what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 6 of 6

Files from AppleBois

Online Polling System SQL Injection

Posted Jul 13, 2020

Authored by AppleBois

Online Polling System from sourcecodester.com suffers from a remote SQL injection vulnerability that allows for authentication bypass.

tags | exploit, remote, sql injection

SHA-256 | ea00ff15150a6d44f9dd08e68bd8acd244676fcf39a8175e01f172e8c9afcea2

Download | Favorite | View

Pandora FMS 7.0 NG 746 Script Insertion / Code Execution

Posted Jul 11, 2020

Authored by AppleBois

Pandora FMS 7.0 NG versions 746 and below remote code execution exploit that leverages cross site scripting. Requires administrator to perform an snmp scan with a cross site scripting payload.

tags | exploit, remote, code execution, xss

SHA-256 | 64e36d03c3089797faac90e20543e9c26c28b2c3f60a28025478ea83f9b2f677

Download | Favorite | View

Impress CMS 1.4.0 Cross Site Scripting

Posted Jul 11, 2020

Authored by AppleBois

Impress CMS version 1.4.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | d10c089c482e9a376b11b78b769234c7086f5f071f9528b04cef9c32ebcc2666

Download | Favorite | View

Webtareas 2.1 / 2.1p Cross Site Scripting

Posted Jul 11, 2020

Authored by AppleBois

Webtareas versions 2.1 and 2.1p suffer from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | de709b9e636a45bf06e8b4e80254324fea43fed9981b29bd397fa39ab3075c9f

Download | Favorite | View

Impress CMS 1.4.0 Code Execution / SQL Injection

Posted Jul 10, 2020

Authored by AppleBois

Impress CMS version 1.4.0 has an issue where an authenticated user can make use of the AutoTask feature to execute php code, allowing for remote SQL injection and remote code execution.

tags | exploit, remote, php, code execution, sql injection

SHA-256 | 9af1e147863cdc8908cda32853a430105e60b827ab0835a71f164db2e27b4b8d

Download | Favorite | View

Webtareas 2.1 / 2.1p File Upload / Information Disclosure

Posted Jul 9, 2020

Authored by AppleBois

Webtareas versions 2.1 and 2.1p suffer from unauthenticated file uploads that allow for remote code execution and expose directory listings.

tags | exploit, remote, code execution, info disclosure, file upload

SHA-256 | 50d4e7012c5d0dd6638cdbd956d6d2350c54598bb9e29b1aaf08aea28992ed75

Download | Favorite | View