webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Joomla! Component Kubik-Rubik Simple Image Gallery Extended (SIGE) 3.2.3 – Cross-Site Scripting
# Exploit Title: Joomla! Component SIGE version
Twig < 2.4.4 - Server Side Template Injection
Vulnerability details:
UserSpice 4.3 – Blind SQL Injection
#!/usr/env/python
TV – Video Subscription – Authentication Bypass SQL Injection
# Exploit Title: TV - Video Subscription - Authentication Bypass
EPIC MyChart – X-Path Injection
# Exploit Title: Epic Systems Corporation MyChart X-Path Injection
Dell EMC Isilon OneFS – Multiple Vulnerabilities
Core Security - Corelabs Advisory
userSpice 4.3 – Cross-Site Scripting
Application UserSpice PHP user management
SOA School Management – ‘access_login’ SQL Injection
# Exploit Title: SOA - School Management Software with Integrated
Social Oauth Login PHP – Authentication Bypass
# Exploit Title: Social Oauth Login PHP - Authentication Bypass
NAT32 2.2 Build 22284 – Cross-Site Request Forgery
[+] Credits: hyp3rlinx
NAT32 2.2 Build 22284 – Remote Command Execution
[+] Credits: hyp3rlinx
News Website Script 2.0.4 – ‘search’ SQL Injection
##################################################################
TypeSetter CMS 5.1 – Cross-Site Request Forgery
# Exploit Title: TypeSetter CMS 5.1 Cross Site Request Forgery
TypeSetter CMS 5.1 – ‘Host’ Header Injection
# Exploit Title: TypeSetter CMS 5.1 Host Header Injection
LogicalDOC Enterprise 7.7.4 – Root Remote Code Execution
LogicalDOC Enterprise 7.7.4 Post-Auth Command Execution Via Binary Path Manipulation
LogicalDOC Enterprise 7.7.4 – User Enumeration
LogicalDOC Enterprise 7.7.4 Username Enumeration Weakness
LogicalDOC Enterprise 7.7.4 – Directory Traversal
LogicalDOC Enterprise 7.7.4 Multiple Directory Traversal Vulnerabilities
Readymade Video Sharing Script 3.2 – ‘search’ SQL Injection
##################################################################
Paypal Clone Script 1.0.9 – ‘id’ / ‘acctype’ SQL Injection
# Exploit Title: Paypal / Money Transfer Clone Script 1.0.9 - SQL Injection
Multi Language Olx Clone Script – Cross-Site Scripting
######################################################################################
Naukri Clone Script 3.0.3 – ‘indus’ SQL Injection
# Exploit Title: Naukri Clone Script 3.0.3 - 'indus' SQL Injection
Entrepreneur Dating Script 2.0.2 – Authentication Bypass
# Exploit Title: Entrepreneur Dating Script 2.0.2 - Authentication Bypass
Online Test Script 2.0.7 – ‘cid’ SQL Injection
# Exploit Title: Online Test Script 2.0.7 - 'cid' SQL Injection
Netis WF2419 Router – Cross-Site Scripting
# Exploit Title: Netis-WF2419 HTML Injection
Student Profile Management System Script 2.0.6 – Authentication Bypass
# Exploit title: Student Profile Management System Script 2.0.6 - Admin