admin
# Exploit Title: Phone Shop Sales Management System – Arbitrary File Upload (Unauthenticated)# Date: 20/04/21# Exploit Author:...
upload
# Exploit Title: Native Church Website – Arbitrary File Upload (Authenticated)# Date: 04/21# Exploit Author: Richard Jones#...
# Exploit Title: Composr 10.0.36 – Remote Code Execution# Date: 04/06/2021# Exploit Author: Orion Hridoy# Vendor Homepage:...
SEC Consult Vulnerability Lab Security Advisory =======================================================================title: Arbitrary File Upload and Bypassing .htaccess Rulesproduct: Monospace...
# Exploit Title: Atlassian Jira Service Desk 4.9.1 - Unrestricted File Upload to XSS # Date: 07...
# Exploit Title: ScadaBR 1.0 – Arbitrary File Upload (Authenticated) (1)# Date: 03/2021# Exploit Author: Fellipe Oliveira#...
# Exploit Title: ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (2) # Date: 04/21 # Exploit Author:...
# Exploit Title: ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (1) # Date: 03/2021 # Exploit Author:...
# Exploit Title: GetSimple CMS 3.3.16 – Reflected XSS to RCE# Exploit Author: Bobby Cooke (boku)# Discovery...
Development Kamel KCFinder 1.7 Shell Upload Posted Mar 26, 2021 Authored by Rayan Ali Development Kamel KCFinder...
### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##class MetasploitModule < Msf::Exploit::RemoteRank = NormalRanking include Msf::Exploit::EXEprepend Msf::Exploit::Remote::AutoCheckinclude...
# Exploit Title: Dolibarr ERP/CRM 11.0.4 - File Upload Restrictions Bypass (Authenticated RCE) # Date: 16/06/2020 #...
# Exploit Title: Online Faculty Clearance System Shell Upload# Exploit Author: th3d1gger# Vendor Homepage: https://sourcecodester.com# Software Link:...
Online Reviewer Management System version 1.0 suffers from a remote shell upload vulnerability. Source link
1) Summary Affected software CMS Made Simple-2.2.15Vendor URLhttp://www.cmsmadesimple.org/ Vulnerability File upload bypass with .phar extension lead to...
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Exploit::Remote Rank...
Alphaware E-Commerce System 1.0 – Unauthenicated Remote Code Execution (File Upload + SQL injection)
3 min read
Alphaware E-Commerce System 1.0 – Unauthenicated Remote Code Execution (File Upload + SQL injection)
# Exploit Title: Alphaware E-Commerce System 1.0 - Unauthenicated Remote Code Execution (File Upload + SQL injection)...
# Exploit Title: rConfig 3.9.6 – Arbitrary File Upload to Remote Code Execution (Authenticated)# Date: 2021-03-17# Exploit...
# Exploit Title: rConfig 3.9.6 - Arbitrary File Upload to Remote Code Execution (Authenticated) # Date: 2021-03-17 #...
[*]#! /usr/bin/env python3[*]## Exploit Title: CuteNews 2.1.2 – Avatar upload RCE (Authenticated)## Exploit Author: Mayank Deshmukh## Date:...
