Lucene search
+L

2149 matches found

CNVD
CNVD
•added 2021/04/19 12:00 a.m.•14 views

Online Reviewer System SQL Injection Vulnerability

Online Reviewer System is a software application. An online reviewer system. Online Reviewer System version 1.0 suffers from a SQL injection vulnerability that stems from an authentication bypass SQL injection vulnerability that could result in a reverse shell upload. No detailed vulnerability...

9.8CVSS8AI score0.02213EPSS
SaveExploits1References1
NVD
NVD
•added 2021/04/14 3:15 p.m.•28 views

CVE-2021-27130

Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a reverse shell upload...

9.8CVSS0.02213EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/04/14 3:15 p.m.•11 views

CVE-2021-27130

Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a reverse shell upload...

9.8CVSS8.7AI score0.02213EPSS
SaveExploits1References2
Prion
Prion
•added 2021/04/14 3:15 p.m.•20 views

Sql injection

Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a reverse shell upload...

7.5CVSS9.7AI score0.02213EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/04/14 2:59 p.m.•39 views

CVE-2021-27130

Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a reverse shell upload...

10AI score0.02213EPSS
SaveExploits1References1
CVE
CVE
•added 2021/04/14 2:59 p.m.•66 views

CVE-2021-27130

Online Reviewer System 1.0 is affected by a SQL injection vulnerability that stems from an authentication bypass, enabling an attacker to bypass login and potentially upload a reverse shell. The flaw is documented across multiple sources (Red Hat, CNVD/CNNVD, CVE records) as a SQL injection throu...

9.8CVSS9.8AI score0.02213EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/04/14 12:00 a.m.•5 views

PT-2021-17254

Name of the Vulnerable Software and Affected Versions: Online Reviewer System version 1.0 Description: The issue concerns a SQL injection vulnerability that can be exploited through authentication bypass, potentially leading to a reverse shell upload. This allows unauthorized access and can...

9.8CVSS0.02213EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/14 12:00 a.m.•10 views

CVE-2021-27130: Improper Neutralization of Special Elements used in an SQL Command

Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a reverse shell upload...

9.8CVSS5.8AI score0.02213EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/04/14 12:00 a.m.•19 views

Online Reviewer System SQL Injection Vulnerability

Online Reviewer System is a software application. An online reviewer system. Online Reviewer System version 1.0 suffers from a SQL injection vulnerability that stems from an authentication bypass SQL injection vulnerability that could result in a reverse shell upload. No detailed vulnerability...

9.8CVSS5.9AI score0.02213EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2021/03/26 12:00 a.m.•744 views

Development Kamel KCFinder 1.7 Shell Upload

Exploit Title : Development Kamel - KCFinder Shell Upload Vulnerability + Date : 25/03/2021 + Exploit Author : RAYAN ALi + Home : http://kamel.tech/ + Discovered By : RAYAN + Vendor Homepage : http://kamel.tech/ + Exploit: + http://localhost/resources/admin/Editor/kcfinder/browse.php?type=files +...

0.3AI score
SaveExploits0
zdt
zdt
•added 2021/03/25 12:00 a.m.•124 views

Development Kamel KCFinder 1.7 Shell Upload Vulnerability

Exploit Title : Development Kamel - KCFinder Shell Upload Vulnerability + Date : 25/03/2021 + Exploit Author : RAYAN ALi + Home : http://kamel.tech/ + Discovered By : RAYAN + Vendor Homepage : http://kamel.tech/ + Exploit: + http://localhost/resources/admin/Editor/kcfinder/browse.php?type=files +...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2021/03/24 12:00 a.m.•311 views

Online Faculty Clearance System 1.0 Shell Upload

Exploit Title: Online Faculty Clearance System Shell Upload Exploit Author: th3d1gger Vendor Homepage: https://sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/onlineclearance0.zip Version: 1.0 Tested on Windows 10 @Vulnerable Source Code...

7.4AI score
SaveExploits0
zdt
zdt
•added 2021/03/23 12:00 a.m.•35 views

Online Faculty Clearance System 1.0 Shell Upload Vulnerability

Exploit Title: Online Faculty Clearance System Shell Upload Exploit Author: th3d1gger Vendor Homepage: https://sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/onlineclearance0.zip Version: 1.0 Tested on Windows 10 @Vulnerable Source Code...

SaveExploits0
zdt
zdt
•added 2021/03/23 12:00 a.m.•30 views

Online Reviewer Management System 1.0 Shell Upload Vulnerability

Exploit Title: Online Reviewer Management System Shell Upload Exploit Author: th3d1gger Vendor Homepage: https://sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/janobe/reviewer0.zip Version: 1.0 Tested on Windows 10 @attack request POST...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2021/03/23 12:00 a.m.•268 views

Online Reviewer Management System 1.0 Shell Upload

Exploit Title: Online Reviewer Management System Shell Upload Exploit Author: th3d1gger Vendor Homepage: https://sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/janobe/reviewer0.zip Version: 1.0 Tested on Windows 10 @attack request POST...

SaveExploits0
Gitee
Gitee
•added 2021/03/17 10:58 a.m.•23 views

Exploit for Path Traversal in Vmware Cloud_Foundation

PoC exploit for CVE-2021-21972, a remote code execution vulnerability in VMware vCenter 6.5-7.0. The exploit uploads the web shell "shell.jsp" to the target server, which is then executed to gain remote code execution. The exploit is invoked by running the Python script "vcenterrce.py" with the U...

10CVSS9.3AI score0.99865EPSS
SaveExploits50
NVD
NVD
•added 2021/02/17 3:15 p.m.•47 views

CVE-2021-26809

PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php...

9.8CVSS0.02139EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2021/02/17 3:15 p.m.•20 views

CVE-2021-26809

PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php...

9.8CVSS7.3AI score0.02139EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/02/17 3:15 p.m.•11 views

CVE-2021-26809

PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php...

9.8CVSS8.5AI score0.02139EPSS
SaveExploits1References3
CVE
CVE
•added 2021/02/17 2:32 p.m.•78 views

CVE-2021-26809

CVE-2021-26809 affects PHPGurukul Car Rental Project version 2.0. The vulnerability is a remote shell upload in changeimage1.php, enabling an attacker to upload arbitrary code and potentially take control of the system. Practical impact is remote code execution with high severity. Remediation/mit...

9.8CVSS9.4AI score0.02139EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder