Quickad 4.0 – SQL Injection
# # # # #
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Tumder 2.1 – SQL Injection
# # # # #
Zechat 1.5 – SQL Injection
# # # # #
Wchat 1.5 – SQL Injection
# # # # #
Easy Car Script 2014 – SQL Injection
# # # # #
Affiligator 2.1.0 – SQL Injection
# # # # #
LiveCRM SaaS Cloud 1.0 – SQL Injection
# # # # #
NEC Univerge SV9100/SV8100 WebPro 10.0 – Configuration Download
NEC Univerge SV9100/SV8100 WebPro 10.0 Remote Configuration Download
CentOS Web Panel 0.9.8.12 – ‘row_id’ / ‘domain’ SQL Injection
Document Title:
OTRS 5.0.x/6.0.x – Remote Command Execution (1)
# Exploit Title: OTRS 5.0.x/6.0.x - Remote Command Execution (1)
CentOS Web Panel 0.9.8.12 – Multiple Vulnerabilities
Document Title:
Shopware 5.2.5/5.3 – Cross-Site Scripting
Document Title:
Oracle JDeveloper 11.1.x/12.x – Directory Traversal
[+] Credits: John Page (aka hyp3rlinx)
GitStack 2.3.10 – Remote Code Execution
# Exploit: GitStack 2.3.10 Unauthenticated Remote Code Execution
SugarCRM 3.5.1 – Cross-Site Scripting
# Exploit Title: sugarCRM 3.5.1 XSS refeclted
Belkin N600DB Wireless Router – Multiple Vulnerabilities
# Exploit Title: Belkin N600DB Wireless Router | Multiple Vulnerabilities
Reservo Image Hosting Script 1.5 – Cross-Site Scripting
# Exploit Title: Reservo Image Hosting Script 1.5 - Cross Site Scripting
GitStack – Remote Code Execution
## Vulnerability Summary
DarkComet (C2 Server) – File Upload
#!/usr/bin/env python3
D-Link DNS-325 ShareCenter < 1.05B03 - Multiple Vulnerabilities
D-Link DNS-325 ShareCenter Multiple Vulnerabilities
D-Link DNS-343 ShareCenter < 1.05 - Command Injection
D-Link DNS-343 ShareCenter Remote Root
Flash Operator Panel 2.31.03 – Command Execution
Document Title:
ILIAS < 5.2.4 - Cross-Site Scripting
# Exploit Title: Cross Site Scripting in ILIAS CMS 5.2.3
Oracle PeopleSoft 8.5x – Remote Code Execution
# Exploit Title: RCE vulnerability in monitor service of PeopleSoft 8.54, 8.55, 8.56
Adminer 4.3.1 – Server-Side Request Forgery
[+] Credits: John Page (aka hyp3rlinx)
Oracle E-Business Suite 12.1.3/12.2.x – Open Redirect
# Exploit Title: Oracle E-Business suite Open Redirect
RISE 1.9 – ‘search’ SQL Injection
# Exploit Title: RISE Ultimate Project Manager 1.9 - SQL Injection
PerfexCRM 1.9.7 – Arbitrary File Upload
# Exploit Title: PerfexCRM 1.9.7 – Unrestricted php5 File upload
ImgHosting 1.5 – Cross-Site Scripting
# Exploit Title: ImgHosting Image Storage System 1.5 - Cross-Site-Scripting
pfSense < 2.1.4 - 'status_rrd_graph_img.php' Command Injection
#!/usr/bin/env python3
Xnami 1.0 – Cross-Site Scripting
# Exploit Title: Xnami Image Sharing - Persistent XSS Vulnerability
SAP NetWeaver J2EE Engine 7.40 – SQL Injection
#!/usr/bin/env python
Joomla! Component Easydiscuss < 4.0.21 - Cross-Site Scripting
# Exploit Title: Joomla Plugin Easydiscuss
WordPress Plugin Events Calendar – ‘event_id’ SQL Injection
# Exploit Title: Wichipi Events Calendar - SQL Injection
Muviko 1.1 – SQL Injection
# Exploit Title: Muviko 1.1 - Multiple SQL Injection
WordPress Plugin Service Finder Booking < 3.2 - Local File Disclosure
# Exploit Title: Worpress Plugin Service Finder Booking < 3.2 - Local File Disclosure
Synology Photostation < 6.7.2-3429 - Multiple Vulnerabilities
Synology Photostation Multiple Vulnerabilities