2628 matches found
File upload vulnerability exists in Swordfish Forum (CNVD-2020-49099)
Swordfish Forum is a bbs forum system. A file upload vulnerability exists in Swordfish Forum. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
File Upload Vulnerability in MCMS Backend
MCMS is a website building system of MINGFEI TECHNOLOGY CO. A file upload vulnerability exists in the MCMS backend. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
Vehicle Parking Management System 1.0 SQL Injection
Exploit Title: Vehicle Parking Management System 1.0 - Authentication Bypass Date: 2020-07-16 Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage: https://phpgurukul.com/vehicle-parking-management-system-using-php-and-mysql/ Software...
RiteCMS 2.2.1 - Remote Code Execution
Exploit Title: RiteCMS 2.2.1 - Remote Code Execution Date: 2020-07-03 Exploit Author: Enes Özeser Vendor Homepage: http://ritecms.com/ Version: 2.2.1 Tested on: Linux 1- Go to following url. http://CHANGE-THIS/ritecms/cms/ 2- Default username and password is admin:admin. 3- Go "Filemanager" and...
Client Management System 1.0 SQL Injection
Exploit Title: Client Management System 1.0 - 'searchdata' SQL Injection Date: 2020-07-14 Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage: https://phpgurukul.com/client-management-system-using-php-mysql/ Software Link:...
Cyber Cafe Management System SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Cyber Cafe Management System - Authentication Bypass Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage:...
Teachers Record Management System 1.0 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Teachers Record Management System 1.0 - 'searchteacher' SQL Injection Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage:...
Teachers Record Management System 1.0 SQL Injection
Exploit Title: Teachers Record Management System 1.0 - 'searchteacher' SQL Injection Date: 2020-07-14 Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage: https://phpgurukul.com/teachers-record-management-system-using-php-and-mysql/...
Client Management System 1.0 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Client Management System 1.0 - 'searchdata' SQL Injection Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage:...
RiteCMS 2.2.1 Remote Code Execution
Exploit Title: RiteCMS 2.2.1 - Authenticated Remote Code Execution Date: 2020-07-03 Exploit Author: Enes Özeser Vendor Homepage: http://ritecms.com/ Version: 2.2.1 Tested on: Linux 1- Go to following url. http://HOST/cms/ 2- Default username and password is admin:admin. We must know login...
Publicly Available Tools Seen in Cyber Incidents Worldwide
Summary This report is a collaborative research effort by the cyber security authorities of five nations: Australia, Canada, New Zealand, the United Kingdom, and the United States.12345 In it we highlight the use of five publicly available tools, which have been used for malicious purposes in...
File Upload Vulnerability in SDCMS
Times Web Information Management System abbreviation: SDCMS is a portal system developed with asp+access. A file upload vulnerability exists in SDCMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
File Upload Vulnerability in UFIDA NC Cloud
UFIDA NC Cloud is a digital cloud platform for large enterprises, serving large enterprises in business innovation, management change and digital transformation. A file upload vulnerability exists in UFIDA NC Cloud. An attacker can exploit the vulnerability to upload a webshell and gain server...
Arbitrary File Upload Vulnerability in Central Rong Technology Development Group Limited's Website Building System
Ltd. is an IT industry solutions and technical services provider, covering mobile application software development, system software development, artificial intelligence, big data and so on, a comprehensive large-scale technical services company. There is an arbitrary file upload vulnerability in...
Gila CMS 1.11.8 CVE-2020-5515 - SQL Injection
CVE-2020-5515 Gila CMS version 1.11.8 suffers from a remote SQL injection vulnerability. Exploit Title: Gila CMS 1.11.8 - 'query' SQL Injection Date: 2020-06-15 Exploit Author: Carlos Ramírez L. BillyV4 Vendor Homepage: https://gilacms.com/ Software Link:...
File Upload Vulnerability in CMS Ap***.php File
Xunrui CMS free open source system is based on PHP7 language using the latest CodeIgniter4 as the development framework for the production of web content management framework. XunRui CMS Ap.php file file upload vulnerability. Attackers can use the vulnerability to upload webshell, get server...
Gila CMS 1.11.8 - 'query' SQL Injection
Exploit Title: Gila CMS 1.11.8 - 'query' SQL Injection Date: 2020-06-15 Exploit Author: Carlos Ramírez L. BillyV4 Vendor Homepage: https://gilacms.com/ Software Link: https://github.com/GilaCMS/gila/releases/tag/1.11.8 Version: Gila 1.11.8 Tested on: Gila 1.11.8 CVE : CVE-2020-5515 import request...
Gila CMS 1.11.8 SQL Injection
Exploit Title: Gila CMS 1.11.8 - 'query' SQL Injection Date: 2020-06-15 Exploit Author: Carlos Ramírez L. BillyV4 Vendor Homepage: https://gilacms.com/ Software Link: https://github.com/GilaCMS/gila/releases/tag/1.11.8 Version: Gila 1.11.8 Tested on: Gila 1.11.8 CVE : CVE-2020-5515 import request...
Gila CMS 1.11.8 - (query) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Gila CMS 1.11.8 - 'query' SQL Injection Exploit Author: Carlos Ramírez L. BillyV4 Vendor Homepage: https://gilacms.com/ Software Link: https://github.com/GilaCMS/gila/releases/tag/1.11.8 Version: Gila 1.11.8 Tested on: Gila 1.11...
