FTPShell Server 6.90 Buffer Overflow

FTPShell Server version 6.90 buffer overflow proof of concept exploit.

Joomla J2 JOBS 1.3.0 SQL Injection

Joomla J2 JOBS version 1.3.0 suffers from a remote SQL injection vulnerability.

PHP-Fusion 9.03.60 PHP Object Injection

PHP-Fusion version 9.03.60 suffers from a PHP object injection vulnerability.

e-learning PHP Script 0.1.0 SQL Injection

e-learning PHP Script version 0.1.0 suffers from a remote SQL injection vulnerability.

Packet Storm New Exploits For June, 2020

This archive contains all of the 127 exploits added to Packet Storm in June, 2020.

[webapps] ZenTao Pro 8.8.2 – Command Injection

ZenTao Pro 8.8.2 – Command Injection

[webapps] WhatsApp Remote Code Execution – Paper

WhatsApp Remote Code Execution – Paper

Victor CMS 1.0 Cross Site Scripting

Victor CMS version 1.0 suffers from a user_firstname persistent cross site scripting vulnerability.

Reside Property Management 3.0 SQL Injection

Reside Property Management version 3.0 suffers from a remote SQL injection vulnerability.

ATutor 2.2.4 Directory Traversal / Remote Code Execution

This Metasploit module exploits an arbitrary file upload vulnerability together with a directory traversal flaw in ATutor versions 2.2.4, 2.2.2 and 2.2.1 in order to execute arbitrary commands.