Text Exploits
31,386 exploits tracked across all sources.
Online Enrollment Management System 1.0 - Authentication Bypass
by Amine ismail
Online Employees Work From Home Attendance System 1.0 - SQLi Authentication Bypass
by Merve Oral
Loan Management System 1.0 - SQLi Authentication Bypass
by Merve Oral
Online DJ Booking Management System 1.0 - Cross-Site Scripting in view-booking-detail.php
Cross Site Scripting (XSS).vulnerability exists in Online DJ Booking Management System 1.0 in view-booking-detail.php.
by Yash Mahajan
CVSS 6.1
Simple Online College Entrance Exam System 1.0 - SQLi Authentication Bypass
by Mevlüt Yılmaz
Online Traffic Offense Management System 1.0 - Multiple XSS (Unauthenticated)
by snup
Online Traffic Offense Management System 1.0 - Multiple SQL Injection (Unauthenticated)
by snup
Online Traffic Offense Management System 1.0 - Multiple RCE (Unauthenticated)
by snup
SLO Generator < 2.0.1 - Remote Code Execution via YAML File Loading
SLO generator allows for loading of YAML files that if crafted in a specific format can allow for code execution within the context of the SLO Generator. We recommend upgrading SLO Generator past https://github.com/google/slo-generator/pull/173
by Kiran Ghimire
CVSS 5.3
Odine Solutions GateKeeper 1.0 - SQL Injection
Odine Solutions GateKeeper 1.0 contains a SQL injection vulnerability in the trafficCycle API endpoint that allows remote attackers to inject malicious database queries. Attackers can exploit the vulnerability by sending crafted payloads to the /rass/api/v1/trafficCycle/ endpoint to manipulate PostgreSQL database queries and potentially extract sensitive information.
by Emel Basayar
CVSS 8.2
Atlassian Jira Server/Data Center Path Traversal via /WEB-INF/web.xml
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in the /WEB-INF/web.xml endpoint. The affected versions are before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1.
by Mayank Deshmukh
CVSS 5.3
Student Quarterly Grading System 1.0 - SQLi Authentication Bypass
by Blackhan
Atlassian Confluence Server <7.4.10, >7.5.0-7.12.2 - Info Disclosure
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.
by Mayank Deshmukh
CVSS 5.3
Lodging Reservation Management System 1.0 - SQL Injection via Login Username/Password Fields
The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bypass authentication.
by Nitin Sharma
CVSS 9.8
Young Entrepreneur E-Negosyo System 1.0 - SQL Injection Authentication Bypass
by Jordan Glover
Young Entrepreneur E-Negosyo System 1.0 - 'PRODESC' Stored Cross-Site Scripting (XSS)
by Jordan Glover
Payara Micro Community < 5.2021.6 - Path Traversal
Payara Micro Community 5.2021.6 and below allows Directory Traversal.
by Yasser Khan
CVSS 7.5
Dairy Farm Shop Management System v1.0 - SQL Injection
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0 allows attackers to bypass authentication.
by Sanjay Singh
CVSS 9.8
Directory Management System v1.0 - SQL Injection
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allows attackers to bypass authentication.
by Sanjay Singh
CVSS 9.8
phpwcms 1.9.30 - Authenticated Unrestricted Upload of Dangerous File via SVG File Upload
Phpwcms 1.9.30 contains a file upload vulnerability that allows authenticated attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload crafted SVG payloads through the multiple file upload feature to potentially execute cross-site scripting attacks on the platform.
by Okan Kurtulus
CVSS 5.4
Exam Form Submission System 1.0 - SQL Injection Authentication Bypass
by Nitin Sharma
Drupal Module MiniorangeSAML 8.x-2.22 - Privilege escalation
by Cristian \'void\' Giustini
Progress WhatsUp Gold < 21.1.0 - Unauthenticated Stored Cross-Site Scripting
In Progress WhatsUp Gold prior to version 21.1.0, an application endpoint failed to adequately sanitize malicious input. which could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.
by Andreas Finstad
CVSS 6.1
Cyber Cafe Management System Project v1.0 - SQL Injection
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication.
by Sanjay Singh
CVSS 9.8
By Source