webapps

WordPress Plugin Anti-Malware Security and Brute-Force Firewall 4.18.63 – Local File Inclusion (PoC)

# Exploit Title: Wordpress Anti-Malware Security and Bruteforce Firewall - Local File Inclusion

Fat Free CRM 0.19.0 – HTML Injection

# Exploit Title: Fat Free CRM v0.19.0 - HTML Injection

Airbnb Clone Script – Multiple SQL Injection

# Exploit Title: Homey BNB (Airbnb Clone Script) - Multiple SQL Injection

Thomson Reuters Concourse & Firm Central < 2.13.0097 - Directory Traversal / Local File Inclusion

'''

Jettweb Hazır Rent A Car Scripti V4 – SQL Injection

# Exploit Title: Jettweb Hazır Rent A Car Scripti V4 - SQL Injection

SJS Simple Job Script – SQL Injection / Cross-Site Scripting

# Exploit Title: Simple Job Script - Multiple Vulnerabilities

Titan FTP Server Version 2019 Build 3505 – Directory Traversal / Local File Inclusion

# Exploit Title: Titan FTP Server Version 2019 Build 3505 Directory Traversal/Local File Inclusion

XooDigital – ‘p’ SQL Injection

# Exploit Title: XooDigital - 'p' SQL Injection

XooGallery – Multiple SQL Injection

# Exploit Title: XooGallery - Multiple SQL Injections

Rukovoditel ERP & CRM 2.4.1 – ‘path’ Cross-Site Scripting

# Exploit Title: Rukovoditel ERP & CRM 2.4.1 - 'path' Cross-Site Scripting

Jettweb Php Hazır İlan Sitesi Scripti V2 – SQL Injection

# Exploit Title: Jettweb Php Hazır İlan Sitesi Scripti V2 - SQL Injection

Zeeways Matrimony CMS – SQL Injection

# Exploit Title: Zeeways Matrimony CMS - SQL Injection

Zeeways Jobsite CMS – ‘id’ SQL Injection

# Exploit Title: Zeeways Jobsite CMS - 'id' SQL Injection

Jettweb PHP Hazır Haber Sitesi Scripti V3 – SQL Injection

# Exploit Title: Jettweb PHP Hazır Haber Sitesi Scripti V3 - Multiple Vulnerabilities

Jettweb PHP Hazır Haber Sitesi Scripti V2 – SQL Injection (Authentication Bypass)

# Exploit Title: Jettweb PHP Hazır Haber Sitesi Scripti V2 - Authentication Bypass

Jettweb PHP Hazır Haber Sitesi Scripti V1 – SQL Injection

# Exploit Title: Jettweb PHP Hazır Haber Sitesi Scripti V1 - Multiple Vulnerabilities

Apache CouchDB 2.3.1 – Cross-Site Request Forgery / Cross-Site Scripting

#####################################################################################################################...

Inout Article Base CMS – SQL Injection

# Exploit Title: Inout Article Base CMS - SQL Injection

Meeplace Business Review Script – ‘id’ SQL Injection

# Exploit Title: Meeplace Business Review Script - 'id' SQL Injection

Matri4Web Matrimony Website Script – Multiple SQL Injection

# Exploit Title: Matrimony Website Script - Multiple SQL Injection

Bootstrapy CMS – Multiple SQL Injection

# Exploit Title: Bootstrapy CMS - Multiple SQL Injection

Placeto CMS Alpha v4 – ‘page’ SQL Injection

Placeto CMS Alpha v4 - 'page' SQL Injection

uHotelBooking System – ‘system_page’ SQL Injection

# Exploit Title: uHotelBooking System - 'system_page' SQL Injection

The Company Business Website CMS – Multiple Vulnerabilities

# Exploit Title: The Company Business Website CMS - 'user_name' SQL

Rails 5.2.1 – Arbitrary File Content Disclosure

'''

Netartmedia Vlog System – ’email’ SQL Injection

# Exploit Title: Netartmedia Vlog System - 'email' SQL Injection

Netartmedia Deals Portal – ‘Email’ SQL Injection

# Exploit Title: Netartmedia Deals Portal - 'Email' SQL Injection

PLC Wireless Router GPN2.4P21-C-CN – Cross-Site Request Forgery

# Exploit Title: PLC Wireless Router GPN2.4P21-C-CN -Cross-Site Request Forgery (CSRF)

PLC Wireless Router GPN2.4P21-C-CN – Incorrect Access Control

# Exploit Title: PLC Wireless Router GPN2.4P21-C-CN -Incorrect Access

202CMS v10beta – Multiple SQL Injection

===========================================================================================

Netartmedia PHP Business Directory 4.2 – SQL Injection

# Exploit Title: Netartmedia PHP Business Directory 4.2 - SQL Injection

Netartmedia PHP Dating Site – SQL Injection

# Exploit Title: Netartmedia Php Dating Site - SQL Injection

Netartmedia Jobs Portal 6.1 – SQL Injection

# Exploit Title: Netartmedia Jobs Portal 6.1 - SQL Injection

Netartmedia PHP Real Estate Agency 4.0 – SQL Injection

# Exploit Title: Netartmedia PHP Real Estate Agency 4.0 - SQL Injection

Netartmedia PHP Car Dealer – SQL Injection

# Exploit Title: Netartmedia PHP Car Dealer- SQL Injection

Netartmedia Real Estate Portal 5.0 – SQL Injection

# Exploit Title: Netartmedia Real Estate Portal 5.0 - Multiple SQL Injection

Netartmedia PHP Mall 4.1 – SQL Injection

# Exploit Title: Netartmedia PHP Mall 4.1 - Multiple SQL Injection

Netartmedia Event Portal 2.0 – ‘Email’ SQL Injection

# Exploit Title: Netartmedia Event Portal 2.0 - 'Email' SQL Injection

eNdonesia Portal 8.7 – Multiple Vulnerabilities

===========================================================================================

MyBB Upcoming Events Plugin 1.32 – Cross-Site Scripting

# Exploit Title: MyBB Upcoming Events Plugin 1.32 - Cross-Site Scripting

Gila CMS 1.9.1 – Cross-Site Scripting

# Exploit Title: Gila CMS (search) Cross Site Scripting

TheCarProject 2 – Multiple SQL Injection

===========================================================================================

Moodle 3.4.1 – Remote Code Execution

Laundry CMS – Multiple Vulnerabilities

===========================================================================================

Vembu Storegrid Web Interface 4.4.0 – Multiple Vulnerabilities

# Exploit Title: Vembu Storegrid Web Interface 4.4.0 - Multiple Vulnerabilities

ICE HRM 23.0 – Multiple Vulnerabilities

===========================================================================================

CMS Made Simple Showtime2 Module 3.6.2 – (Authenticated) Arbitrary File Upload

#!/usr/bin/env python

NetData 1.13.0 – HTML Injection

# ************************************************************************

Pegasus CMS 1.0 – ‘extra_fields.php’ Plugin Remote Code Execution

# Exploit Title: Pegasus extra_fields.php Plugin Remote Code Execution

Intel Modular Server System 10.18 – Cross-Site Request Forgery (Change Admin Password)