Ihsan Sencan

985 exploits Active since Sep 2017
CVE-2017-14839 EXPLOITDB HIGH text WRITEUP
TeamWork Photo Fusion - Arbitrary File Upload
TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.
CVSS 8.8
EIP-2026-110678 EXPLOITDB text WRITEUP
PHP Dashboards NEW 4.4 - Arbitrary File Read
EIP-2026-110500 EXPLOITDB text WRITEUP
Pay Banner Text Link Ad 1.0.6.1 - SQL Injection
CVE-2017-17651 EXPLOITDB CRITICAL text WORKING POC
Paid To Read Script 2.0.5 - SQL Injection via Admin Panel Parameters
Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter.
CVSS 9.8
EIP-2026-110478 EXPLOITDB text WRITEUP
Parcel Delivery Booking Script 1.0 - SQL Injection
EIP-2026-110499 EXPLOITDB html WORKING POC
Pay Banner Text Link Ad 1.0.6.1 - Cross-Site Request Forgery (Update Admin)
EIP-2026-110237 EXPLOITDB text WORKING POC
Open Source Real-Estate Script - SQL Injection
EIP-2026-110324 EXPLOITDB text WRITEUP
Opensource Classified Ads Script - 'keyword' SQL Injection
EIP-2026-110217 EXPLOITDB text WORKING POC
OPAC EasyWeb Five 5.7 - 'nome' SQL Injection
CVE-2017-17623 EXPLOITDB CRITICAL html WORKING POC
Opensource Classified Ads Script 3.2 - SQL Injection via Advance Result Keyword Parameter
Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.
CVSS 9.8
EIP-2026-110157 EXPLOITDB text WRITEUP
Online Printing Business Clone Script - SQL Injection
EIP-2026-110161 EXPLOITDB text WORKING POC
Online Quiz Project 1.0 - SQL Injection
EIP-2026-110199 EXPLOITDB text WRITEUP
Online Tshirt Design Script - SQL Injection
EIP-2026-110128 EXPLOITDB text WORKING POC
Online Job Portal 1.0 - Cross Site Request Forgery (Add User)
EIP-2026-110130 EXPLOITDB text WORKING POC
Online Job Portal 1.0 - Remote Code Execution
EIP-2026-110127 EXPLOITDB text WORKING POC
Online Job Portal 1.0 - 'user_email' SQL Injection
EIP-2026-110145 EXPLOITDB text WRITEUP
Online Mobile Recharge Script - SQL Injection
CVE-2017-17622 EXPLOITDB CRITICAL text WORKING POC
Online Exam Test Application Script 1.6 - SQL Injection via exams.php sort parameter
Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.
CVSS 9.8
EIP-2026-110156 EXPLOITDB text WORKING POC
Online Print Business 1.0 - SQL Injection
EIP-2026-110123 EXPLOITDB text WORKING POC
Online Invoice System 3.0 - SQL Injection
EIP-2026-110027 EXPLOITDB text WRITEUP
Omegle Clone - SQL Injection
EIP-2026-110068 EXPLOITDB text WORKING POC
Online Cinema and Event Booking Script 2.01 - 'newsid' SQL Injection
CVE-2017-15989 EXPLOITDB CRITICAL text WORKING POC
Online Exam Test Application - SQL Injection via Sort Parameter
Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action.
CVSS 9.8
EIP-2026-109799 EXPLOITDB text WORKING POC
MySQL File Uploader 1.0 - 'id' SQL Injection
EIP-2026-109839 EXPLOITDB text WORKING POC
Naukri Clone Script 3.02 - 'type' SQL Injection