Ihsan Sencan

985 exploits Active since Sep 2017
EIP-2026-112135 EXPLOITDB text WORKING POC
Simple POS and Inventory 1.0 - 'cat' SQL Injection
EIP-2026-112171 EXPLOITDB text WORKING POC
Single Theater Booking Script - 'newsid' SQL Injection
CVE-2017-14842 EXPLOITDB HIGH text WORKING POC
smsmaster_multipurpose_sms_gateway - SQL Injection via id Parameter
Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress allows SQL Injection via the id parameter.
CVSS 8.8
EIP-2026-112089 EXPLOITDB text WORKING POC
Simple E-Document 1.31 - 'username' SQL Injection
EIP-2026-112068 EXPLOITDB text WORKING POC
Simple Chat System 1.0 - 'id' SQL Injection
EIP-2026-112281 EXPLOITDB text WRITEUP
SOA School Management - 'view' SQL Injection
CVE-2017-17593 EXPLOITDB HIGH text WRITEUP
Simple Chatting System 1.0 - Arbitrary File Upload via my_profile.php
Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.
CVSS 7.5
EIP-2026-112287 EXPLOITDB text WORKING POC
Social Directory Script 2.0 - SQL Injection
EIP-2026-112039 EXPLOITDB text WORKING POC
SiAdmin 1.1 - 'id' SQL Injection
EIP-2026-112029 EXPLOITDB text WRITEUP
Shopping Cart Template - 'item' SQL Injection
CVE-2017-15979 EXPLOITDB CRITICAL text WRITEUP
Shareet 1.0 - SQL Injection via Photo Parameter
Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter.
CVSS 9.8
EIP-2026-112017 EXPLOITDB text WORKING POC
Shield CMS 2.2 - 'email' SQL Injection
EIP-2026-112018 EXPLOITDB text WRITEUP
Shiksha Educational Website Script - SQL Injection
CVE-2017-17629 EXPLOITDB CRITICAL text WORKING POC
Secure E-commerce Script 2.0.1 - SQL Injection via Category Search or Product Detail Parameters
Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the single_detail.php sid parameter.
CVSS 9.8
EIP-2026-111972 EXPLOITDB text WRITEUP
Select Your College Script 2.01 - SQL Injection
EIP-2026-111979 EXPLOITDB text WRITEUP
Sendroid 5.2 - SQL Injection
EIP-2026-111942 EXPLOITDB text WORKING POC
Schools Alert Management Script 2.01 - 'list_id' SQL Injection
EIP-2026-112010 EXPLOITDB text WORKING POC
SG ERP 1.0 - 'info' SQL Injection
EIP-2026-111965 EXPLOITDB text WORKING POC
Secure Download Links - 'dc' SQL Injection
EIP-2026-111919 EXPLOITDB text WORKING POC
School ERP Pro+Responsive 1.0 - Arbitrary File Download
EIP-2026-111920 EXPLOITDB text WORKING POC
School ERP Ultimate 2018 - 'fid' SQL Injection
EIP-2026-111921 EXPLOITDB text WORKING POC
School ERP Ultimate 2018 - Arbitrary File Download
EIP-2026-111918 EXPLOITDB text WORKING POC
School ERP Pro+Responsive 1.0 - 'fid' SQL Injection
CVE-2018-18799 EXPLOITDB HIGH text WORKING POC
School Attendance Monitoring System 1.0 - Cross-Site Request Forgery via event/controller.php
School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.
CVSS 8.8
CVE-2018-18797 EXPLOITDB HIGH text WORKING POC
School Attendance Monitoring System 1.0 - Cross-Site Request Forgery via User Edit Endpoint
School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.
CVSS 8.8