webray.com.cn

Namewebray.com.cn
Registration2022-03-14
Community Points1400
Submits96
Commits6
Posts0
Votes0
Community RankExperto senior
Activity Badges
👴 Long-time User (3x)
🔁 Returning User
💻 Digital Nomad (4x)
🔬 Researcher (4x)
🐘 Heavy User
🖖 Community Member (28x)
👋 Regular Visitor (7x)
📤 Submitter (14x)

Envía (96)

Cronología

IDTtítuloSumisiónModeraciónArtículoPEstado
498432mayuri_k Best employee management system 1.0 Exposure of Access Control List Files to an Unauthorized Control2025-02-112025-02-2329659720Aceptado
498421mayuri_k Best employee management system 1.0 Information Disclosure2025-02-112025-02-2329659620Aceptado
498188mayuri_k Best church management software 1.0 Delete any file2025-02-112025-02-2229659420Aceptado
497891mayuri_k Best church management software 1.0 Unrestricted Upload2025-02-112025-02-2229659320Aceptado
497883mayuri_k Best church management software 1.0 Doubled Character XSS Manipulations2025-02-112025-02-2229659220Aceptado
497868mayuri_k Best church management software 1.0 SQL Injection2025-02-112025-02-2229659120Aceptado
411502SourceCodester Best house rental management system project in php admin_class.php update_account​ function 4/15 SQL Injection2024-09-202024-09-2027821216Aceptado
411471SourceCodester Best house rental management system signup time-based SQL injection Vulnerability. 4/15 SQL Injection2024-09-202024-09-2027821016Aceptado
411113SourceCodester Best house rental management system project in php 4/15 SQL Injection2024-09-192024-09-212662770Duplicado
410977SourceCodester Best house rental management system project in php 4/15 XSS2024-09-192024-09-2027820319Aceptado
410397SourceCodester Best house rental management system project in php 4/15 SQL Injection2024-09-182024-09-192687670Duplicado
389263Xxxxxxxxxxxxxx Xxxxxxxx Xxxxxxx Xxx X.x Xxxxxx Xxxxx-xxxx Xxxxxxxxx2024-08-122024-08-13
 
0Rechazado
389255Leads Manager Tool 1.0 Stored Cross-Site Scripting2024-08-122024-08-132740650Duplicado
290299Computer Inventory System SQL Injection Computer Inventory System SQL Injection 1 SQL Injection2024-02-292024-03-012553820Duplicado
290298Computer Inventory System Computer Inventory System 1 Stored Cross-Site Scripting(XSS)2024-02-292024-03-012553830Duplicado
290274FAQ Management System SQL Injection FAQ Management System SQL Injection 1 SQL Injection2024-02-292024-03-012553840Duplicado
290273FAQ Management System FAQ Management System 1 Stored Cross-Site Scripting(XSS)2024-02-292024-03-0125538613Aceptado
288852oretnom23 Online Learning System V2 v1.0 XSS2024-02-272024-02-2825512619Aceptado
288057Walterjnr1 Web-Based Student Clearance System v1.0 XSS2024-02-262024-02-2725486419Aceptado
288037Walterjnr1 Web-Based Student Clearance System v1.0 Arbitrary File Upload2024-02-262024-02-2725486319Aceptado
288029Walterjnr1 Web-Based Student Clearance System v1.0 Arbitrary File Upload2024-02-262024-02-282103670Duplicado
287953mayuri_k Free and Open Source inventory management system v1.0 SQL injections2024-02-262024-02-2725486120Aceptado
286693Xxxxxx_x Xxxx Xxxxxxx Xxxxxxxxxx Xxxxxx / Xxx2024-02-232024-02-23
 
0Rechazado
286692Xxxxxx_x Xxxx Xxxxxxx Xxxxxxxxxx Xxxxxx / Xxx Xxxxxxxxxx2024-02-232024-02-23
 
0Rechazado
286687oretnom23 Simple Student Attendance System / XSS2024-02-232024-02-2325462519Aceptado
286686oretnom23 Simple Student Attendance System / SQL injections2024-02-232024-02-232472540Duplicado
286680Walterjnr1 Employee Management System / SQL injections2024-02-232024-02-2325462420Aceptado
286679Walterjnr1 Employee Management System / SQL injections2024-02-232024-02-232522780Duplicado
257905SourceCodester Simple Student Attendance System 1.0 SQLI2023-12-252023-12-272472560Duplicado
256155School Visitor Log e-Book School Visitor Log e-Book 1 Stored Cross-Site Scripting(XSS)2023-12-212023-12-2124875013Aceptado
254434SourceCodester Online student management system 1.0 XSS2023-12-182023-12-192483770Duplicado
254433SourceCodester Online student management system 1.0 XSS2023-12-182023-12-1924837719Aceptado
254432SourceCodester Online student management system 1.0 SQLI2023-12-182023-12-192226650Duplicado
250859Xxxxxxxxx Xxxxxxxx Xxxxxxxxx Xxxx Xxxxxxxxx Xxxx Xxx.xx.xxxxxx Xxxxxxx Xxxxxxxxx2023-12-122023-12-13
 
0Rechazado
250858Xxxxxxxxx Xxxxxxxx Xxxxxxxxx Xxxx Xxxxxxxxx Xxxx Xxx.xx.xxxxxx Xxxxxxx Xxxxxxxxx2023-12-122023-12-13
 
0Rechazado
250857Xxxxxxxxx Xxxxxxxx Xxxxxxxxx Xxxx Xxxxxxxxx Xxxx Xxx.xx.xxxxxx Xxxxxxx Xxxxxxxxx2023-12-122023-12-13
 
0Rechazado
245188SourceCodester Book Borrower System 1.0 Cross site scripting2023-11-302023-11-3024644316Aceptado
245172Sticky Notes App Sticky Notes App 1 Stored Cross-Site Scripting(XSS)2023-11-302023-11-302435970Duplicado
243086URL Shortener URL Shortener 1 Stored Cross-Site Scripting(XSS)2023-11-242023-11-2624613913Aceptado
163002VIP-video-analysis system exists in XSS vulnerability unauthorized in admin/admincore.php2023-05-312023-05-3123036019Aceptado
163001VIP-video-analysis system exists in SSRF vulnerability unauthorized in data/title.php2023-05-312023-05-3123035919Aceptado
163000BeipyVideoResolution system exists in XSS vulnerability unauthorized in admin/admincore.php2023-05-312023-05-3123035819Aceptado
162999student-management-system login.php user SQL inject2023-05-312023-05-3123035520Aceptado
162998student-management-system resetPassword.php user password reset2023-05-312023-05-3123035419Aceptado
155091NFine Rapid development platform has weak password vulnerability2023-05-112023-05-2522997419Aceptado
155087Online Computer and Laptop Store SQL injection vulnerability in ./classes/Master.php2023-05-112023-05-1122880320Aceptado
155086Online Computer and Laptop Store SQL injection vulnerability in view_categories.php2023-05-112023-05-1122880220Aceptado
155085Online Computer and Laptop Store SQL injection vulnerability in view_product.php2023-05-112023-05-1122880120Aceptado
155084Online Computer and Laptop Store SQL injection vulnerability in products.php2023-05-112023-05-1122880020Aceptado
155083Online Computer and Laptop Store Xss vulnerability in products.php2023-05-112023-05-1122879920Aceptado
155081The default password vulnerability exists in the intelligent cooperative office system2023-05-112023-05-1822937620Aceptado
155073Service Provider Management System - SQL injections2023-05-112023-05-1722927520Aceptado
155065AC Repair and Services System - SQL injections2023-05-112023-05-1122879820Aceptado
155060Lost and Found Information System /classes/Master.php?f=delete_item SQL injection2023-05-112023-05-1122878020Aceptado
155059Lost and Found Information System items/index.php SQL injection2023-05-112023-05-1122878120Aceptado
61270Modbus Poll (version 9.10.0 and earlier) mbp file has a buffer overflow vulnerability2022-12-302022-12-3021702217Aceptado
61263Modbus Slave (version 7.5.1 and earlier) mbs file has a buffer overflow vulnerability2022-12-302022-12-3021702117Aceptado
43294Company Website CMS - /dashboard/contact 'phone' Stored Cross-Site Scripting(XSS)2022-08-102022-08-1120616519Aceptado
43293Company Website CMS - site-settings Identification and Authentication Failures2022-08-102022-08-1120616120Aceptado
42537Garage Management System - create new user Unauthorized2022-07-292022-07-2920530120Aceptado
42536Garage Management System - user_info 'userName' Stored Cross-Site Scripting(XSS)2022-07-292022-07-2920530219Aceptado
42535Garage Management System - Inmates/view_inmate 'id' SQL inject(SQLI)2022-07-292022-07-2920530020Aceptado
41841Library Management System with QR code Attendance and Auto Generate Library Card index.php SQL injection2022-07-202022-07-2020457520Aceptado
41840Library Management System with QR code Attendance and Auto Generate Library Card lab.php SQL injection2022-07-202022-07-2020457420Aceptado
41839Simple E-Learning System search.php SQL injection exists for parameter classCode2022-07-202022-07-2020455219Aceptado
41838Simple E-Learning System classRoom.php SQL injection exists for parameter classCode2022-07-202022-07-2020455118Aceptado
41746Wavlink touchlist_sync.cgicommand execution2022-07-202022-07-2020453920Aceptado
41745Wavlink nightled.cgi command execution2022-07-202022-07-2020453820Aceptado
41744Wavlink mesh.cgi command execution2022-07-202022-07-2020453720Aceptado
41683Garage Management System editbrand.php id SQL injections2022-07-192022-07-192041610Duplicado
41682Garage Management System login.php username SQL injections2022-07-192022-07-1920416019Aceptado
41410URVE Web Manager uploader.php File upload vulnerability2022-07-152022-07-1520390320Aceptado
41409URVE Web Manager upload.php File upload vulnerability2022-07-152022-07-1520390219Aceptado
41408URVE Web Manager img_upload.php File upload vulnerability2022-07-152022-07-1520390120Aceptado
40278Online Hotel Booking System edit_room_cat.php id SQL inject2022-06-302022-06-3020298220Aceptado
40277Online Hotel Booking System edit_all_room.php id SQL inject2022-06-302022-06-3020298120Aceptado
38474Prison Management System -create_new user Identification and Authentication Failures2022-06-072022-06-0720136720Aceptado
38473Prison Management System - system_info 'name' Stored Cross-Site Scripting(XSS)2022-06-072022-06-0720136819Aceptado
38472Prison Management System - /pms/admin/visits/view_visit.php 'id' SQL inject(SQLI)2022-06-072022-06-0720136520Aceptado
38471Prison Management System - Inmates/view_inmate 'id' SQL inject(SQLI)2022-06-072022-06-0720136620Aceptado
38056Product Show Room Site System - 'Telephone' Stored Cross-Site Scripting(XSS)2022-06-022022-06-0220095119Aceptado
38055Product Show Room Site System - 'Message' Stored Cross-Site Scripting(XSS)2022-06-022022-06-0220095019Aceptado
37668Student Information System Authenticated 'Student Roll' Stored Cross-Site Scripting(XSS)2022-05-242022-05-2420058619Aceptado
37667Home Clean Services Management System Authenticated Stored Cross-Site Scripting(XSS)2022-05-242022-05-2420058519Aceptado
37666Home Clean Services Management System login.php email SQL injection2022-05-242022-05-2420058420Aceptado
37665Home Clean Services Management System admin/login.php username SQL inject2022-05-242022-05-2420058320Aceptado
37664Home Clean Services Management System add_register.php File Upload Getshell2022-05-242022-05-2420058220Aceptado
37616Xxxxxx Xxxx Xxxxxxxxx Xxxxxx - 'xxxxxxxx' Xxxxxx Xxxxx-xxxx Xxxxxxxxx(xxx)2022-05-232022-05-23
 
0Rechazado
37615Badminton Center Management System - 'username' Stored Cross-Site Scripting(XSS)2022-05-232022-05-2320055919Aceptado
37614Xxxxx://xxxxxx.xxx/xxxxxx/xxx/xxxx/xxxx/xxxxxx.xxx.xx/xxxxxxx-xxx-xxxxxxxxxx(xxx2022-05-232022-05-23
 
0Rechazado
37613Zoo Management System - 'admin_name' Stored Cross-Site Scripting(XSS)2022-05-232022-05-2320055819Aceptado
35906automad<=1.10.9 Stored Cross-Site Scripting(XSS)2022-04-292022-04-2919870620Aceptado
35905emlog<=pro-1.2.2 Stored Cross-Site Scripting(XSS)2022-04-292022-04-2919870520Aceptado
32889DolphinPHP<=1.5.0 Authenticated Stored Cross-Site Scripting(XSS)2022-03-172022-03-1719536820Aceptado
32637CVE-2022-25022 | htmly<=v2.8.2 Authenticated Stored Cross-Site Scripting(XSS)2022-03-152022-03-151940090Duplicado
32547CLTPHP<=6.0 Authenticated Stored Cross-Site Scripting(XSS)2022-03-142022-03-1419485719Aceptado

Commits (6)

Cronología

IDArtículoCVEActualizacionesModeraciónCP
12755982-5WAVLINK WN535K2/WN535K3 touchlist_sync.cgi escalada de privilegiosCVE-2022-24882022-07-202022-07-2043
12310850-1CLTPHP POST Parameter cross site scriptingCVE-2022-10852022-03-252022-03-2522

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!