Online Course Registration 2.0 - Remote Code Execution

Exploit Title: Online Course Registration 2.0 - Remote Code Execution Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/online-course-registration-free-download/ Version: v2.0 Category: Webapps Tested on: Xampp for Windows...

Shopping Portal ProVersion 3.0 - Authentication Bypass Exploit

Exploit for php platform in category web applications Exploit Title: Shopping Portal ProVersion 3.0 - Authentication Bypass Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/shopping-portal-free-download/ Version: v4.0...

Shopping Portal ProVersion 3.0 - Authentication Bypass

Shopping Portal ProVersion 3.0 - Authentication Bypass Exploit Title: Shopping Portal ProVersion 3.0 - Authentication Bypass Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/shopping-portal-free-download/ Version: v4.0...

Hospital Management System 4.0 SQL Injection

Exploit Title: Hospital Management System 4.0 - Authentication Bypass Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/hospital-management-system-in-php/ Version: v4.0 Category: Webapps Tested on: Xampp for Windows...

Shopping Portal ProVersion 3.0 SQL Injection

Exploit Title: Shopping Portal ProVersion 3.0 - Authentication Bypass Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/shopping-portal-free-download/ Version: v4.0 Category: Webapps Tested on: Xampp for Windows Descriptio...

Hospital Management System 4.0 - Authentication Bypass

Exploit Title: Hospital Management System 4.0 - Authentication Bypass Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/hospital-management-system-in-php/ Version: v4.0 Category: Webapps Tested on: Xampp for Windows...

Wave 2.0 SQL Injection

=========================================================================================== Exploit Title: Wave - Powerful Freelance Marketplace System SQL Inj. Dork: N/A Date: 29-12-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage:...

Cera Intranet Community Theme 1.0.1 SQL Injection

=========================================================================================== Exploit Title: cera-intranet-community-theme SQL Inj. Dork: N/A Date: 29-12-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://themeforest.net/item/cera-intranet-community-theme/24872621 Softwar...

Snipe-IT Open Source Asset Management 4.7.5 - Persistent Cross-Site Scripting

Snipe-IT Open Source Asset Management 4.7.5 - Persistent Cross-Site Scripting Exploit Title: Snipe-IT Open Source Asset Management 4.7.5 - Persistent Cross-Site Scripting Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://snipeitapp.com/ Software Link:...

Snipe-IT Open Source Asset Management 4.7.5 Cross Site Scripting

Exploit Title: Snipe-IT Open Source Asset Management 4.7.5 - Persistent Cross-Site Scripting Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://snipeitapp.com/ Software Link: https://github.com/snipe/snipe-it/releases/tag/v4.7.5 Version: 4.7.5 Category: Webapps Tested on: Xamp...

Snipe-IT Open Source Asset Management 4.7.5 - Persistent Cross-Site Scripting

Exploit Title: Snipe-IT Open Source Asset Management 4.7.5 - Persistent Cross-Site Scripting Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://snipeitapp.com/ Software Link: https://github.com/snipe/snipe-it/releases/tag/v4.7.5 Version: 4.7.5 Category: Webapps Tested on: Xamp...

Adrenalin Core HCM 5.4.0 - (strAction) Reflected Cross-Site Scripting Vulnerability

Exploit for asp platform in category web applications Exploit Title: Adrenalin Core HCM 5.4.0 - 'strAction' Reflected Cross-Site Scripting Exploit Author: Rishu Ranjan Cy83rl0gger Vendor Homepage: https://www.myadrenalin.com/ Software Link: https://www.myadrenalin.com/core-hcm/ Version: 5.4.0...

Adrenalin Core HCM 5.4.0 - 'ReportID' Reflected Cross-Site Scripting

Exploit Title: Adrenalin Core HCM 5.4.0 - 'ReportID' Reflected Cross-Site Scripting Google Dork: NA Date: 2018-09-06 Exploit Author: Rishu Ranjan Vendor Homepage: https://www.myadrenalin.com/ Software Link: https://www.myadrenalin.com/core-hcm/ Version: 5.4.0 REQUIRED Tested on: NA CVE :...

Joomla Sumoku 3.9.8 SQL Injection

Exploit Title : Joomla Sumoku 3.9.8 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/10/2019 Vendor Homepage : blueorangegames.com/sumoku/ Affected Version : 3.9.8 Tested On : Windows and Linux Category : WebApps Exploit Risk : Medium Vulnerabili...

Joomla Vemod News Mailer 1.0 SQL Injection

Exploit Title : Joomla Vemod News Mailer 1.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/10/2019 Vendor Homepage : vemod.unimatrix.net Software Affected Version : 1.0 - 1.5 /administrator/components/comvemodnewsmailer/versioncompat.php...

Joomla SwPhotoGallery 1.5.26 SQL Injection

Exploit Title : Joomla SwPhotoGallery 1.5.26 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/10/2019 Vendor Homepage : joomla.org Affected Versions : 1.5.16 and 1.5.26 Tested On : Windows and Linux Category : WebApps Exploit Risk : Medium...

Joomla Mad4Joomla 1.1.x SQL Injection

Exploit Title : Joomla 1.5.26 Mad4Joomla 1.1.x SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/10/2019 Vendor Homepage : mad4media.de Joomla Affected Versions : 1.5.16/1.5.18-1.5.26 Software Affected Versions : 1.1.1 - 1.1.2 - 1.1.3 - 1.1.4 -...

Thailand Union Library Management 6.2 SQL Injection / XSS

Exploit Title : Thailand Union Library Management 6.2 Cross Site Scripting SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 07/10/2019 Vendor Homepage : ulibm.net - 202.29.234.1/ULIB/index.php Software Affected Versions : 6 and 6.2 Tested On : Windo...

ParantezTeknoloji Library Software 16.0519000 Open Redirection

Exploit Title : ParantezTeknoloji Library Software 16.0519000 Open Redirection Vulnerability Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/10/2019 Vendor Homepage : parantezteknoloji.com.tr Software Affected Versions and Download Links : Koha 3.2000000...

LabCollector 5.423 - SQL Injection

LabCollector 5.423 - SQL Injection Exploit Title: LabCollector Laboratory Information System 5.423 - Multiples SQL Injection Date: 09/09/2019 Software Links/Project: https://www.labcollector.com/clientarea/downloads.php Version: LabCollector Laboratory Information System 5.423 Exploit Author:...