CVE-2026-27174

MajorDoMo aka Major Domestic Module allows unauthenticated remote code execution via the admin panel's PHP console feature. An include order bug in modules/panel.class.php causes execution to continue past a redirect call that lacks an exit statement, allowing unauthenticated requests to reach th...

EUVD-2020-29385

Malware in sbrugna...

EUVD-2018-17743

Malware in sbrugna...

CVE-2022-27127

zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php/ajax.php...

CVE-2022-27125

zbzcms v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the neirong parameter at /php/ajax.php...

Wchat PHP AJAX Chat Script 1.5 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Wchat - Fully Responsive PHP AJAX Chat Script 1.5 - Persistent cross site scripting Exploit Author: Borna nematzadeh L0RD Vendor Homepage: https://codecanyon.net/item/wchat-fully-responsive-phpajax-chat/18047319?srank=1327...

CVE-2018-5978

SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field...

CVE-2018-5979

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field...

Sql injection

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field...

CVE-2018-5979

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field...

CVE-2018-5979: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field...

Wchat 1.5 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wchat - Fully Responsive PHP AJAX Chat Script 1.5 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/wchat-fully-responsive-phpajax-chat/18047319 Version:...

PT-2018-17264

Name of the Vulnerable Software and Affected Versions: Facebook Style Php Ajax Chat Zechat version 1.5 Description: A SQL Injection issue exists in the login functionality. The User field in the login.php file is vulnerable to SQL injection attacks. Recommendations: For version 1.5, consider...

PT-2018-17265

Name of the Vulnerable Software and Affected Versions: Wchat Fully Responsive PHP AJAX Chat Script version 1.5 Description: The issue exists due to SQL Injection in the login.php file, specifically via the User field. This allows for potential exploitation. Recommendations: For Wchat Fully...

Wchat 1.5 SQL Injection

Exploit Title: Wchat - Fully Responsive PHP AJAX Chat Script 1.5 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/wchat-fully-responsive-phpajax-chat/18047319 Version: 1.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...

CVE-2018-5978: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field...

Monsta FTP 1.6.2 - Multiple Vulnerabilities

Exploit Title: CSRF XSS Monsta FTP Google Dork: intitle: Monsta FTP CSRF / XSS Date: 2015-09-11 Exploit Author: hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: www.monstaftp.com Software Link: www.monstaftp.com Version: monstaftpv1.6.2 Tested on: windows 7 SP1 XAMPP Category: WebApps...