what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 51 - 59 of 59

Files from Rahad Chowdhury

Jorani Leave Management System 1.0.2 Host Header Injection

Posted Nov 20, 2023

Authored by Rahad Chowdhury, BugsBD Limited

Jorani Leave Management System version 1.0.2 suffers from a host header injection vulnerability.

tags | exploit

advisories | CVE-2023-48205

SHA-256 | bc2711283c28607516dfbaa6255081510178e2b648e462fc258213b1a077942b

Download | Favorite | View

Shuttle Booking Software 2.0 Cross Site Scripting

Posted Nov 20, 2023

Authored by Rahad Chowdhury, BugsBD Limited

Shuttle Booking Software version 2.0 suffers from multiple persistent cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

advisories | CVE-2023-48172

SHA-256 | 0de1511989924034ad40508fd410e62fa8897b9c0b905b4404ade0b31b19452a

Download | Favorite | View

ChurchCRM 4.5.4 Cross Site Scripting

Posted May 19, 2023

Authored by Rahad Chowdhury

ChurchCRM version 4.5.4 suffers from a cross site scripting vulnerability. Related CVE number: CVE-2023-31699.

tags | exploit, xss

SHA-256 | 1cef13f81fca74f1f1be50038d359524d192b4c9bd86189bc957c554555cdaab

Download | Favorite | View

Bludit CMS 3.14.1 Cross Site Scripting

Posted May 19, 2023

Authored by Rahad Chowdhury

Bludit CMS version 3.14.1 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2023-31698

SHA-256 | c763f7887a7cd8d09c3f415f238f727c5485294591378c8712913c8af09c36a3

Download | Favorite | View

Bang Resto 1.0 SQL Injection

Posted Apr 17, 2023

Authored by Rahad Chowdhury

Bang Resto version 1.0 suffers from multiple SQL injection vulnerabilities. Original discovery of SQL injection in this version is attributed to nu11secur1ty in December of 2022.

tags | exploit, vulnerability, sql injection

advisories | CVE-2023-29849

SHA-256 | 830f7a67075429912f3224cb5fce88465eb81d25f4ebb2bda9302affa7f8b938

Download | Favorite | View

Bang Resto 1.0 Cross Site Scripting

Posted Apr 17, 2023

Authored by Rahad Chowdhury

Bang Resto version 1.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2023-29848

SHA-256 | 3bcd061be0175f493d709795137a13080c0ab37d3a6eb0396dbd224f67d9cbd1

Download | Favorite | View

CSZ CMS 1.2.9 SQL Injection

Posted Mar 30, 2022

Authored by Rahad Chowdhury

CSZ CMS version 1.2.9 suffers from multiple remote blind SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, sql injection

advisories | CVE-2021-43701

SHA-256 | 7431b5b000bf66ac213ad90301229b8ea2b82227a6d242c3733700f2c7f0470d

Download | Favorite | View

Quick.CMS 6.7 Cross Site Request Forgery / Cross Site Scripting

Posted Nov 17, 2021

Authored by Rahad Chowdhury

Quick.CMS version 6.7 suffers from a cross site scripting vulnerability that can allow for cross site request forgery attacks.

tags | exploit, xss, csrf

SHA-256 | 67a0a105c6f950cecd0e39d185aca97751f39901cc4896bc691f737af9c4e4ec

Download | Favorite | View

Fuel CMS 1.4.13 SQL Injection

Posted Nov 15, 2021

Authored by Rahad Chowdhury

Fuel CMS version 1.4.13 suffers from a remote blind SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 89aa01458c081e7ffeb80e3535318e3e7118fd27787b31108ac29c5af120f3a6

Download | Favorite | View