MyBB Visual Editor 1.8.18 – Cross-Site Scripting
# Title: MyBB Visual Editor 1.8.18 - Cross-Site Scripting
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
LG SuperSign EZ CMS 2.5 – Remote Code Execution
# Exploit Title: LG SuperSign EZ CMS 2.5 - Remote Code Execution
Joomla! Component CW Article Attachments 1.0.6 – ‘id’ SQL Injection
# Exploit Title: Joomla! CW Article Attachments 1.0.6 - 'id' SQL Injection
Navigate CMS 2.8 – Cross-Site Scripting
# Title: Navigate CMS 2.8 - Cross-Site Scripting
Collectric CMU 1.0 – ‘lang’ Hard-Coded Credentials / SQL injection
# Exploit Title: Collectric CMU 1.0 - 'lang' SQL injection
LG SuperSign EZ CMS 2.5 – Local File Inclusion
# Exploit Title: LG SuperSign EZ CMS 2.5 - Local File Inclusion
WordPress Plugin Localize My Post 1.0 – Local File Inclusion
# Exploit Title: WordPress Plugin Localize My Post 1.0 - Local File Inclusion
WordPress Plugin Wechat Broadcast 1.2.0 – Local File Inclusion
# Exploit Title: WordPress Plugin Wechat Broadcast 1.2.0 - Local File Inclusion
Roundcube rcfilters plugin 2.1.6 – Cross-Site Scripting
# Exploit Title: Roundcube rcfilters plugin 2.1.6 - Cross-Site Scripting
WordPress Plugin Arigato Autoresponder and Newsletter 2.5 – Blind SQL Injection / Reflected Cross-Site Scripting
Title: Blind SQL injection and multiple reflected XSS vulnerabilities in Wordpress Plugin Arigato Autoresponder and N...
Joomla! Component JCK Editor 6.4.4 – ‘parent’ SQL Injection
# Title: Joomla Component JCK Editor 6.4.4 - 'parent' SQL Injection
Netis ADSL Router DL4322D RTK 2.1.1 – Cross-Site Scripting
# Exploit Title: Netis ADSL Router DL4322D RTK 2.1.1 - Cross-Site Scripting
WordPress Plugin Survey & Poll 1.5.7.3 – ‘sss_params’ SQL Injection
# Exploit Title: Wordpress Plugin Survey & Poll 1.5.7.3 - 'sss_params' SQL Injection
Apache Syncope 2.0.7 – Remote Code Execution
# Exploit Title: Apache Syncope 2.0.7 - Remote Code Execution
Apache Portals Pluto 3.0.0 – Remote Code Execution
# Exploit Title: Apache Portals Pluto 3.0.0 - Remote Code Execution
LG Smart IP Camera 1508190 – Backup File Download
# Exploit Title: LG Smart IP Camera 1508190 - Backup File Download
MyBB 1.8.17 – Cross-Site Scripting
# Exploit Title: MyBB 1.8.17 - Cross-Site Scripting
IBM Identity Governance and Intelligence 5.2.3.2 / 5.2.4 – SQL Injection
# Exploit Title: [Unauthenticated Remote SQLi]
SynaMan 4.0 build 1488 – SMTP Credential Disclosure
# Exploit Author: bzyo
SynaMan 4.0 build 1488 – (Authenticated) Cross-Site Scripting
# Exploit Author: bzyo
Rubedo CMS 3.4.0 – Directory Traversal
# Exploit Title: Rubedo CMS 3.4.0 - Directory Traversal
CirCarLife SCADA 4.3.0 – Credential Disclosure
# Exploit Title: CirCarLife SCADA 4.3.0 - Credential Disclosure
Bayanno Hospital Management System 4.0 – Cross-Site Scripting
# Exploit Title: Bayanno Hospital Management System 4.0 - Cross-Site Scripting
LW-N605R 12.20.2.1486 – Remote Code Execution
# Title: LW-N605R 12.20.2.1486 - Remote Code Execution
QNAP Photo Station 5.7.0 – Cross-Site Scripting
# Exploit Title: QNAP Photo Station 5.7.0 - Cross-Site Scripting
Softneta MedDream PACS Server Premium 6.7.1.1 – Directory Traversal
# Exploit Title: Softneta MedDream PACS Server Premium 6.7.1.1 - Directory Traversal
MedDream PACS Server Premium 6.7.1.1 – ’email’ SQL Injection
# Exploit Title: MedDream PACS Server Premium 6.7.1.1 - 'email' SQL Injection
D-Link Dir-600M N150 – Cross-Site Scripting
# Exploit Title: D-Link Dir-600M N150 - Cross-Site Scripting
WirelessHART Fieldgate SWG70 3.0 – Directory Traversal
# Exploit Title: WirelessHART Fieldgate SWG70 3.0 - Directory Traversal
Apache Roller 5.0.3 – XML External Entity Injection (File Disclosure)
# Exploit Title: Apache Roller 5.0.3 - XML External Entity Injection (File Disclosure)
Jorani Leave Management 0.6.5 – (Authenticated) ‘startdate’ SQL Injection
# Exploit Title: Jorani Leave Management 0.6.5 – 'startdate' SQL Injection
Jorani Leave Management 0.6.5 – Cross-Site Scripting
# Exploit Title: Jorani Leave Management System 0.6.5 – Cross-Site Scripting
NovaRad NovaPACS Diagnostics Viewer 8.5 – XML External Entity Injection (File Disclosure)
# Title: NovaRad NovaPACS Diagnostics Viewer 8.5 - XML External Entity Injection (File Disclosure)
Tenda ADSL Router D152 – Cross-Site Scripting
# Exploit Title: Tenda D152 ADSL Router - Cross-Site Scripting
RPi Cam Control < 6.4.25 - 'preview.php' Remote Command Execution
#!/usr/bin/python
mooSocial Store Plugin 2.6 – SQL Injection
# Exploit Title: mooSocial Store Plugin 2.6 - SQL Injection
Simple POS 4.0.24 – ‘columns[0][search][value]’ SQL Injection
# Exploit Title: Simple POS 4.0.24 - 'columns[0][search][value]' SQL Injection
PHP File Browser Script 1 – Directory Traversal
# Exploit Title: PHP File Browser Script 1 - Directory Traversal
Logicspice FAQ Script 2.9.7 – Remote Code Execution
# Exploit Title: Logicspice FAQ Script 2.9.7 - Remote Code Execution
Online Quiz Maker 1.0 – ‘catid’ SQL Injection
# Exploit Title: Online Quiz Maker 1.0 - 'catid' SQL Injection
Admidio 3.3.5 – Cross-Site Request Forgery (Change Permissions)
# Exploit Title: Admidio 3.3.5 - Cross-Site Request Forgery (Change Permissions)
FsPro Labs Event Log Explorer v4.6.1.2115 – XML External Entity Injection
# Title: FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection
DamiCMS 6.0.0 – Cross-Site Request Forgery (Change Admin Password)
# Exploit Title: DamiCMS 6.0.0 - Cross-Site Request Forgery (Change Admin Password)
Vox TG790 ADSL Router – Cross-Site Scripting
# Title: Vox TG790 ADSL Router - Cross-Site Scripting
Cybrotech CyBroHttpServer 1.0.3 – Cross-Site Scripting
# Exploit Title: Cybrotech CyBroHttpServer 1.0.3 - Cross-Site Scripting
WordPress Plugin Quizlord 2.0 – Cross-Site Scripting
# Exploit Title: WordPress Plugin Quizlord 2.0 - Cross-Site Scripting
DLink DIR-601 – Credential Disclosure
# Exploit Title: DLink DIR-601 - Credential Disclosure
WordPress Plugin Jibu Pro 1.7 – Cross-Site Scripting
# Exploit Title: WordPress Plugin Jibu Pro 1.7 - Cross-Site Scripting
Cybrotech CyBroHttpServer 1.0.3 – Directory Traversal
# Exploit Title: Cybrotech CyBroHttpServer 1.0.3 - Directory Traversal