Ihsan Sencan

985 exploits Active since Sep 2017
CVE-2017-17592 EXPLOITDB CRITICAL text WORKING POC
Website Auction Marketplace 2.0.5 - SQL Injection via search.php cat_id Parameter
Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.
CVSS 9.8
CVE-2017-15992 EXPLOITDB CRITICAL text WORKING POC
Website Broker Script - SQL Injection via status_id Parameter
Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.
CVSS 9.8
EIP-2026-113349 EXPLOITDB text WORKING POC
Website Broker Script 3.02 - 'view' SQL Injection
EIP-2026-113384 EXPLOITDB text WORKING POC
WebVet 0.1a - 'id' SQL Injection
EIP-2026-113316 EXPLOITDB text WORKING POC
Webiness Inventory 2.3 - Arbitrary File Upload / Cross-Site Request Forgery (Add Admin)
EIP-2026-112928 EXPLOITDB text WORKING POC
User Registration & Login and User Management System 2.1 - SQL Injection
EIP-2026-112917 EXPLOITDB text WRITEUP
Uploadr - SQL Injection
EIP-2026-112919 EXPLOITDB text WORKING POC
Upworthy Clone Script 1.1.0 - 'id' SQL Injection
CVE-2017-15980 EXPLOITDB CRITICAL text WORKING POC
US Zip Codes Database Script 1.0 - SQL Injection via State Parameter
US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter.
CVSS 9.8
CVE-2018-5984 EXPLOITDB CRITICAL text WORKING POC
Tumder 2.1 - Joomla! - SQL Injection
SQL Injection exists in the Tumder (An Arcade Games Platform) 2.1 component for Joomla! via the PATH_INFO to the category/ URI.
CVSS 9.8
EIP-2026-112887 EXPLOITDB text WORKING POC
Ultimate Viral Media Script 1.0 - 'id' SQL Injection
EIP-2026-112903 EXPLOITDB text WORKING POC
University Application System 1.0 - SQL Injection / Cross-Site Request Forgery (Add Admin)
EIP-2026-112904 EXPLOITDB text WORKING POC
University Application System 1.0 - SQL Injection / Cross-Site Request Forgery (Add Admin)
EIP-2026-112747 EXPLOITDB html WORKING POC
Topsites Script 1.0 - Cross-Site Request Forgery / PHP Code Injection
EIP-2026-112756 EXPLOITDB text WRITEUP
Tour Package Booking 1.0 - SQL Injection
EIP-2026-112759 EXPLOITDB text WORKING POC
Tourism Website Blog - Remote Code Execution / SQL Injection
EIP-2026-112689 EXPLOITDB text WORKING POC
Time and Expense Management System 3.0 - Cross-Site Request Forgery (Add Admin)
CVE-2017-14840 EXPLOITDB HIGH text WORKING POC
TeamWork TicketPlus - Code Injection
TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.
CVSS 8.8
EIP-2026-112675 EXPLOITDB text WORKING POC
Tiger Post 3.0.1 - SQL Injection
CVE-2017-15974 EXPLOITDB CRITICAL text WORKING POC
tPanel 2009 - SQL Injection via login.php Authentication Bypass
tPanel 2009 allows SQL injection for Authentication Bypass via 'or 1=1 or ''=' to login.php.
CVSS 9.8
EIP-2026-112688 EXPLOITDB text WORKING POC
Time and Expense Management System 3.0 - 'table' SQL Injection
EIP-2026-112645 EXPLOITDB text WORKING POC
Theater Management Script - SQL Injection
EIP-2026-112652 EXPLOITDB text WORKING POC
Themeforest Clone Script - SQL Injection
EIP-2026-112631 EXPLOITDB text WORKING POC
The Car Project 1.0 - SQL Injection
EIP-2026-112633 EXPLOITDB text WORKING POC
The Don 1.0.1 - 'login' SQL Injection