TufinOS 2.17 Build 1193 – XML External Entity Injection
# Exploit Title: TufinOS 2.17 Build 1193 - XML External Entity Injection
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Data Center Audit 2.6.2 – ‘username’ SQL Injection
# Exploit Title: Data Center Audit 2.6.2 - 'username' SQL Injection
PlayJoom 0.10.1 – ‘catid’ SQL Injection
# Exploit Title: PlayJoom 0.10.1 - 'catid' SQL Injection
LibreHealth 2.0.0 – (Authenticated) Arbitrary File Actions
# Exploit Title: LibreHealth 2.0.0 - Arbitrary File Actions
OpenBiz Cubi Lite 3.0.8 – ‘username’ SQL Injection
# Exploit Title: OpenBiz Cubi Lite 3.0.8 - 'username' SQL Injection
OOP CMS BLOG 1.0 – ‘search’ SQL Injection
# Exploit Title: OOP CMS BLOG 1.0 - 'search' SQL Injection
Grocery crud 1.6.1 – ‘search_field’ SQL Injection
# Exploit Title: Grocery crud 1.6.1 - 'search_field' SQL Injection
OOP CMS BLOG 1.0 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: OOP CMS BLOG 1.0 - Cross-Site Request Forgery (Add Admin)
CMS Made Simple 2.2.7 – (Authenticated) Remote Code Execution
# Exploit Title: CMS Made Simple 2.2.7 - Remote Code Execution
Voovi Social Networking Script 1.0 – ‘user’ SQL Injection
Exploit Title: Voovi Social Networking Script 1.0 - 'user' SQL Injection
Royal TS/X – Information Disclosure
RoyalTS/X Exploit
PHP Proxy 3.0.3 – Local File Inclusion
# Exploit Title: PHP-Proxy 3.0.3 - Local File Inclusion
Mongo Web Admin 6.0 – Information Disclosure
# Exploit Title: Mongo Web Admin 6.0 - Information Disclosure
Poppy Web Interface Generator 0.8 – Arbitrary File Upload
# Exploit Title: Poppy Web Interface Generator 0.8 - Arbitrary File Upload
WebVet 0.1a – ‘id’ SQL Injection
# Exploit Title: WebVet 0.1a - 'id' SQL Injection
Advantech WebAccess SCADA 8.3.2 – Remote Code Execution
# Exploit Title: Advantech WebAccess SCADA 8.3.2 - Remote Code Execution
SiAdmin 1.1 – ‘id’ SQL Injection
# Exploit Title: SiAdmin 1.1 - 'id' SQL Injection
Yot CMS 3.3.1 – ‘aid’ SQL Injection
# Exploit Title: Yot CMS 3.3.1 - 'aid' SQL Injection
qdPM 9.1 – ‘filter_by’ SQL Injection
# Exploit Title: qdPM 9.1 - 'filter_by' SQL Injection
Gate Pass Management System 2.1 – ‘login’ SQL Injection
# Exploit Title: Gate Pass Management System 2.1 - 'login' SQL Injection
Jelastic 5.4 – ‘host’ SQL Injection
# Exploit Title: Jelastic 5.4 - 'host' SQL injection
Fantastic Blog CMS 1.0 – ‘id’ SQL Injection
# Exploit Title: Fantastic Blog CMS 1.0 - 'id' SQL Injection
Loadbalancer.org Enterprise VA MAX 8.3.2 – Remote Code Execution
# Exploit Title: Loadbalancer.org Enterprise VA MAX 8.3.2 - Remote Code Execution
CI User Login and Management 1.0 – Arbitrary File Upload
# Exploit Title: CI User Login and Management 1.0 - Arbitrary File Upload
Asaancart Simple PHP Shopping Cart 0.9 – Arbitrary File Upload / SQL Injection
# Exploit Title: Simple PHP Shopping Cart 0.9 - Arbitrary File Upload
Instagram Clone 1.0 – Arbitrary File Upload
# Exploit Title: Instagram Clone 1.0 - Arbitrary File Upload
Notes Manager 1.0 – Arbitrary File Upload
# Exploit Title: Notes Manager 1.0 - Arbitrary File Upload
University Application System 1.0 – SQL Injection / Cross-Site Request Forgery (Add Admin)
# Exploit Title: University Application System 1.0 - SQL Injection / Cross-Site Request Forgery (Add Admin)
Expense Management 1.0 – Arbitrary File Upload
# Exploit Title: Expense Management 1.0 - Arbitrary File Upload
MyBB Downloads 2.0.3 – SQL Injection
# Exploit Title: MyBB Downloads 2.0.3 - SQL Injection
Netgear WiFi Router R6120 – Credential Disclosure
# Exploit Title: NETGEAR WiFi Router R6120 - Credential Disclosure
Webiness Inventory 2.9 – Arbitrary File Upload
# Exploit Title: Webiness Inventory 2.9 - Arbitrary File Upload
phptpoint Pharmacy Management System 1.0 – ‘username’ SQL Injection
# Exploit Title: phptpoint Pharmacy Management System 1.0 - 'username' SQL injection
Electricks eCommerce 1.0 – ‘prodid’ SQL Injection
# Exploit Title: Electricks eCommerce 1.0 - 'prodid' SQL Injection
South Gate Inn Online Reservation System 1.0 – ‘q’ SQL Injection
# Exploit Title: South Gate Inn Online Reservation System 1.0 - 'q' SQL Injection
K-iwi Framework 1775 – SQL Injection
# Exploit Title: K-iwi Framework 1775 - SQL Injection
SaltOS Erp Crm 3.1 r8126 – Database File Download
# Exploit Title: SaltOS Erp, Crm 3.1 r8126 - Database File Download
SaltOS Erp Crm 3.1 r8126 – SQL Injection (2)
# Exploit Title: SaltOS Erp, Crm 3.1 r8126 - SQL Injection
SaltOS Erp Crm 3.1 r8126 – SQL Injection
# Exploit Title: SaltOS Erp, Crm 3.1 r8126 - SQL Injection
E-Negosyo System 1.0 – SQL Injection
# Exploit Title: E-Negosyo System 1.0 - SQL Injection
RhinOS CMS 3.x – Arbitrary File Download
# Exploit Title: RhinOS CMS 3.x - Arbitrary File Download
PayPal-Credit Card-Debit Card Payment 1.0 – SQL Injection
# Exploit Title: PayPal/Credit Card/Debit Card Payment 1.0 - SQL Injection
School Attendance Monitoring System 1.0 – SQL Injection
# Exploit Title: School Attendance Monitoring System 1.0 - SQL Injection
School Attendance Monitoring System 1.0 – Arbitrary File Upload
# Exploit Title: School Attendance Monitoring System 1.0 - Arbitrary File Upload
School Attendance Monitoring System 1.0 – Cross-Site Request Forgery (Update Admin)
# Exploit Title: School Attendance Monitoring System 1.0 - Cross-Site Request Forgery (Update Admin)
School Event Management System 1.0 – Cross-Site Request Forgery (Update Admin)
# Exploit Title: School Event Management System 1.0 - Cross-Site Request Forgery (Update Admin)
School Event Management System 1.0 – Arbitrary File Upload
# Exploit Title: School Event Management System 1.0 - Arbitrary File Upload
School Event Management System 1.0 – SQL Injection
# Exploit Title: School Event Management System 1.0 - SQL Injection