Horde Groupware Webmail Edition 5.2.22 – PHP File Inclusion
## exploit-inc-inclusion.py
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
TeamCity Agent XML-RPC 10.0 – Remote Code Execution
# Exploit Title: TeamCity Agent XML-RPC 10.0 - Remote Code Execution
Wing FTP Server – Authenticated CSRF (Delete Admin)
# Exploit Title: Wing FTP Server 6.2.3 - Privilege Escalation
Joomla! 3.9.0 < 3.9.7 - CSV Injection
#!/usr/bin/python3
WordPress Plugin Search Meter 2.13.2 – CSV injection
# Exploit Title: Wordpress Plugin Search Meter 2.13.2 - CSV Injection
Persian VIP Download Script 1.0 – ‘active’ SQL Injection
# Exploit Title: Persian VIP Download Script 1.0 - 'active' SQL Injection
YzmCMS 5.5 – ‘url’ Persistent Cross-Site Scripting
# Exploit Title: YzmCMS 5.5 - 'url' Persistent Cross-Site Scripting
Sysaid 20.1.11 b26 – Remote Command Execution
# Exploit Title: Sysaid 20.1.11 b26 - Remote Command Execution
Sentrifugo HRMS 3.2 – ‘id’ SQL Injection
# Exploit Title: Sentrifugo HRMS 3.2 - 'id' SQL Injection
60CycleCMS – ‘news.php’ SQL Injection
# Exploit Title: 60CycleCMS - 'news.php' Multiple vulnerability
UniSharp Laravel File Manager 2.0.0 – Arbitrary File Read
# Exploit Title: UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read
RICOH Aficio SP 5210SF Printer – ‘entryNameIn’ HTML Injection
# Exploit Title: RICOH Aficio SP 5210SF Printer - 'entryNameIn' HTML Injection
GUnet OpenEclass 1.7.3 E-learning platform – ‘month’ SQL Injection
# Exploit Title: GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection
Alfresco 5.2.4 – Persistent Cross-Site Scripting
# Exploit Title: Alfresco 5.2.4 - Persistent Cross-Site Scripting
RICOH Aficio SP 5200S Printer – ‘entryNameIn’ HTML Injection
# Exploit Title: RICOH Aficio SP 5200S Printer - 'entryNameIn' HTML Injection
Cacti v1.2.8 – Unauthenticated Remote Code Execution (Metasploit)
# Exploit Title: Cacti v1.2.8 - Unauthenticated Remote Code Execution (Metasploit)
Intelbras Wireless N 150Mbps WRN240 – Authentication Bypass (Config Upload)
# Exploit Title: Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass (Config Upload)
TP LINK TL-WR849N – Remote Code Execution
# Exploit Title: TP LINK TL-WR849N - Remote Code Execution
Wing FTP Server 6.2.5 – Privilege Escalation
# Exploit Title: Wing FTP Server 6.2.5 - Privilege Escalation
TL-WR849N 0.9.1 4.16 – Authentication Bypass (Upload Firmware)
# Exploit Title: TL-WR849N 0.9.1 4.16 - Authentication Bypass (Upload Firmware)
WordPress Plugin Tutor LMS 1.5.3 – Cross-Site Request Forgery (Add User)
# Exploit Title: Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery (Add User)
Netis WF2419 2.2.36123 – Remote Code Execution
# Exploit Title: Netis WF2419 2.2.36123 - Remote Code Execution
Joplin Desktop 1.0.184 – Cross-Site Scripting
# Exploit Title: Joplin Desktop 1.0.184 - Cross-Site Scripting
qdPM < 9.1 - Remote Code Execution
#!/usr/bin/python
Comtrend VR-3033 – Command Injection
# Title: Comtrend VR-3033 - Authenticated Command Injection
Business Live Chat Software 1.0 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Business Live Chat Software 1.0 - Cross-Site Request Forgery (Add Admin)
PhpIX 2012 Professional – ‘id’ SQL Injection
# Title: PhpIX 2012 Professional - 'id' SQL Injection
Magento WooCommerce CardGate Payment Gateway 2.0.30 – Payment Process Bypass
# Exploit Title: Magento WooCommerce CardGate Payment Gateway 2.0.30 - Payment Process Bypass
WordPress Plugin WooCommerce CardGate Payment Gateway 3.1.15 – Payment Process Bypass
# Exploit Title: WordPress Plugin WooCommerce CardGate Payment Gateway 3.1.15 - Payment Process Bypass
Cacti 1.2.8 – Remote Code Execution
# Exploit Title: Cacti 1.2.8 - Remote Code Execution
Aptina AR0130 960P 1.3MP Camera – Remote Configuration Disclosure
# Exploit Title: Aptina AR0130 960P 1.3MP Camera - Remote Configuration Disclosure
DotNetNuke 9.5 – File Upload Restrictions Bypass
# Exploit Title: DotNetNuke 9.5 - File Upload Restrictions Bypass
DotNetNuke 9.5 – Persistent Cross-Site Scripting
# Exploit Title: DotNetNuke 9.5 - Persistent Cross-Site Scripting
eLection 2.0 – ‘id’ SQL Injection
# Title: eLection 2.0 - 'id' SQL Injection
ManageEngine EventLog Analyzer 10.0 – Information Disclosure
# Exploit Title: ManageEngine EventLog Analyzer 10.0 - Information Disclosure
I6032B-P POE 2.0MP Outdoor Camera – Remote Configuration Disclosure
# Exploit Title: I6032B-P POE 2.0MP Outdoor Camera - Remote Configuration Disclosure
ATutor 2.2.4 – ‘id’ SQL Injection
# Exploit Title: ATutor 2.2.4 - 'id' SQL Injection
SecuSTATION SC-831 HD Camera – Remote Configuration Disclosure
# Exploit Title: SecuSTATION SC-831 HD Camera - Remote Configuration Disclosure
AMSS++ 4.7 – Backdoor Admin Account
# Title: AMSS++ 4.7 - Backdoor Admin Account
CandidATS 2.1.0 – Cross-Site Request Forgery (Add Admin)
# Title: CandidATS 2.1.0 - Cross-Site Request Forgery (Add Admin)
SecuSTATION IPCAM-130 HD Camera – Remote Configuration Disclosure
# Exploit Title: SecuSTATION IPCAM-130 HD Camera - Remote Configuration Disclosure
AMSS++ v 4.31 – ‘id’ SQL Injection
# Title : AMSS++ v 4.31 - 'id' SQL Injection
ESCAM QD-900 WIFI HD Camera – Remote Configuration Disclosure
# Title: ESCAM QD-900 WIFI HD Camera - Remote Configuration Disclosure
GUnet OpenEclass E-learning platform 1.7.3 – ‘uname’ SQL Injection
# Exploit Title: GUnet OpenEclass E-learning platform 1.7.3 - 'uname' SQL Injection
Avaya IP Office Application Server 11.0.0.0 – Reflective Cross-Site Scripting
# Exploit Title: Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting
Apache Tomcat – AJP ‘Ghostcat File Read/Inclusion
#!/usr/bin/env python
Easy2Pilot 7 – Cross-Site Request Forgery (Add User)
# Exploit Title: Easy2Pilot 7 - Cross-Site Request Forgery (Add User)