zentao

zentao Getshell downloadZipPackage find root@kitploit: C:\Users\Jas502n\Desktop\xamppfindstr /s /i "downloadZipPackage" zentao\log.txt:module\client\control.php: $result = $this-client-downloadZipPackage$version, $link; zentao\log.txt:module\client\ext\model\xuanxuan.php:public function...

self-service-password

LDAP Tool Box Self Service Password Presentación Self Service Password es una aplicación PHP que permite a los usuarios cambiar su contraseña en un directorio LDAP. La aplicación puede utilizarse en directorios LDAPv3 estándar OpenLDAP, OpenDS, ApacheDS, Sun Oracle DSEE, Novell, etc. y también en...

FUSE

FUSE FUSE 是一个渗透测试系统，旨在识别不受限制的可执行文件上传（UEFU）漏洞。测试策略的详细内容见我们的论文《FUSE: Finding File Upload Bugs via Penetration Testing》，该论文发表于 NDSS 2020。关于如何配置和运行 FUSE，请参见以下内容。 设置 安装 FUSE 目前运行在 Ubuntu 18.04 和 Python 2.7.15 上。 1. 安装依赖项 root@kitploit: apt-get install rabbitmq-server apt-get install python-pip apt-get...

CVE-2022-31897

CVE-2022-31897 Fecha: 22/06/2022 Autor del exploit: Angelo Pio Amirante Página web del proveedor: https://www.sourcecodester.com/ Enlace del software: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html Versión: 1.0...

OWASPWebGoatPHP

WebGoatPHP OWASP WebGoatPHP 是 OWASP WebGoat 移植到 PHP 和 MySQL/SQLite 数据库的版本。其目标是通过提供挑战形式的课程，创建一个交互式的 Web 应用程序安全教学环境。在每个挑战中，用户必须利用漏洞来展示他们的理解。 WebGoatPHP 支持四种不同的模式：单人模式、工作坊模式、竞赛模式和安全编码模式。 项目提案 项目提案可在此处找到：这里 截图 单人用户模式： 1. 所有课程及其分类的列表 2. 刷新课程和分类列表（如果添加了新课程/分类） 3. 课程内容 4. 将课程重置为初始状态 5. 获取课程的随机提示 6. 显示 G...

kirjuri

Kirjuri ha sido deprecado. He iniciado un nuevo proyecto que cubre la mayoría de los casos de uso que maneja Kirjuri y muchos más. Consulta la aplicación de gestión de casos DFIRe para todas tus necesidades de gestión de casos y evidencias. ACTUALIZACIÓN DE SEGURIDAD 7.5.2021 Dado que este proyec...

exploit-CVE-2017-6090

容器化的可利用CVE-2017-6090 本项目构建了一个运行 PhpCollab 2.5.1 的容器，其中包含 CVE-2017-6090 中详述的远程代码执行漏洞。此外，还提供了一个 docker-compose 文件，用于启动该容器和 MySQL 以演示该漏洞，利用说明如下。 构建 docker build -t 容器名称 . 或使用镜像 jlkinsel/exploit-cve-2017-6090 运行与配置 启动该程序最简单的方法是使用附带的 docker-compose.yml 文件。如果我有空——或者有人感兴趣——我会创建一个 Kubernetes 部署或 Helm...

CVE-2026-21015-PHP-Filter-Chain-Arbitrary-File-Read

CVE-2026-21015 – Lectura Arbitraria de Archivos mediante Cadena de Filtros PHP Código del Programa PHP root@kitploit: // vulnerable.php - Includes file based on user input via filter ?php $file = $GET'page'; // Attempt to sanitize by allowing only .php files, but vulnerable to filter wrapper...

CVE-2021-25790-Multiple-Stored-XSS

CVE-2021-25790-多个存储型XSS: 房屋租赁与房产列表系统V1.0中的多个存储型XSS漏洞 软件链接： https://www.sourcecodester.com/download-code?nid=14649&title=House+Rental+and+Property+Listing+in+PHP+with+Full+Source+Code https://vulners.com/cve/CVE-2021-25790 https://nvd.nist.gov/vuln/detail/CVE-2021-25790 利用代码...

CVE-2026-86298 SourceCodester Class and Exam Timetabling System delete_subject.php sql injection

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /deletesubject.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-86216 code-projects Hotel and Tourism Reservation in PHP details.php cross site scripting

A security vulnerability has been detected in code-projects Hotel and Tourism Reservation in PHP 1.0. This impacts an unknown function of the file /ht/details.php. The manipulation of the argument room leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2026-46382 Meeting Room Booking System has server-side request forgery in import functionality

The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available...

CVE-2026-46382 Meeting Room Booking System has server-side request forgery in import functionality

The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available...

CVE-2026-72593 dulldusk phpfm - Missing Authentication by Default Allows Full Filesystem Access

A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality including reading, writing, deleting, and uploading files anywhere on the server filesystem...

CVE-2026-10227

A vulnerability has been found in raisulislamg4 studentmanagementsystembyphp up to 310d950e09013d5133c6b9210aff9444382d16d1. The affected element is an unknown function of the file addusercheck.php of the component User Creation Handler. The manipulation of the argument role leads to sql injectio...

CVE-2026-7716

CVE-2026-7716 describes an SQL injection in the Gym Management System (code-projects) for PHP on Windows NT 1.0, via manipulation of the day parameter in /index.php. The exact vulnerable component and file are /index.php; the root cause is improper handling of user input leading to SQL injection....

📄 School Management System PHP 1.0.0 Cross Site Scripting

School Management System PHP version 1.0.0 suffers from a persistent cross site scripting vulnerability that can lead to administrative account takeover. ==================================================== School Management System PHP - Stored XSS leading to Admin Account Takeover...

CVE-2026-5537

A security vulnerability has been detected in halex CourseSEL up to 1.1.0. Affected by this vulnerability is the function checksel of the file Apps/Index/Controller/IndexController.class.php of the component HTTP GET Parameter Handler. The manipulation of the argument seid leads to sql injection...

CVE-2026-23843

Summary: CVE-2026-23843 affects the teklifolustur_app PHP web app. An IDOR vulnerability exists in the offer view function: authenticated users can modify the offer_id to access offers owned by others due to missing authorization checks. The issue is mitigated by the patch introduced in commit dd...

CVE-2025-58947

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Athos athos allows PHP Local File Inclusion.This issue affects Athos: from n/a through = 1.9...