PT-2021-22243

Name of the Vulnerable Software and Affected Versions NASCENT RemKon Device Manager version 4.0.0.0 Description A command-injection issue in the Image Upload function allows attackers to execute arbitrary commands as root via shell metacharacters in the filename parameter to "assets/index.php"...

CVE-2021-38613: Unrestricted Upload of File with Dangerous Type

The assets/index.php Image Upload feature of the NASCENT RemKon Device Manager 4.0.0.0 allows attackers to upload any code to the target system and achieve remote code execution...

Simple Phone Book/Directory 1.0 SQL Injection

Exploit Title: Simple Phone book/directory 1.0 - 'Username' SQL Injection Unauthenticated Date: 21/08/2021 Exploit Author: Justin White Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/13011/phone-bookphone-directory.html Version: 1.0 Testeted on:...

CVE-2020-18878

Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.php?m=admin&c=Tool&a=log&file=D%3A%5CphpStudy%5CWWW%5Cindex.php'...

CVE-2020-18878

Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.php?m=admin&c=Tool&a=log&file=D%3A%5CphpStudy%5CWWW%5Cindex.php'...

Sql injection

SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'...

CVE-2020-18877

SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'...

PT-2021-10246

Name of the Vulnerable Software and Affected Versions: Wuzhi CMS version 4.1.0 Description: The issue allows remote attackers to obtain sensitive information via the flag parameter in the component "/coreframe/app/order/admin/index.php". This is a SQL Injection issue that can be exploited by...

PT-2021-10247

Name of the Vulnerable Software and Affected Versions: Skycaiji version 1.3 Description: The issue allows remote attackers to obtain sensitive information. This is achieved through a Directory Traversal attack. The "index.php" component is vulnerable, specifically when the parameters...

CVE-2020-18878: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.php?m=admin&c=Tool&a=log&file=D%3A%5CphpStudy%5CWWW%5Cindex.php'...

CVE-2020-18877: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'...

Exploit for SQL Injection in Os4Ed Opensis

OPENSIS 8.0 SQL INJECTION VULNERABILITY CVE-2021-39377 A SQL...

CVE-2020-18164

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...

CVE-2020-18164

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...

CVE-2020-18164

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...

CVE-2020-22937

A remote code execution RCE in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file...

Exploit for Cross-site Scripting in Online_Student_Rate_System_Project Online_Student_Rate_System

CVE-2021-39408 A reflected Cross Site Scripting XSS vulnerab...

PT-2021-10144

Name of the Vulnerable Software and Affected Versions: tp-shop versions 2.x through 3.x Description: A SQL Injection issue exists via the "/index.php/home/api/shop" API endpoint, specifically through the fBill parameter. Recommendations: For tp-shop versions 2.x through 3.x, avoid using the fBill...

TPshop SQL注入漏洞

TPshop is a new retail smart e-commerce ecosystem. TPshop security vulnerability, the vulnerability stems from the index.php home api store fBill parameter may lead to SQL injection vulnerability...

CVE-2020-22937: Improper Control of Generation of Code

A remote code execution RCE in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file...