Ihsan Sencan

985 exploits Active since Sep 2017
EIP-2026-111636 EXPLOITDB text WORKING POC
Quick Count 2.0 - 'txtInstID' SQL Injection
CVE-2018-5972 EXPLOITDB CRITICAL text WORKING POC
Classified Ads CMS Quickad 4.0 - SQL Injection
SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI.
CVSS 9.8
EIP-2026-111633 EXPLOITDB text WRITEUP
Questions and Answers Script 1.1.3 - 'id' SQL Injection
CVE-2017-17627 EXPLOITDB CRITICAL text WORKING POC
Readymade Video Sharing Script 3.2 - SQL Injection via Report Videos Array Parameter
Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.
CVSS 9.8
EIP-2026-111653 EXPLOITDB text WRITEUP
Quiz Template 1.0 - 'testid' SQL Injection
EIP-2026-112018 EXPLOITDB text WRITEUP
Shiksha Educational Website Script - SQL Injection
CVE-2017-17591 EXPLOITDB CRITICAL text WORKING POC
Realestate Crowdfunding Script 2.7.2 - SQL Injection via single-cause.php pid Parameter
Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.
CVSS 9.8
EIP-2026-112029 EXPLOITDB text WRITEUP
Shopping Cart Template - 'item' SQL Injection
EIP-2026-111731 EXPLOITDB text WRITEUP
Redbus Clone Script 3.05 - 'hid_Busid' SQL Injection
EIP-2026-111626 EXPLOITDB text WRITEUP
Quadz School Management System 3.1 - 'uisd' SQL Injection
EIP-2026-111520 EXPLOITDB text WRITEUP
Professional Service Booking Script - SQL Injection
CVE-2017-17625 EXPLOITDB CRITICAL text WORKING POC
Professional Service Script 1.0 - SQL Injection via City Parameter
Professional Service Script 1.0 has SQL Injection via the service-list city parameter.
CVSS 9.8
EIP-2026-111551 EXPLOITDB text WORKING POC
Property Listing Script 3.1 - SQL Injection
EIP-2026-111519 EXPLOITDB text WORKING POC
Professional Service Booking 1.0 - SQL Injection
EIP-2026-111488 EXPLOITDB text WORKING POC
Premium Penny Auction Script - SQL Injection
EIP-2026-111517 EXPLOITDB text WRITEUP
Professional Bus Booking Script - 'hid_Busid' SQL Injection
CVE-2017-15977 EXPLOITDB CRITICAL text WORKING POC
Protected Links - Expiring Download Links 1.0 - SQL Injection via Username Parameter
Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter.
CVSS 9.8
CVE-2018-5973 EXPLOITDB CRITICAL text WORKING POC
Professional Local Directory Script 1.0 - SQL Injection
SQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter.
CVSS 9.8
CVE-2018-18805 EXPLOITDB CRITICAL text WORKING POC
Pointofsales - SQL Injection
Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb.
CVSS 9.8
EIP-2026-111569 EXPLOITDB text WORKING POC
PTC KSV1 Script 1.7 - 'type' SQL Injection
EIP-2026-111407 EXPLOITDB text WORKING POC
Poppy Web Interface Generator 0.8 - Arbitrary File Upload
EIP-2026-111572 EXPLOITDB text WORKING POC
PTCEvolution 5.50 - SQL Injection
EIP-2026-110654 EXPLOITDB text WORKING POC
PHP B2B Script 3.05 - SQL Injection
CVE-2017-15970 EXPLOITDB CRITICAL text WRITEUP
Phpcityportal - SQL Injection
PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter.
CVSS 9.8
EIP-2026-110666 EXPLOITDB text WORKING POC
Php Classified OLX Clone Script - 'category' SQL Injection