Awesome-POC

images

update

2025-04-07 16:36:34 +08:00

74cms v4.2.1 v4.2.129 后台getshell漏洞.md

update

2024-11-06 14:10:36 +08:00

74cms v5.0.1 后台跨站请求伪造漏洞 CVE-2019-11374.md

update

2024-11-06 14:10:36 +08:00

Anchor CMS 0.12.7 跨站请求伪造 CVE-2020-23342.md

update

2024-11-06 14:10:36 +08:00

AspCMS commentList.asp SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

BloofoxCMS 0.5.2.1 存储型XSS.md

update

2024-12-18 10:47:51 +08:00

BSPHP index.php 未授权访问信息泄露漏洞.md

update

2024-11-06 14:10:36 +08:00

CMS Made Simple (CMSMS) 前台SQL注入漏洞 CVE-2019-9053.md

update

2024-11-06 14:10:36 +08:00

CMS Made Simple (CMSMS) 前台代码执行漏洞 CVE-2021-26120.md

update

2024-11-06 14:10:36 +08:00

CmsEasy crossall_act.php SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

CmsEasy language_admin.php 后台命令执行漏洞.md

update

2024-11-06 14:10:36 +08:00

CmsEasy update_admin.php 后台任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

CraftCMS register_argc_argv 远程代码执行漏洞 CVE-2024-56145.md

update

2025-04-07 16:36:34 +08:00

CraftCMS 未授权远程代码执行漏洞 CVE-2023-41892.md

update CVE-2023-41892

2025-04-07 16:27:02 +08:00

CxCMS Resource.ashx 任意文件读取漏洞.md

update

2024-11-06 14:10:36 +08:00

DedeCMS 5.7 file_manage_control.php 文件包含 RCE CVE-2023-2928.md

update

2024-11-06 14:10:36 +08:00

DedeCMS 5.7SP2 代码执行漏洞 CVE-2019-8933.md

update

2024-11-06 14:10:36 +08:00

DedeCMS 5.8.1 common.func.php 远程命令执行漏洞.md

update

2024-11-06 14:10:36 +08:00

Discuz 3.4 最新版后台getshell.md

update

2024-11-06 14:10:36 +08:00

Discuz 7.x6.x 全局变量防御绕过导致代码执行.md

update

2024-11-06 14:10:36 +08:00

Discuz!X3.4 后台修改UCenter配置getshell漏洞.md

update

2024-11-06 14:10:36 +08:00

Discuz!X 3.4 admincp_setting.php 后台SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

Discuz!X ≤3.4 任意文件删除漏洞.md

update

2024-11-06 14:10:36 +08:00

DocCMS keyword SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

Drupal 7.32 “Drupalgeddon” SQL注入漏洞 CVE-2014-3704.md

update

2024-11-06 14:10:36 +08:00

Drupal Core 8 PECL YAML 反序列化任意代码执行漏洞 CVE-2017-6920.md

update

2024-11-06 14:10:36 +08:00

Drupal Drupalgeddon 2 远程代码执行漏洞 CVE-2018-7600.md

update

2024-11-06 14:10:36 +08:00

Drupal XSS漏洞 CVE-2019-6341.md

update

2024-11-06 14:10:36 +08:00

Drupal 远程代码执行漏洞 CVE-2018-7602.md

update

2024-11-06 14:10:36 +08:00

Drupal 远程代码执行漏洞 CVE-2019-6339.md

update

2024-11-06 14:10:36 +08:00

ECShop 2.x3.x SQL注入任意代码执行漏洞.md

update

2024-11-06 14:10:36 +08:00

ECShop 4.x collection_list SQL注入.md

update

2024-11-06 14:10:36 +08:00

emlog widgets.php 后台SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

ezEIP 4.1.0 信息泄露漏洞.md

update

2024-11-06 14:10:36 +08:00

Fuel CMS 1.4.1 远程代码执行漏洞.md

update

2024-11-06 14:10:36 +08:00

Joomla 3.4.5 反序列化漏洞 CVE-2015-8562.md

update

2024-11-06 14:10:36 +08:00

Joomla 3.7.0 SQL注入漏洞 CVE-2017-8917).md

update

2024-11-06 14:10:36 +08:00

Joomla application 权限绕过漏洞 CVE-2023-23752.md

update

2024-11-06 14:10:36 +08:00

Joomla 目录遍历及远程代码执行漏洞 CVE-2021-23132.md

update

2024-11-06 14:10:36 +08:00

JunAms内容管理系统文件上传漏洞 CNVD-2020-24741.md

update

2024-11-06 14:10:36 +08:00

Ke361 AuthManagerController.class.php 后台SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

Ke361 DistrictController.class.php 后台SQL注入漏洞 CNVD-2021-25002.md

update

2024-11-06 14:10:36 +08:00

Ke361 GoodsController.class.php SSRF漏洞.md

update

2024-11-06 14:10:36 +08:00

Ke361 MenuController.class.php 后台SQL注入漏洞 CNVD-2021-25002.md

update

2024-11-06 14:10:36 +08:00

Ke361 TopicController.class.php SQL注入漏洞 CNVD-2017-04380.md

update

2024-11-06 14:10:36 +08:00

Liferay Portal CE 反序列化命令执行漏洞 CVE-2020-7961.md

update

2024-11-06 14:10:36 +08:00

OKLite 1.2.25 后台插件安装任意文件上传.md

update

2024-11-06 14:10:36 +08:00

OKLite 1.2.25 后台模块导入任意文件上传 CVE-2019-16131.md

update

2024-11-06 14:10:36 +08:00

OKLite 1.2.25 后台风格模块任意文件删除 CVE-2019-16132.md

update

2024-11-06 14:10:36 +08:00

OneBlog 开源博客管理系统远程命令执行漏洞.md

update

2024-11-06 14:10:36 +08:00

OpenSNS Application ShareController.class.php 远程命令执行漏洞.md

update

2024-11-06 14:10:36 +08:00

OpenSNS AuthorizeController.class.php 后台远程命令执行漏洞.md

update

2024-11-06 14:10:36 +08:00

OpenSNS ChinaCityController.class.php SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

OpenSNS CurlModel.class.php SSRF漏洞.md

update

2024-11-06 14:10:36 +08:00

OpenSNS ThemeController.class.php 后台任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

OpenSNS ThemeController.class.php 后台任意文件下载漏洞.md

update

2024-11-06 14:10:36 +08:00

Pb-CMS Shiro默认密钥远程命令执行漏洞.md

update

2024-11-06 14:10:36 +08:00

PbootCMS domain SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

PbootCMS ext_price SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

PbootCMS search SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

PbootCMS V3.1.2 正则绕过 RCE 漏洞.md

update

2024-11-06 14:10:36 +08:00

PigCMS action_flashUpload 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

ShopXO download 任意文件读取漏洞 CNVD-2021-15822.md

update

2024-11-06 14:10:36 +08:00

Tiki Wiki CMS Groupware 认证绕过漏洞 CVE-2020-15906.md

update

2024-11-06 14:10:36 +08:00

TypesetterCMS 后台任意文件上传.md

update

2024-11-06 14:10:36 +08:00

UCMS 文件上传漏洞 CVE-2020-25483.md

update

2024-11-06 14:10:36 +08:00

WeiPHP3.0 session_id 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

WeiPHP5.0 bind_follow SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

WeiPHP5.0 download_imgage 前台文件任意读取 CNVD-2020-68596.md

update

2024-11-06 14:10:36 +08:00

WeiPHP5.0 任意用户Cookie伪造 CNVD-2021-09693.md

update

2024-11-06 14:10:36 +08:00

Wordpress 4.6 任意命令执行漏洞 PwnScriptum.md

update

2024-11-06 14:10:36 +08:00

WordPress 3DPrint Lite 3dprint-lite-functions.php 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

WordPress All-in-One Video Gallery video.php 任意文件读取漏洞 CVE-2022-2633.md

update

2024-11-06 14:10:36 +08:00

WordPress Duplicator duplicator.php 任意文件读取漏洞 CVE-2020-11738.md

update

2024-11-06 14:10:36 +08:00

WordPress Elementor Page Builder Plus 身份验证绕过 CVE-2021-24175.md

update

2024-11-06 14:10:36 +08:00

WordPress File Manager＜6.9 RCE CVE-2020-25213.md

update

2024-11-06 14:10:36 +08:00

WordPress Redux Framework class-redux-helpers.php 敏感信息泄漏漏洞 CVE-2021-38314.md

update

2024-11-06 14:10:36 +08:00

WordPress Simple File List ee-downloader.php 任意文件读取漏洞 CVE-2022-1119.md

update

2024-11-06 14:10:36 +08:00

WordPress SuperForms 4.9 任意文件上传到远程代码执行.md

update

2024-11-06 14:10:36 +08:00

WordPress WP_Query SQL 注入漏洞 CVE-2022-21661.md

update

2024-11-06 14:10:36 +08:00

YzmCMS Version 小于V5.8正式版后台采集模块 SSRF漏洞.md

update

2024-11-06 14:10:36 +08:00

zzzcms v1.7.5 前台远程命令执行漏洞.md

update

2025-04-07 16:36:34 +08:00

华宜互联硬编码超级管理员漏洞.md

update

2024-11-06 14:10:36 +08:00

原创先锋后台管理平台未授权访问漏洞.md

update

2024-11-06 14:10:36 +08:00

发货100 M_id SQL注入漏洞 CNVD-2021-30193.md

update

2024-11-06 14:10:36 +08:00

快排CMS Socket.php 日志信息泄露漏洞.md

update

2024-11-06 14:10:36 +08:00

快排CMS 后台XSS漏洞.md

update

2024-11-06 14:10:36 +08:00

快排CMS 后台任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

极致CMS 1.81 后台存储型XSS.md

update

2024-11-06 14:10:36 +08:00

极致CMS alipay_return_pay SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

极致CMS 后台文件编辑插件任意文件上传.md

update

2024-11-06 14:10:36 +08:00

狮子鱼CMS ApiController.class.php SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

狮子鱼CMS ApigoodController.class.php SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

狮子鱼CMS image_upload.php 任意文件上传.md

update

2024-11-06 14:10:36 +08:00

狮子鱼CMS wxapp.php 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

齐博CMS V7 job.php 任意文件读取漏洞.md

update

2024-11-06 14:10:36 +08:00