Ihsan Sencan

985 exploits Active since Sep 2017
EIP-2026-111634 EXPLOITDB text WORKING POC
Questions and Answers Script 2.0.0 - 'cid' SQL Injection
EIP-2026-111636 EXPLOITDB text WORKING POC
Quick Count 2.0 - 'txtInstID' SQL Injection
CVE-2018-5972 EXPLOITDB CRITICAL text WORKING POC
Classified Ads CMS Quickad 4.0 - SQL Injection
SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI.
CVSS 9.8
CVE-2018-18760 EXPLOITDB MEDIUM text WORKING POC
RhinOS 3.0 build 1190 - Cross-Site Request Forgery
RhinOS 3.0 build 1190 allows CSRF.
CVSS 6.5
EIP-2026-111653 EXPLOITDB text WRITEUP
Quiz Template 1.0 - 'testid' SQL Injection
EIP-2026-111805 EXPLOITDB text WORKING POC
Roxy Fileman 1.4.5 - Arbitrary File Download
EIP-2026-112029 EXPLOITDB text WRITEUP
Shopping Cart Template - 'item' SQL Injection
EIP-2026-112039 EXPLOITDB text WORKING POC
SiAdmin 1.1 - 'id' SQL Injection
EIP-2026-112018 EXPLOITDB text WRITEUP
Shiksha Educational Website Script - SQL Injection
EIP-2026-112010 EXPLOITDB text WORKING POC
SG ERP 1.0 - 'info' SQL Injection
CVE-2017-15979 EXPLOITDB CRITICAL text WRITEUP
Shareet 1.0 - SQL Injection via Photo Parameter
Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter.
CVSS 9.8
EIP-2026-112017 EXPLOITDB text WORKING POC
Shield CMS 2.2 - 'email' SQL Injection
EIP-2026-111979 EXPLOITDB text WRITEUP
Sendroid 5.2 - SQL Injection
EIP-2026-111942 EXPLOITDB text WORKING POC
Schools Alert Management Script 2.01 - 'list_id' SQL Injection
EIP-2026-111965 EXPLOITDB text WORKING POC
Secure Download Links - 'dc' SQL Injection
CVE-2018-18795 EXPLOITDB CRITICAL text WORKING POC
School Event Management System 1.0 - SQL Injection via id Parameter
School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter.
CVSS 9.8
EIP-2026-111936 EXPLOITDB text WORKING POC
SchoolDir - SQL Injection
CVE-2017-17629 EXPLOITDB CRITICAL text WORKING POC
Secure E-commerce Script 2.0.1 - SQL Injection via Category Search or Product Detail Parameters
Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the single_detail.php sid parameter.
CVSS 9.8
EIP-2026-111921 EXPLOITDB text WORKING POC
School ERP Ultimate 2018 - Arbitrary File Download
CVE-2018-18793 EXPLOITDB CRITICAL text WORKING POC
School Event Management System 1.0 - Arbitrary File Upload via Event Controller
School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.
CVSS 9.8
EIP-2026-111972 EXPLOITDB text WRITEUP
Select Your College Script 2.01 - SQL Injection
CVE-2018-18794 EXPLOITDB HIGH text WORKING POC
School Event Management System 1.0 - Cross-Site Request Forgery via User Edit Endpoint
School Event Management System 1.0 allows CSRF via user/controller.php?action=edit.
CVSS 8.8
CVE-2018-18797 EXPLOITDB HIGH text WORKING POC
School Attendance Monitoring System 1.0 - Cross-Site Request Forgery via User Edit Endpoint
School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.
CVSS 8.8
CVE-2018-18798 EXPLOITDB CRITICAL text WORKING POC
School Attendance Monitoring System 1.0 - SQL Injection via ID Parameter
Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.php?view=view, and user/index.php?view=view.
CVSS 9.8
EIP-2026-111918 EXPLOITDB text WORKING POC
School ERP Pro+Responsive 1.0 - 'fid' SQL Injection