripting
# Exploit Title: Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting
CuteNews 2.1.2 – Authenticated Arbitrary File Upload
# Exploit Title: CuteNews 2.1.2 - Authenticated Arbitrary File Upload
WordPress Plugin ChopSlider 3.4 – ‘id’ SQL Injection
# Exploit Title: ChopSlider3 Wordpress Plugin3.4 - 'id' SQL Injection
Orchard Core RC1 – Persistent Cross-Site Scripting
# Exploit Title: Orchard Core RC1 - Persistent Cross-Site Scripting
LibreNMS 1.46 – ‘search’ SQL Injection
# Exploit Title: LibreNMS 1.46 - 'search' SQL Injection
Complaint Management System 1.0 – Authentication Bypass
# Exploit Title: complaint management system 1.0 - Authentication Bypass
Victor CMS 1.0 – ‘post’ SQL Injection
# Exploit Title: Victor CMS 1.0 - 'post' SQL Injection
OpenZ ERP 3.6.60 – Persistent Cross-Site Scripting
# Exploit Title: OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting
WordPress Plugin Simple File List 4.2.2 – Remote Code Execution
# Exploit Title: Wordpress Plugin Simple File List 4.2.2 - Remote Code Execution
CuteNews 2.1.2 – Arbitrary File Deletion
# Exploit Title: CuteNews 2.1.2 - Arbitrary File Deletion
Sentrifugo CMS 3.2 – Persistent Cross-Site Scripting
# Exploit Title: Sentrifugo CMS 3.2 - Persistent Cross-Site Scripting
Kartris 1.6 – Arbitrary File Upload
# Exploit Title: Kartris 1.6 - Arbitrary File Upload
Online AgroCulture Farm Management System 1.0 – ‘uname’ SQL Injection
# Exploit Title: Online AgroCulture Farm Management System 1.0 - 'uname' SQL Injection
Pi-hole < 4.4 - Authenticated Remote Code Execution / Privileges Escalation
#!/usr/bin/env python3
Pi-hole < 4.4 - Authenticated Remote Code Execution
#!/usr/bin/env python3
Online AgroCulture Farm Management System 1.0 – ‘pid’ SQL Injection
# Exploit Title: Online AgroCulture Farm Management System 1.0 - 'pid' SQL Injection
Pisay Online E-Learning System 1.0 – Remote Code Execution
# Exploit Title: Pisay Online E-Learning System 1.0 - Remote Code Execution
Online Clothing Store 1.0 – Arbitrary File Upload
# Exploit Title: Online Clothing Store 1.0 - Arbitrary File Upload
School File Management System 1.0 – ‘username’ SQL Injection
# Exploit Title: School File Management System 1.0 - 'username' SQL Injection
Draytek VigorAP 1000C – Persistent Cross-Site Scripting
# Title: Draytek VigorAP 1000C - Persistent Cross-Site Scripting
Car Park Management System 1.0 – Authentication Bypass
# Exploit Title: Car Park Management System 1.0 - Authentication Bypass
MPC Sharj 3.11.1 – Arbitrary File Download
# Exploit title : MPC Sharj 3.11.1 - Arbitrary File Download
YesWiki cercopitheque 2020.04.18.1 – ‘id’ SQL Injection
# Exploit Title: YesWiki cercopitheque 2020.04.18.1 - 'id' SQL Injection
GitLab 12.9.0 – Arbitrary File Read
# Exploit Title: GitLab 12.9.0 - Arbitrary File Read
webTareas 2.0.p8 – Arbitrary File Deletion
# Exploit Title: webTareas 2.0.p8 - Arbitrary File Deletion
Online Clothing Store 1.0 – ‘username’ SQL Injection
# Exploit Title: Online Clothing Store 1.0 - 'username' SQL Injection
Booked Scheduler 2.7.7 – Authenticated Directory Traversal
# Exploit Title: Booked Scheduler 2.7.7 - Authenticated Directory Traversal
i-doit Open Source CMDB 1.14.1 – Arbitrary File Deletion
# Exploit Title: i-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion
Online Clothing Store 1.0 – Persistent Cross-Site Scripting
# Exploit Title: Online Clothing Store 1.0 - Persistent Cross-Site Scripting
NEC Electra Elite IPK II WebPro 01.03.01 – Session Enumeration
# Title: NEC Electra Elite IPK II WebPro 01.03.01 - Session Enumeration
SimplePHPGal 0.7 – Remote File Inclusion
# Title: SimplePHPGal 0.7 - Remote File Inclusion
PhreeBooks ERP 5.2.5 – Remote Command Execution
# Exploit Title: PhreeBooks ERP 5.2.5 - Remote Command Execution
BlogEngine 3.3 – ‘syndication.axd’ XML External Entity Injection
# Title: BlogEngine 3.3 - 'syndication.axd' XML External Entity Injection
webERP 4.15.1 – Unauthenticated Backup File Access
# Exploit Title: webERP 4.15.1 - Unauthenticated Backup File Access
Online Scheduling System 1.0 – ‘username’ SQL Injection
# Exploit Title: Online Scheduling System 1.0 - 'username' SQL Injection
Fishing Reservation System 7.5 – ‘uid’ SQL Injection
# Title: Fishing Reservation System 7.5 - 'uid' SQL Injection
addressbook 9.0.0.1 – ‘id’ SQL Injection
# Title: addressbook 9.0.0.1 - 'id' SQL Injection
osTicket 1.14.1 – Persistent Authenticated Cross-Site Scripting
# Title: osTicket 1.14.1 - Persistent Authenticated Cross-Site Scripting
BoltWire 6.03 – Local File Inclusion
# Exploit Title: BoltWire 6.03 - Local File Inclusion
Online Scheduling System 1.0 – Authentication Bypass
# Exploit Title: Online Scheduling System 1.0 - Authentication Bypass
Apache OFBiz 17.12.03 – Cross-Site Request Forgery (Account Takeover)
# Exploit Title: Apache OFBiz 17.12.03 - Cross-Site Request Forgery (Account Takeover)
HardDrive 2.1 for iOS – Arbitrary File Upload
# Title: HardDrive 2.1 for iOS - Arbitrary File Upload
Super Backup 2.0.5 for iOS – Directory Traversal
# Title: Super Backup 2.0.5 for iOS - Directory Traversal
php-fusion 9.03.50 – Persistent Cross-Site Scripting
# Exploit Title: php-fusion 9.03.50 - Persistent Cross-Site Scripting
Online Scheduling System 1.0 – Persistent Cross-Site Scripting
# Exploit Title: Online Scheduling System 1.0 - Persistent Cross-Site Scripting
ChemInv 1.0 – Authenticated Persistent Cross-Site Scripting
# Exploit Title: ChemInv 1.0 - Authenticated Persistent Cross-Site Scripting
hits script 1.0 – ‘item_name’ SQL Injection
# Exploit Title: hits script 1.0 - 'item_name' SQL Injection