webapps

Wecodex Hotel CMS 1.0 – ‘Admin Login’ SQL Injection

# Exploit Title: Wecodex Hotel CMS 1.0 - 'Admin Login' SQL Injection

Library CMS 1.0 – SQL Injection

# Exploit Title: Library CMS 1.0 - SQL Injection

School Management System CMS 1.0 – ‘username’ SQL Injection

# Exploit Title: School Management System CMS 1.0 - Admin Login SQL

SAT CFDI 3.3 – SQL Injection

# Exploit Title: SAT CFDI 3.3 - SQL Injection

Wecodex Store Paypal 1.0 – SQL Injection

# Exploit Title: Wecodex Store Paypal 1.0 - SQL Injection

Shipping System CMS 1.0 – SQL Injection

# Exploit Title: Shipping System CMS 1.0 - SQL Injection

GPSTracker 1.0 – ‘id’ SQL Injection

# Exploit Title: GPSTracker v1.0 - Login Page SQL Injection

Online Store System CMS 1.0 – SQL Injection

# Exploit Title: Online Store System CMS 1.0 - SQL Injection

Gigs 2.0 – ‘username’ SQL Injection

# Exploit Title: Gigs v2.0 - Login Page SQL Injection

Mobile Card Selling Platform 1 – Cross-Site Request Forgery

# Exploit Title: Mcard - Mobile Card Selling Platform 1 - Cross-Site Request Forgery

PHP Dashboards 4.5 – SQL Injection

# Exploit Title: PHP Dashboards 4.5 - SQL Injection

PHP Dashboards 4.5 – ’email’ SQL Injection

# Exploit Title: PHP Dashboards v4.5 - Registration Page SQL Injection

MySQL Blob Uploader 1.7 – ‘home-filet-edit.php’ SQL Injection

# Exploit Title: MySQL Blob Uploader 1.7 - 'home-filet-edit.php' SQL Injection

MySQL Blob Uploader 1.7 – ‘home-filet-edit.php’ SQL Injection / Cross-Site Scripting

# Exploit Title: MySQL Blob Uploader 1.7 - 'home-filet-edit.php' SQL Injection / Cross-Site Scripting

MySQL Blob Uploader 1.7 – ‘home-file-edit.php’ SQL Injection / Cross-Site Scripting

# Exploit Title: MySQL Blob Uploader 1.7 - 'home-file-edit.php' SQL Injection / Cross-Site Scripting

MySQL Blob Uploader 1.7 – ‘download.php’ SQL Injection / Cross-Site Scripting

# Exploit Title: MySQL Blob Uploader 1.7 - 'download.php' SQL Injection / Cross-Site Scripting

MySQL Smart Reports 1.0 – ‘id’ SQL Injection / Cross-Site Scripting

# Exploit Title: MySQL Smart Reports 1.0 - SQL Injection / Cross-Site Scripting

EasyService Billing 1.0 – ‘p1’ SQL Injection

# Exploit Title: EasyService Billing 1.0 - 'customer-new-s.php' SQL

EasyService Billing 1.0 – SQL Injection / Cross-Site Scripting

# Exploit Title: EasyService Billing 1.0 - 'template_().php' SQL Injection / Cross-Site Scripting

Easy File Uploader 1.7 – SQL Injection / Cross-Site Scripting

# Exploit Title: Easy File Uploader 1.7 - SQL Injection / Cross-Site

NewsBee CMS 1.4 – ‘download.php’ SQL Injection

# Exploit Title: NewsBee CMS 1.4 - 'download.php' SQL Injection

Feedy RSS News Ticker 2.0 – ‘cat’ SQL Injection

# Exploit Title: Feedy RSS News Ticker 2.0 - 'cat' SQL Injection

NewsBee CMS 1.4 – ‘home-text-edit.php’ SQL Injection

# Exploit Title: NewsBee CMS 1.4 - 'home-text-edit.php' SQL Injection

Auto Car 1.2 – ‘car_title’ SQL Injection / Cross-Site Scripting

# Exploit Title: Auto car 1.2 - 'car_title' SQL Injection / Cross-Site Scripting

NewsBee CMS 1.4 – ‘home-text-edit.php’ SQL Injection

# Exploit Title: NewsBee CMS 1.4 - 'home-text-edit.php' SQL Injection

iSocial 1.2.0 – Cross-Site Scripting / Cross-Site Request Forgery

# Exploit Title: iSocial 1.2.0 - Cross-Site Scripting / Cross-Site Request Forgery

ERPnext 11 – Cross-Site Scripting

# Exploit Title: ERPnext 11.x.x - Cross-Site Scripting

PaulPrinting CMS Printing 1.0 – SQL Injection

# Exploit Title: PaulPrinting CMS Printing 1.0 - SQL Injection

Siemens SIMATIC S7-1200 CPU – Cross-Site Scripting

# Exploit Title: Siemens SIMATIC S7-1200 CPU - Cross-Site Scripting

WebSocket Live Chat – Cross-Site Scripting

# Exploit Title: WebSocket Live Chat - Cross-Site Scripting

Zechat 1.5 – SQL Injection / Cross-Site Request Forgery

# Exploit Title: Zechat 1.5 - 'hashtag' / 'v' SQL Injection / Cross site request forgery

Nordex N149/4.0-4.5 – SQL Injection

# Exploit Title: Nordex N149/4.0-4.5 Wind Turbine Web Server - SQL Injection

Wchat PHP AJAX Chat Script 1.5 – Cross-Site Scripting

# Exploit Title: Wchat - Fully Responsive PHP AJAX Chat Script 1.5 - Persistent cross site scripting

Model Agency Media House & Model Gallery 1.0 – Multiple Vulnerabilities

# Exploit Title: Model Agency Media House & Model Gallery 1.0 - Persistent Cross-Site Scripting / Cross-Site Request ...

Merge PACS 7.0 – Cross-Site Request Forgery

# Exploit Title: Merge PACS 7.0 - Cross-Site Request Forgery

Auto Dealership & Vehicle Showroom WebSys 1.0 – Multiple Vulnerabilities

# Exploit Title: Auto Dealership & Vehicle Showroom WebSys 1.0 - Persistent Cross-Site Scripting / Cross-Site Reques...

Schneider Electric PLCs – Cross-Site Request Forgery

# Exploit Title: Schneider Electric PLCs - Cross-Site Request Forgery

Teradek Slice 7.3.15 – Cross-Site Request Forgery

Teradek Cube 7.3.6 – Cross-Site Request Forgery

Teradek VidiU Pro 3.0.3 – Server-Side Request Forgery

Teradek VidiU Pro 3.0.3 SSRF Vulnerability

Teradek VidiU Pro 3.0.3 – Cross-Site Request Forgery

GitBucket 4.23.1 – Remote Code Execution

# Exploit Title: GitBucket 4.23.1 Unauthenticated RCE

Siemens SIMATIC S7-1200 CPU – Cross-Site Request Forgery

# Exploit Title: Siemens SIMATIC S7-1200 CPU - Cross-Site Request Forgery

ManageEngine Recovery Manager Plus 5.3 – Cross-Site Scripting

# Exploit Title: ManageEngine Recovery Manager Plus 5.3 (Build 5330) - Persistent Cross-Site Scripting

Zenar Content Management System – Cross-Site Scripting

# Exploit Title: Zenar Content Management System - Cross-Site Scripting

Flippy DamnFacts – Viral Fun Facts Sharing Script 1.1.0 – Cross-Site Scripting / Cross-Site Request Forgery

# Exploit Title: Flippy DamnFacts - Viral Fun Facts Sharing Script 1.1.0 - Persistent cross site scripting / Cross s...

Private Message PHP Script 2.0 – Cross-Site Scripting

# Exploit Title: Private Message PHP Script 2.0 - Persistent Cross-Site scripting

Superfood 1.0 – Multiple Vulnerabilities

# Exploit Title: Superfood - Restaurants & Online Food Order System 1.0 - Persistent cross site scripting / Cross s...

Joomla! Component EkRishta 2.10 – Cross-Site Scripting / SQL Injection

# Exploit Title: Joomla! extension EkRishta 2.10 - Persistent Cross-Site Scripting / SQL Injection

D-Link DSL-3782 – Authentication Bypass

# Exploit Title: D-Link DSL 3782 - Authentication Bypass