OctoberCMS 1.0.426 (Build 426) Cross Site Request Forgery

Exploit Title: OctoberCMS 1.0.426 - CSRF to Admin Account Takover Vendor Homepage: https://octobercms.com Software Link: https://octobercms.com/download Exploit Author: Zain Sabahat Website: https://about.me/ZainSabahat Category: webapps CVE: CVE-2017-16244 1. Description Cross-Site Request Forge...

Ingenious School Management System 2.3.0 SQL Injection

Exploit Title: Ingenious School Management System 2.3.0 - SQL injection Date: 01.11.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo: http://iloveprograming.com/view/login.php Version: 2.3.0 Category:...

Fake Magazine Cover Script SQL Injection

Exploit Title: Fake Magazine Cover Script - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.websitescripts.org/ Software Link: http://www.websitescripts.org/website-scripts/fake-magazine-cover-script/prod81.html Demo: http://websitescripts.org/demo/magazinecoverscript/ Versio...

Ingenious School Management System 2.3.0 - friend_index SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Ingenious School Management System 2.3.0 - SQL injection Date: 01.11.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo:...

Ingenious School Management System 2.3.0 - 'friend_index' SQL injection

Exploit Title: Ingenious School Management System 2.3.0 - SQL injection Date: 01.11.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo: http://iloveprograming.com/view/login.php Version: 2.3.0 Category:...

Adult Script Pro 2.2.4 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Adult Script Pro 2.2.4 - SQL Injection Vendor Homepage: http://www.adultscriptpro.com/ Software Link: http://www.adultscriptpro.com/order.html Demo: http://www.adultscriptpro.com/demo.html Version: 2.2.4 Category: Webapps Tested...

MyBuilder Clone 1.0 - subcategory SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBuilder Clone 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.contractorscripts.com/ Software Link: http://order.contractorscripts.com/ Demo: http://demo.contractorscripts.com/ Version: 1.0 Category:...

iProject Management System 1.0 - ID SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: iProject Management System 1.0 - SQL Injection Vendor Homepage: http://ikodes.com/ Software Link: https://codecanyon.net/item/iproject-management-system/20483358 Demo: http://project.ikodes.com/ikpms/ Version: 1.0 Category:...

News 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: News Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/news-dynamic-newspaper-magazine-and-blog-cms-script/19656143 Demo:...

Same Sex Dating Software Pro 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Same Sex Dating Software Pro 1.0 - SQL Injection Vendor Homepage: http://www.softdatepro.com/ Software Link: https://codecanyon.net/item/same-date-pro-same-sex-dating-software/4530959 Demo: http://www.ss.softdatepro.com/ Version...

MyMagazine 1.0 - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: MyMagazine Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/mymagazine-bootstrap-newspaper-magazine-and-blog-cms-script/19620468 Demo:...

AROX School ERP PHP Script - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: AROX School ERP PHP Script - SQL Injection Vendor Homepage: http://arox.in/ Software Link: https://www.codester.com/items/4908/arox-school-erp-php-script Demo: http://erp1.arox.in/ Version: CVE-2017-15978 Category: Webapps Teste...

PHP CityPortal 2.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PHP CityPortal 2.0 - SQL Injection Vendor Homepage: http://www.phpcityportal.com/ Software Link: http://www.phpcityportal.com/index.php Demo: http://phpcityportal.com/demo Version: 2.0 Category: Webapps Tested on:...

Newspaper 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Newspaper Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/mymagazine-fully-responsive-magazine-cms/19493325 Demo:...

CmsLite 1.4 - (S) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Creative Management System - CMS Lite 1.4 - SQL Injection Dork: N/A Vendor Homepage: http://bekirk.co.uk/ Software Link: https://codecanyon.net/item/creative-management-system-cms-lite/15297597 Demo: http://demo.bekirk.co.uk/...

Sokial Social Network Script 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Sokial Social Network Script 1.0 - SQL Injection Vendor Homepage: http://www.sokial.net/ Software http://www.sokial.net/demonstrations-social-network.sk Demo: http://demo.sokial.net/ Version: 1.0 Category: Webapps Tested on:...

Nice PHP FAQ Script - nice_theme SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Nice PHP FAQ Script - SQL Injection Dork: N/A Vendor Homepage: http://www.nicephpscripts.com/ Software http://www.nicephpscripts.com/demophpscript-PHP-FAQ-Script-Knowledgebase-Script.htm Demo:...

SoftDatepro Dating Social Network 1.3 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: SoftDatepro Dating Social Network 1.3 - SQL Injection Vendor Homepage: http://www.softdatepro.com/ Software Link: https://codecanyon.net/item/softdatepro-build-your-own-dating-social-network/3650044 Demo:...

iTech Gigs Script 1.21 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: iTech Gigs Script 1.21 - SQL Injection Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/the-gigs-script/ Demo: http://gigs.itechscripts.com/ Version: 1.21 Category: Webapps Tested on:...

iStock Management System 1.0 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: iStock Management System 1.0 - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://ikodes.com/ Software Link: https://codecanyon.net/item/istock-management-system/20405084 Demo:...