389 matches found
CVE-2026-21015-PHP-Filter-Chain-Arbitrary-File-Read
CVE-2026-21015 – Leitura Arbitrária de Arquivos via Cadeia de Filtros PHP Código do Programa PHP root@kitploit: // vulnerable.php - Includes file based on user input via filter ?php $file = $GET'page'; // Attempt to sanitize by allowing only .php files, but vulnerable to filter wrapper...
zentao
zentao Getshell Localizar downloadZipPackage root@kitploit: C:\Users\Jas502n\Desktop\xamppfindstr /s /i "downloadZipPackage" zentao\log.txt:module\client\control.php: $result = $this-client-downloadZipPackage$version, $link; zentao\log.txt:module\client\ext\model\xuanxuan.php:public function...
CVE-2021-25790-Multiple-Stored-XSS
CVE-2021-25790-Multiple-Stored-XSS: XSS stockées multiples dans le logiciel House Rental and Property Listing V1.0 Lien : https://www.sourcecodester.com/download-code?nid=14649&title=House+Rental+and+Property+Listing+in+PHP+with+Full+Source+Code https://vulners.com/cve/CVE-2021-25790...
exploit-CVE-2017-6090
컨테이너화된 CVE-2017-6090 취약점 이 프로젝트는 CVE-2017-6090에 명시된 원격 코드 실행 취약점을 포함하는 PhpCollab 2.5.1을 실행하는 컨테이너를 빌드합니다. 추가로, 데모를 위해 해당 컨테이너와 mysql을 시작하는 docker-compse 파일이 있으며, 악용 방법은 아래에 있습니다. 빌드 docker build -t 컨테이너이름 . 또는 jlkinsel/exploit-cve-2017-6090 이미지를 사용하세요. 실행 및 구성 이것을 실행하는 가장 쉬운 방법은 포함된...
kirjuri
Kirjuri 已弃用。 我已启动一个新项目，涵盖了 Kirjuri 处理的大部分用例，甚至更多。请查看 DFIRe 案例管理应用程序，满足您所有的案例和证据管理需求。 安全更新（2021年7月5日） 由于该项目已多年不活跃，部分依赖项不可避免地会过时。所涉及的依赖项中存在多个安全漏洞，并且某些依赖项（如 Twig）与最新版 PHP 不兼容。如果您希望安装并使用 Kirjuri，请手动更新依赖项，并确保在安全环境中安装。最初的建议是在气隙隔离环境中安装，该建议仍然有效。...
OWASPWebGoatPHP
WebGoatPHP OWASP WebGoatPHP è un porting di OWASP WebGoat su database PHP e MySQL/SQLite. L'obiettivo è creare un ambiente di insegnamento interattivo per la sicurezza delle applicazioni web offrendo lezioni sotto forma di sfide. In ogni sfida l'utente deve sfruttare la vulnerabilità per dimostra...
FUSE
FUSE FUSE è un sistema di penetration testing progettato per identificare vulnerabilità di caricamento di file eseguibili non limitati UEFU. I dettagli della strategia di test sono descritti nel nostro articolo, "FUSE: Finding File Upload Bugs via Penetration Testing", presentato a NDSS 2020. Per...
self-service-password
LDAP Tool Box Self Service Password Presentazione Self Service Password è un'applicazione PHP che consente agli utenti di modificare la propria password in una directory LDAP. L'applicazione può essere utilizzata con directory LDAPv3 standard OpenLDAP, OpenDS, ApacheDS, Sun Oracle DSEE, Novell,...
CVE-2022-31897
CVE-2022-31897 Data: 06/22/2022 Autore dell'exploit: Angelo Pio Amirante Homepage del fornitore: https://www.sourcecodester.com/ Link del software: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html Versione: 1.0...
CVE-2026-46382 Meeting Room Booking System has server-side request forgery in import functionality
The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available...
CVE-2026-46382 Meeting Room Booking System has server-side request forgery in import functionality
The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available...
CVE-2026-72593 dulldusk phpfm - Missing Authentication by Default Allows Full Filesystem Access
A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality including reading, writing, deleting, and uploading files anywhere on the server filesystem...
CVE-2026-10227
A vulnerability has been found in raisulislamg4 studentmanagementsystembyphp up to 310d950e09013d5133c6b9210aff9444382d16d1. The affected element is an unknown function of the file addusercheck.php of the component User Creation Handler. The manipulation of the argument role leads to sql injectio...
CVE-2026-7716
CVE-2026-7716 describes an SQL injection in the Gym Management System (code-projects) for PHP on Windows NT 1.0, via manipulation of the day parameter in /index.php. The exact vulnerable component and file are /index.php; the root cause is improper handling of user input leading to SQL injection....
📄 School Management System PHP 1.0.0 Cross Site Scripting
School Management System PHP version 1.0.0 suffers from a persistent cross site scripting vulnerability that can lead to administrative account takeover. ==================================================== School Management System PHP - Stored XSS leading to Admin Account Takeover...
CVE-2026-5537
A security vulnerability has been detected in halex CourseSEL up to 1.1.0. Affected by this vulnerability is the function checksel of the file Apps/Index/Controller/IndexController.class.php of the component HTTP GET Parameter Handler. The manipulation of the argument seid leads to sql injection...
CVE-2026-23843
Summary: CVE-2026-23843 affects the teklifolustur_app PHP web app. An IDOR vulnerability exists in the offer view function: authenticated users can modify the offer_id to access offers owned by others due to missing authorization checks. The issue is mitigated by the patch introduced in commit dd...
CVE-2025-58947
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Athos athos allows PHP Local File Inclusion.This issue affects Athos: from n/a through = 1.9...
CVE-2025-14091
A weakness has been identified in TrippWasTaken PHP-Guitar-Shop up to 6ce0868889617c1975982aae6df8e49555d0d555. This vulnerability affects unknown code of the file /product.php of the component Product Details Page. Executing manipulation of the argument ID can lead to sql injection. It is possib...