Lucene search
+L

5031 matches found

Exploit DB
Exploit DB
added 2020/12/04 12:0 a.m.850 views

Savsoft Quiz 5 - 'field_title' Stored Cross-Site Scripting

Exploit Title: Savsoft Quiz 5 - 'fieldtitle' Stored Cross-Site Scripting Date: 2020-09-02 Exploit Author: Dhruv Pateldhruvp111296 Vendor Homepage: https://savsoftquiz.com/ Software Link: https://github.com/savsofts/savsoftquizv5.git Version: 5.0 Tested on: Windows 10 Attack vector: This...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/12/03 12:0 a.m.520 views

mojoPortal Forums 2.7.0.0 Cross Site Scripting

Exploit Title: mojoPortal forums 2.7.0.0 - 'Title' Persistent Cross-Site Scripting Date: 3-12-2020 Exploit Author: Sagar Banwa Vendor Homepage: https://mojoportal.com Software Link: https://www.mojoportal.com/download Version: 2.7.0.0 Tested on: Windows 10/Kali Linux Attack vector: This...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/12/03 12:0 a.m.483 views

EgavilanMedia Address Book 1.0 SQL Injection

Exploit Title: EgavilanMedia Address Book 1.0 Exploit - SQLi Auth Bypass Date: 02-12-2020 Exploit Author: Mayur Parmarth3cyb3rc0p Vendor Homepage: http://egavilanmedia.com Software Link : http://egavilanmedia.com/egm-address-book/ Version: 1.0 Tested on: PopOS Attack Vector: An attacker can gain...

1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/12/03 12:0 a.m.512 views

EgavilanMedia Address Book 1.0 Exploit - SQLi Auth Bypass

Exploit Title: EgavilanMedia Address Book 1.0 Exploit - SQLi Auth Bypass Date: 02-12-2020 Exploit Author: Mayur Parmarth3cyb3rc0p Vendor Homepage: http://egavilanmedia.com Software Link : http://egavilanmedia.com/egm-address-book/ Version: 1.0 Tested on: PopOS Attack Vector: An attacker can gain...

5.3AI score
SaveExploits0
OSV
OSV
added 2020/12/02 5:15 p.m.8 views

CVE-2020-29239

Online Birth Certificate System Project V 1.0 is affected by cross-site scripting XSS. This vulnerability can result in an attacker injecting the XSS payload in the User Registration section. When an admin visits the View Detail of Application section from the admin panel, the attacker can able t...

6.1CVSS6.3AI score0.00456EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/02 5:15 p.m.21 views

CVE-2020-29239

Online Birth Certificate System Project V 1.0 is affected by cross-site scripting XSS. This vulnerability can result in an attacker injecting the XSS payload in the User Registration section. When an admin visits the View Detail of Application section from the admin panel, the attacker can able t...

6.1CVSS5.9AI score0.00456EPSS
SaveExploits0References1
Prion
Prion
added 2020/12/02 5:15 p.m.26 views

Cross site scripting

Online Birth Certificate System Project V 1.0 is affected by cross-site scripting XSS. This vulnerability can result in an attacker injecting the XSS payload in the User Registration section. When an admin visits the View Detail of Application section from the admin panel, the attacker can able t...

4.3CVSS5.8AI score0.00456EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/02 4:37 p.m.27 views

CVE-2020-29239

Online Birth Certificate System Project V 1.0 is affected by cross-site scripting XSS. This vulnerability can result in an attacker injecting the XSS payload in the User Registration section. When an admin visits the View Detail of Application section from the admin panel, the attacker can able t...

5.9AI score0.00456EPSS
SaveExploits0References1
CVE
CVE
added 2020/12/02 4:37 p.m.58 views

CVE-2020-29239

CVE-2020-29239 refers to a cross-site scripting (XSS) vulnerability in Online Birth Certificate System Project v1.0. The issue manifests in the User Registration section, where an attacker can inject XSS payloads. When an admin visits the View Detail of Application section, the payload could enab...

6.1CVSS5.8AI score0.00456EPSS
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
added 2020/12/02 12:0 a.m.335 views

Under Construction Page With CPanel 1.0 SQL Injection

Exploit Title: Under Construction Page with CPanel 1.0 - SQL injection Date: 17-11-2020 Exploit Author: Mayur Parmarth3cyb3rc0p Vendor Homepage: http://egavilanmedia.com Software Link : http://egavilanmedia.com/under-construction-page-with-cpanel/ Version: 1.0 Tested on: PopOS SQL Injection: SQL...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/12/02 12:0 a.m.419 views

Under Construction Page with CPanel 1.0 - SQL injection

Exploit Title: Under Construction Page with CPanel 1.0 - SQL injection Date: 17-11-2020 Exploit Author: Mayur Parmarth3cyb3rc0p Vendor Homepage: http://egavilanmedia.com Software Link : http://egavilanmedia.com/under-construction-page-with-cpanel/ Version: 1.0 Tested on: PopOS SQL Injection: SQL...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/12/02 12:0 a.m.432 views

EgavilanMedia User Registration And Login System With Admin Panel 1.0 XSS

Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Stored Cross Site Scripting Exploit Author: Soushikta Chowdhury Vendor Homepage: http://egavilanmedia.com Software Link: http://egavilanmedia.com/user-registration-and-login-system-with-admin-panel/ Version: 1.0...

0.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/12/02 12:0 a.m.399 views

EgavilanMedia User Registration And Login System With Admin Panel 1.0 CSRF

Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel 1.0 - CSRF Date: 01-12-2020 Exploit Author: Hardik Solanki Vendor Homepage: http://egavilanmedia.com Software Link:...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/12/02 12:0 a.m.159 views

Employee Record Management System 1.1 - Login Bypass SQL Injection

Exploit Title: Employee Record Management System 1.1 - Login Bypass SQL Injection Date: 2020–11–17 Exploit Author: Anurag Kumar RawatA1C3VENOM Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/employee-record-management-system-in-php-and-mysql/ Version: 1.1 Tested on...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/12/02 12:0 a.m.415 views

EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Stored Cross Site Scripting

Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Stored Cross Site Scripting Exploit Author: Soushikta Chowdhury Vendor Homepage: http://egavilanmedia.com Software Link: http://egavilanmedia.com/user-registration-and-login-system-with-admin-panel/ Version: 1.0...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/12/02 12:0 a.m.425 views

NewsLister - Authenticated Persistent Cross-Site Scripting

Exploit Title: NewsLister - Authenticated Persistent Cross-Site Scripting Date: 2020-11-27 Exploit Author: Emre Aslan Vendor Homepage: https://www.netartmedia.net/newslister.html Tested on: Windows & XAMPP == PoC HTTP Request == GET /admin/index.php?page=add HTTP/1.1 Host: 127.0.0.1:8080...

5.3AI score
SaveExploits0
Snyk
Snyk
added 2020/12/01 3:29 p.m.5 views

Cross-site Scripting (XSS)

Overview s-cart/core is a free Laravel e-commerce for business. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the admin panel. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script into an otherwise...

7.3CVSS5.3AI score0.01071EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2020/11/29 8:30 p.m.236 views

Admin-Scanner - This Tool Is Design To Find Admin Panel Of Any Website By Using Custom Wordlist Or Default Wordlist Easily

WebsiteAdmin Panel Finder How To Install Linux/pc sudo apt install python3 sudo apt install python3-pip sudo apt install git git clone https://github.com/alienwhatever/Admin-Scanner.git cd Admin-Scanner How to Install Termux/Android pkg update && pkg upgrade pkg install python3 pkg install git gi...

7.3AI score
SaveExploits0References2
NVD
NVD
added 2020/11/27 6:15 p.m.25 views

CVE-2017-15682

In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel...

6.1CVSS6.1AI score0.00736EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/27 6:15 p.m.9 views

CVE-2017-15682

In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel...

6.1CVSS6.3AI score
SaveExploits0References1
Rows per page
Query Builder