self-service-password

LDAP Tool Box Self Service Password Описание Self Service Password — это PHP-приложение, которое позволяет пользователям изменять свой пароль в LDAP-каталоге. Приложение может использоваться со стандартными LDAPv3-каталогами OpenLDAP, OpenDS, ApacheDS, Sun Oracle DSEE, Novell и т.д., а также с...

OWASPWebGoatPHP

WebGoatPHP OWASP WebGoatPHP — это порт OWASP WebGoat на PHP и базы данных MySQL/SQLite. Цель — создать интерактивную учебную среду для безопасности веб-приложений, предлагая уроки в виде заданий. В каждом задании пользователь должен использовать уязвимость, чтобы продемонстрировать понимание...

zentao

zentao Getshell downloadZipPackage find C:\Users\Jas502n\Desktop\xamppfindstr /s /i "downloadZipPackage" zentao\log.txt:module\client\control.php: $result = $this-client-downloadZipPackage$version, $link; zentao\log.txt:module\client\ext\model\xuanxuan.php:public function...

exploit-CVE-2017-6090

Контейнеризированная уязвимая CVE-2017-6090 Этот проект создаёт контейнер с PhpCollab 2.5.1, содержащий уязвимость удалённого выполнения кода, описанную в CVE-2017-6090. Кроме того, прилагается файл docker-compose для запуска этого контейнера и mysql для демонстрации. Инструкции по эксплуатации —...

FUSE

FUSE FUSE est un système de test d'intrusion conçu pour identifier les vulnérabilités de téléversement de fichiers exécutables non restreints UEFU. Les détails de la stratégie de test se trouvent dans notre article, "FUSE: Finding File Upload Bugs via Penetration Testing", présenté à NDSS 2020...

kirjuri

Kirjuri a été déprécié. J'ai lancé un nouveau projet qui couvre la plupart des cas d'utilisation de Kirjuri et bien plus encore. Consultez l'application de gestion de cas DFIRe pour tous vos besoins de gestion de cas et de preuves. MISE À JOUR DE SÉCURITÉ 7.5.2021 Comme ce projet est inactif depu...

CVE-2026-21015-PHP-Filter-Chain-Arbitrary-File-Read

CVE-2026-21015 – Произвольное чтение файлов через цепочку фильтров PHP Код программы PHP // vulnerable.php - Includes file based on user input via filter ?php $file = $GET'page'; // Attempt to sanitize by allowing only .php files, but vulnerable to filter wrapper...

CVE-2021-25790-Multiple-Stored-XSS

CVE-2021-25790-Multiple-Stored-XSS: XSS stockées multiples dans le logiciel House Rental and Property Listing V1.0 Lien : https://www.sourcecodester.com/download-code?nid=14649&title=House+Rental+and+Property+Listing+in+PHP+with+Full+Source+Code https://vulners.com/cve/CVE-2021-25790...

CVE-2022-31897

CVE-2022-31897 Date : 22/06/2022 Auteur de l'exploit : Angelo Pio Amirante Page d'accueil du fournisseur : https://www.sourcecodester.com/ Lien du logiciel : https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html Version : 1.0 Testé sur : Serveur : XAMPP sur...

CVE-2026-86298 SourceCodester Class and Exam Timetabling System delete_subject.php sql injection

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /deletesubject.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-86216 code-projects Hotel and Tourism Reservation in PHP details.php cross site scripting

A security vulnerability has been detected in code-projects Hotel and Tourism Reservation in PHP 1.0. This impacts an unknown function of the file /ht/details.php. The manipulation of the argument room leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2026-86216 code-projects Hotel and Tourism Reservation in PHP details.php cross site scripting

A security vulnerability has been detected in code-projects Hotel and Tourism Reservation in PHP 1.0. This impacts an unknown function of the file /ht/details.php. The manipulation of the argument room leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

PT-2026-86491

A vulnerability has been found in code-projects Task Management System In PHP 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The...

[SECURITY] Fedora 44 Update: roundcubemail-1.7.3-1.fc44

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

CVE-2026-46382 Meeting Room Booking System has server-side request forgery in import functionality

The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available...

CVE-2026-46382 Meeting Room Booking System has server-side request forgery in import functionality

The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available...

CVE-2026-72593 dulldusk phpfm - Missing Authentication by Default Allows Full Filesystem Access

A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality including reading, writing, deleting, and uploading files anywhere on the server filesystem...

CVE-2026-10227

A vulnerability has been found in raisulislamg4 studentmanagementsystembyphp up to 310d950e09013d5133c6b9210aff9444382d16d1. The affected element is an unknown function of the file addusercheck.php of the component User Creation Handler. The manipulation of the argument role leads to sql injectio...

CVE-2026-7716

CVE-2026-7716 describes an SQL injection in the Gym Management System (code-projects) for PHP on Windows NT 1.0, via manipulation of the day parameter in /index.php. The exact vulnerable component and file are /index.php; the root cause is improper handling of user input leading to SQL injection....

📄 School Management System PHP 1.0.0 Cross Site Scripting

School Management System PHP version 1.0.0 suffers from a persistent cross site scripting vulnerability that can lead to administrative account takeover. ==================================================== School Management System PHP - Stored XSS leading to Admin Account Takeover...