webapps

Reservic 1.0 – ‘id’ SQL Injection

# Exploit Title: Reservic - Reserves Management System 1.0 - SQL Injection

Coman 1.0 – ‘id’ SQL Injection

# Exploit Title: Coman - Company Management System 1.0 - SQL Injection

Kepler Wallpaper Script 1.1 – SQL Injection

# Exploit Title: Kepler Wallpaper Script 1.1 - SQL Injection

Pydio / AjaXplorer < 5.0.4 - (Unauthenticated) Arbitrary File Upload

# Exploit Title: Unauthenticated Arbitrary File Upload Vulnerability In Pydio/AjaXplorer 5.0.3 – 3.3.5

Joomla! Core 3.9.1 – Persistent Cross-Site Scripting in Global Configuration Textfilter Settings

# Exploit Title: [Joomla Global Configuration Text Filter settings Stored XSS Vulnerability]

phpTransformer 2016.9 – Directory Traversal

# Exploit Title: phpTransformer 2016.9 - Directory Traversal

phpTransformer 2016.9 – SQL Injection

# Exploit Title: phpTransformer 2016.9 - SQL Injection

SeoToaster Ecommerce / CRM / CMS 3.0.0 – Local File Inclusion

# Exploit Title: SeoToaster Ecommerce 3.0.0 - Local File Inclusion

Oracle Reports Developer Component 12.2.1.3 – Cross-site Scripting

# Exploit Title: [Cross-site Scripting (XSS)]

Blueimp’s jQuery File Upload 9.22.0 – Arbitrary File Upload Exploit

# Exploit Title: Exploit for Blueimp's jQuery File Upload

Coship Wireless Router 4.0.0.48 / 4.0.0.40 / 5.0.0.54 / 5.0.0.55 / 10.0.0.49 – Unauthenticated Admin Password Reset

GL-AR300M-Lite 2.27 – (Authenticated) Command Injection / Arbitrary File Download / Directory Traversal

# Exploit Title: GL-AR300M-Lite Authenticated Command injection - Arbitrary file download - Directory Traversal

ShoreTel / Mitel Connect ONSITE 19.49.5200.0 – Remote Code Execution

# Exploit Title: ShoreTel / Mitel Connect ONSITE ST14.2 Remote Code Execution

doorGets CMS 7.0 – Arbitrary File Download

# Exploit Title: doorGets CMS 7.0 - Arbitrary File Download

Roxy Fileman 1.4.5 – Arbitrary File Download

# Exploit Title: Roxy Fileman 1.4.5 - Arbitrary File Download

Fortinet FortiGate FortiOS < 6.0.3 - LDAP Credential Disclosure

#/usr/bin/python3

ownDMS 4.7 – SQL Injection

# Exploit Title: ownDMS 4.7 - SQL Injection

AudioCode 400HD – Command Injection

# [CVE-2018-10093] Remote command injection vulnerability in AudioCode IP phones

Portier Vision 4.4.4.2 / 4.4.4.6 – SQL Injection

-----BEGIN PGP SIGNED MESSAGE-----

Bigcart – Ecommerce Multivendor System 1.0 – SQL Injection

# Exploit Title: Bigcart - Ecommerce Multivendor System 1.0 - SQL Injection

Umbraco CMS 7.12.4 – (Authenticated) Remote Code Execution

# Exploit Title: Umbraco CMS - Remote Code Execution by authenticated administrators

Job Portal Platform 1.0 – SQL Injection

# Exploit Title: Job Portal 1.0 - SQL Injection

Real Estate Custom Script 2.0 – SQL Injection

# Exploit Title: Real Estate Custom Script 2.0 - SQL Injection

ThinkPHP 5.X – Remote Command Execution

# Exploit Title: thinkphp 5.X RCE

Hucart CMS 5.7.4 – Cross-Site Request Forgery (Add Administrator Account)

HealthNode Hospital Management System 1.0 – SQL Injection

# Exploit Title: HealthNode Hospital Management System 1.0 - SQL Injection

Lenovo R2105 – Cross-Site Request Forgery (Command Execution)

# Exploit Title: Lenovo R2105 Remote Code Execution through CSRF

Cleanto 5.0 – SQL Injection

# Exploit Title: Cleanto 5.0 - SQL Injection

Find a Place CMS Directory 1.5 – SQL Injection

# Exploit Title: Locations CMS 1.5 - SQL Injection

Craigs Classified Ads CMS Theme 1.0.2 – SQL Injection

# Exploit Title: Craigs CMS 1.0.2 - SQL Injection

Live Call Support Widget 1.5 – Remote Code Execution / SQL Injection

# Exploit Title: Live Call Support 1.5 - Remote Code Execution / SQL Injection

Live Call Support Widget 1.5 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: Live Call Support 1.5 - Cross-Site Request Forgery (Add Admin)

Twilio WEB To Fax Machine System Application 1.0 – SQL Injection

# Exploit Title: Fax Machine System Application 1.0 - SQL Injection

Modern POS 1.3 – SQL Injection

# Exploit Title: Modern POS 1.3 - SQL Injection

Modern POS 1.3 – Arbitrary File Download

# Exploit Title: Modern POS 1.3 - Arbitrary File Download

Horde Imp – ‘imap_open’ Remote Command Execution

# Exploit Title: Horde Imp Unauthenticated Remote Command Execution

i-doit CMDB 1.12 – SQL Injection

# Exploit Title: i-doit CMDB 1.12 - SQL Injection

i-doit CMDB 1.12 – Arbitrary File Download

# Exploit Title: i-doit CMDB 1.12 - Arbitrary File Download

Across DR-810 ROM-0 – Backup File Disclosure

#Exploit Title: Across DR-810 ROM-0 Backup - File Disclosure(Sensitive Information)

Joomla! Component JoomCRM 1.1.1 – SQL Injection

# Exploit Title: Joomla! Component JoomCRM 1.1.1 - SQL Injection

Joomla! Component JoomProject 1.1.3.2 – Information Disclosure

# Exploit Title: Joomla! Component JoomProject 1.1.3.2 - Information Disclosure

Adapt Inventory Management System 1.0 – SQL Injection

# Exploit Title: Adapt Inventory Management System 1.0 - SQL Injection

OpenSource ERP 6.3.1. – SQL Injection

#Exploit Title: OpenSource ERP SQL Injection

eBrigade ERP 4.5 – SQL Injection

# Exploit Title: eBrigade ERP 4.5 - SQL Injection

Event Locations 1.0.1 – ‘id’ SQL Injection

# Exploit Title: Event Locations 1.0.1 - SQL Injection

Event Calendar 3.7.4 – ‘id’ SQL Injection

# Exploit Title: Event Calendar 3.7.4 - SQL Injection

MLMPro 1.0 – SQL Injection

# Exploit Title: Matrix MLM Script 1.0 - SQL Injection

Architectural 1.0 – ’email’ SQL Injection

# Exploit Title: Architectural Cms 1.0 - SQL Injection

Shield CMS 2.2 – ’email’ SQL Injection

# Exploit Title: SHIELD - Freelancer Content Management System 2.2 - SQL Injection / CSRF

doitX 1.0 – ‘search’ SQL Injection

# Exploit Title: doitX 1.0 - SQL Injection