Online Farm Management System 0.1.0 - Persistent Cross-Site Scripting

Exploit Title: Online Farm Management System 0.1.0 - Persistent Cross-Site Scripting Date: 2020-06-29 Exploit Author: KeopssGroup0day,Inc Vendor Homepage: https://www.sourcecodester.com/php/14198/online-farm-management-system-phpmysql.html Software Link:...

Responsive Online Blog 1.0 SQL Injection Vulnerability (2)

Exploit for php platform in category web applications Exploit Title: Responsive Online Blog 1.0 - 'single.php?id=' SQL Injection Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage:...

Responsive Online Blog 1.0 - (id) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Responsive Online Blog 1.0 - 'id' SQL Injection Exploit Author: Eren Şimşek Vendor Homepage: https://www.sourcecodester.com/php/14194/responsive-online-blog-website-using-phpmysql.html Software Link:...

Responsive Online Blog 1.0 - 'id' SQL Injection

Exploit Title: Responsive Online Blog 1.0 - 'id' SQL Injection Date: 2020-06-23 Exploit Author: Eren Şimşek Vendor Homepage: https://www.sourcecodester.com/php/14194/responsive-online-blog-website-using-phpmysql.html Software Link:...

Command execution vulnerability exists in imcat (CNVD-2020-31503)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. A command execution vulnerability exists in imcat. An attacker can exploit the vulnerability to gain control of the server...

SQL injection vulnerability in beescm backend ad***.php file

BEESCMS is PHP + MYSQL architecture, multi-language system, content modules are easy to expand, diversified template styles, template production is simple and powerful, professional SEO optimization can meet the corporate website, foreign trade websites, institutions, educational institutions,...

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2018-1224)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

elaniin CMS 1.0 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: elaniin CMS 1.0 - Authentication Bypass Author: riamloo Vendor Homepage: https://elaniin.com/ github == https://github.com/elaniin/ Software Link: https://github.com/elaniin/CMS/archive/master.zip Version: 1 CVE: N/A Tested on:...

XSS vulnerability in X5music V2.0 frontend user folder do.php

X5music Music Management System is a music management system and video management system compiled with php+mysql. X5music V2.0 has an XSS vulnerability in the front user folder do.php, which can be exploited by attackers to obtain cookie information...

Code execution vulnerability in SeaCMS backend (CNVD-2019-45351)

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. A code execution vulnerability exists in the background of SeaCMS, which can be exploited by attackers to execute malicious code...

waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 - (description) Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 - 'description' Cross-Site Scripting Exploit Author: Cakes Vendor Homepage: waldronmatt/FullCalendar-BS4-PHP-MySQL-JSON Software Link:...

waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 - description Cross-Site Scripting

waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 - description Cross-Site Scripting Exploit Title: waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 - 'description' Cross-Site Scripting Date: 2019-10-28 Exploit Author: Cakes Vendor Homepage: waldronmatt/FullCalendar-BS4-PHP-MySQL-JSON Software Lin...

waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 - 'start' SQL Injection

Exploit Title: waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 - 'start' SQL Injection Date: 2019-10-28 Exploit Author: Cakes Vendor Homepage: waldronmatt/FullCalendar-BS4-PHP-MySQL-JSON Software Link: https://github.com/waldronmatt/FullCalendar-BS4-PHP-MySQL-JSON.git Version: 1.21 Tested on:...

SQL Injection Vulnerability in B2C_UQ Cloud Business System ca***.cl***.php File

UQ Cloud Business System B2C version is a compact e-commerce system, the platform is developed by PHP7.0+Mysql. SQL injection vulnerability exists in the B2CUQ Cloud Business System ca.cl.php file, which can be exploited by attackers to obtain sensitive database information...

YzmCMS Cross-Site Scripting Vulnerability (CNVD-2022-21178)

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture developed by Yuan Zhimeng alone. YzmCMS 5.1 suffers from a cross-site scripting vulnerability. Attackers can use this vulnerability through the admin/systemmanage/userconfigadd.html title parameter to...

Osclas Path Traversal Vulnerability

Osclass is an open source content management system CMS based on PHP and MySQL for creating and managing classified advertisement websites. A path traversal vulnerability exists in Osclas version 3.6.1. The vulnerability stems from a failure of a networked system or product to properly filter...

UX365 website category navigation system v1.3.4ar***.php file has xss vulnerability

Uc365 website classification navigation system is a navigation management system based on PHP + MYSQL development and construction. An xss vulnerability exists in the file ar.php in the Uke365 website category navigation system v1.3.4, which can be exploited by an attacker to obtain administrator...

File Deletion Vulnerability in NetSoft Zhicheng Classifieds Website System

NetSoft Zhicheng classifieds website system is a php mysql based website building system. NetSoft Zhicheng classifieds website system file deletion vulnerability, an attacker can use the vulnerability to delete arbitrary files...

CmsEasy website builder system has xss vulnerability

CMSeasy is a web content management system based on PHP+Mysql architecture and a PHP development platform. The use of modular development, easy to use features easy to expand, can be oriented to large and medium-sized sites to provide heavyweight website construction solutions. There is an xss...

ResourceSpace 8.6 - watched_searches.php SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: ResourceSpace =8.6 'watchedsearches.php' SQL Injection Dork: intext:"Powered by ResourceSpace" Exploit Author: dd email protected Vendor Homepage: https://www.resourcespace.com/ Software Link: https://www.resourcespace.com/get...