Online Learning System version 2 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
30ecf4a53c3728d70068c785825932024f9cff4f32e676eb74ecf0ea12830978
COVID-19 Contact Tracing System web app with QR Code Scanning version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
65bfd748e4acc27cb5df73d53350628dfaef17ece6a6fe72d8b2737edaee7016
Online Leave Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
e78dd8b5ffb66e7907834608fdf4bbd7e16eb43fcbe3166f269c91a8918cec7c
Ship Ferry Ticket Reservation System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
803a0c96cba11ecfa8b1ec9bfa813ccb70c19b42780ebdf3ff7fe5814519b7cc
Hospital Management System created by kishan0725 suffers from a persistent cross site scripting vulnerability.
fba4631f14e90d73450defe4cb343ab885a20f7605579117cd8b3616832a11e4
TastyIgniter version 3.0.7 suffers from a persistent cross site scripting vulnerability.
8bc282866dfa7c402710f8b78eda642351f7bffc746f076008510fccb63455fb
PluXML version 5.8.7 suffers from a persistent cross site scripting vulnerability.
54990585b9bccec56f64c839b836fe6765dc931c23ca4c89ce1a18c08f9938cc
Chikitsa version 2.0.0 suffers from a cross site scripting vulnerability.
7866bd2e010152cadeea985b8259a7f9ff28f429ebbf5e5763e9bc38b409bd36
OneNav Beta version 0.9.12 suffers from a persistent cross site scripting vulnerability.
803274adb5909b1835e04650d9e1edee51c3d4b28380326211d5666dde18f8ee
Pandora FMS versions 7.54 and below suffer from a persistent cross site scripting vulnerability. This entry has been updated on 2021/07/23 with a fully automated version of the exploit.
e75ede29d2db34274ca7f88965ac59c8b998641434d14fc01906dab37a2fd3e1
COVID-19 Testing Management System version 1.0 remote SQL injection exploit based upon the original discovery by Rohit Burke in May of 2021.
0a0103bf0a7eac9dcea23976913fe85ee3e02bab59a17d48ed4103f626bfc8c4
Local Service Search Engine Management System version 1.0 remote SQL injection exploit that leverages the original discovery by Aditya Wakhlu in December of 2020.
30b6aaeeb041066b174beca7e2c68739a31ead9731d81b046760771d95b55046
Pandora FMS version 6.0SP3 suffers from a cross site scripting vulnerability.
3b6f367e28fda80ee9013841f4548d6f8dac15f5ef5c2407f7565d83c29588af
i-doit version 1.15.2 suffers from a cross site scripting vulnerability.
09bd54a79a7ea10a4acbf9651b08d12b5e851f8d241bfd83921b1cd5c24df50a
Spotweb-Develop version 1.4.9 suffers from a cross site scripting vulnerability.
edc08c2a5faaffc264b7ebd53bd4a33e8c3c676b0c81127f6aa98fce2d4127ad
b2evolution version 7-2-2 suffers from a remote SQL injection vulnerability.
8fcf6780fb886e3f47d5c83ca222ec282932c012986ba997bf2b83f2e8991aea
Piwigo version 11.3.0 suffers from a remote SQL injection vulnerability.
533a62f1f8e0052145c4e4a3cc6e36248076593a3246e51e8c573ba2c3b42ec6
SEO Panel version 4.8.0 remote blind SQL injection exploit. Original discovery in this version is attributed to Piyush Patil in February of 2021.
1484a300db9ca4769e7f8862d2b2c8deb6c8fe61ea69d300b5d0d81c9690ea4a
DzzOffice version 2.02.1 suffers from a cross site scripting vulnerability.
a88898d34a0dd38bd0a624051e9d6708e30ca923f0b025646fcc6f58fb4ea499
RemoteClinic 2 suffers from multiple cross site scripting vulnerabilities.
c45f8690b4b4bff71dc90d7b4222008bf3eb6231aed4384736a38bfc57fcbbcb
htmly version 2.8.0 suffers from a persistent cross site scripting vulnerability.
85e18bc2df9abe646cb059b1f16a9324d21a860943c8bb6dfbcd261cfcf66ba6
Horde Groupware Webmail version 5.2.22 suffers from a persistent cross site scripting vulnerability.
ac0067ca0ac896cea878797665b7d40d5e0749684dd8782ac6396bcae1757783
Webmail Edition version 5.2.22 suffers from remote code execution and cross site scripting vulnerabilities via the Horde_Text_Filter library.
61274f1f45025235aa4f5b093517018fc749ec8ab469618084fac2fa0a8d6fe9
CASAP Automated Enrollment System version 1.1 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
42eb07d9630195bb39e10b9baec9a00896bb2bb1cee634e40491dea6513c0e7b
Concrete5 version 8.5.4 suffers from a persistent cross site scripting vulnerability.
ac19392af3a74934edad1a97ba2e0362afa7cc9ca0161dbd106631cf67d66b6b