Ihsan Sencan

985 exploits Active since Sep 2017
EIP-2026-110747 EXPLOITDB text WRITEUP
Php Real Estate Property Script - SQL Injection
EIP-2026-110756 EXPLOITDB text WORKING POC
PHP Search Engine 1.0 - SQL Injection
CVE-2017-17624 EXPLOITDB CRITICAL text WRITEUP
PHP Multivendor Ecommerce 1.0 - SQL Injection via single_detail.php or category.php
PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.
CVSS 9.8
EIP-2026-110722 EXPLOITDB text WORKING POC
PHP Mass Mail 1.0 - Arbitrary File Upload
EIP-2026-110723 EXPLOITDB text WORKING POC
PHP Matrimonial Script 3.0 - SQL Injection
EIP-2026-110777 EXPLOITDB text WORKING POC
PHP Uber-style GeoTracking 1.1 - SQL Injection
EIP-2026-110682 EXPLOITDB text WORKING POC
PHP Dashboards NEW 5.8 - Local File Inclusion
EIP-2026-110702 EXPLOITDB text WORKING POC
PHP Forum Script 3.0 - SQL Injection
CVE-2017-15990 EXPLOITDB CRITICAL text WRITEUP
Savsofteproducts Phpinventory - Unrestricted File Upload
Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/edit_myaccountdetail/.
CVSS 9.8
EIP-2026-110681 EXPLOITDB text WORKING POC
PHP Dashboards NEW 5.8 - 'dashID' SQL Injection
EIP-2026-110675 EXPLOITDB text WORKING POC
PHP Coupon Script 6.0 - 'cid' SQL Injection
EIP-2026-110678 EXPLOITDB text WRITEUP
PHP Dashboards NEW 4.4 - Arbitrary File Read
EIP-2026-110679 EXPLOITDB text WRITEUP
PHP Dashboards NEW 4.4 - SQL Injection
EIP-2026-110711 EXPLOITDB text WORKING POC
PHP Jokesite 2.0 - 'joke_id' SQL Injection
CVE-2017-15970 EXPLOITDB CRITICAL text WRITEUP
Phpcityportal - SQL Injection
PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter.
CVSS 9.8
EIP-2026-110666 EXPLOITDB text WORKING POC
Php Classified OLX Clone Script - 'category' SQL Injection
EIP-2026-110671 EXPLOITDB text WORKING POC
PHP Classifieds Rental Script 3.6.0 - 'scatid' SQL Injection
EIP-2026-110654 EXPLOITDB text WORKING POC
PHP B2B Script 3.05 - SQL Injection
EIP-2026-110672 EXPLOITDB text SUSPICIOUS
PHP Classifieds Script 5.6.2 - SQL Injection
EIP-2026-110720 EXPLOITDB text WORKING POC
PHP Logo Designer Script - Arbitrary File Upload
CVE-2018-18800 EXPLOITDB CRITICAL text WORKING POC
Tubigan Welcome to our Resort 1.0 - SQL Injection via index.php or admin/login.php Parameters
The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q=[SQL], index.php?p=rooms&q=[SQL], or admin/login.php.
CVSS 9.8
EIP-2026-110545 EXPLOITDB text WRITEUP
Penny Auction Script - Arbitrary File Upload
EIP-2026-110500 EXPLOITDB text WRITEUP
Pay Banner Text Link Ad 1.0.6.1 - SQL Injection
EIP-2026-110555 EXPLOITDB text WORKING POC
Pet Listing Script 3.0 - SQL Injection
CVE-2017-17651 EXPLOITDB CRITICAL text WORKING POC
Paid To Read Script 2.0.5 - SQL Injection via Admin Panel Parameters
Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter.
CVSS 9.8