webray.com.cn

Nomwebray.com.cn
S'inscrire14/03/2022
Points Communautaires1574
Commits6
Soumet110
Des Postes0
Vote Favorable0
RangExpert senior
Activity Badges
👴 Long-time User (4x)
🔁 Returning User
💻 Digital Nomad (4x)
🔬 Researcher (4x)
🐘 Heavy User
🖖 Community Member (31x)
👋 Regular Visitor (8x)
📤 Submitter (16x)

Soumet (110)

Chronologie (110)

IDTitreSoumissionModérerEntréePStatut
768999janobe Resort Reservation System 1.0 SQL Injection27/02/202608/03/202634977218Accepté
768998janobe Resort Reservation System 1.0 Unrestricted Upload27/02/202608/03/20263497670Dupliqué
768978janobe Resort Reservation System 1.0 Unrestricted Upload27/02/202608/03/202634976719Accepté
768925janobe Resort Reservation System 1.0 SQL Injection27/02/202607/03/202634974918Accepté
748071mayuri_k Best salon management system project in php 1.0 SQL Injection28/01/202607/02/20263137760Dupliqué
748064mayuri_k Best salon management system project in php 1.0 SQL Injection28/01/202607/02/20263301020Dupliqué
748021mayuri_k Pet grooming management software 1.0 SQL Injection28/01/202607/02/20263251890Dupliqué
748020mayuri_k Pet grooming management software 1.0 SQL Injection28/01/202607/02/20263238640Dupliqué
747921Patrick Mvuma Patients Waiting Area Queue Management System 1.0 Doubled Character XSS Manipulations28/01/202607/02/202634485220Accepté
747920Patrick Mvuma Patients Waiting Area Queue Management System 1.0 Doubled Character XSS Manipulations28/01/202607/02/202634485120Accepté
702950GitHub hfly 1.0 Stored Cross-Site Scripting28/11/202511/12/202533586020Accepté
702949GitHub hfly 1.0 Arbitrary file reading28/11/202511/12/202533585920Accepté
702948GitHub hfly 1.0 Arbitrary file deleteing28/11/202511/12/202533585820Accepté
702943GitHub hfly 1.0 Stored Cross-Site Scripting28/11/202511/12/202533585719Accepté
498432mayuri_k Best employee management system 1.0 Exposure of Access Control List Files to an Unauthorized Control11/02/202523/02/202529659720Accepté
498421mayuri_k Best employee management system 1.0 Information Disclosure11/02/202523/02/202529659620Accepté
498188mayuri_k Best church management software 1.0 Delete any file11/02/202522/02/202529659420Accepté
497891mayuri_k Best church management software 1.0 Unrestricted Upload11/02/202522/02/202529659320Accepté
497883mayuri_k Best church management software 1.0 Doubled Character XSS Manipulations11/02/202522/02/202529659220Accepté
497868mayuri_k Best church management software 1.0 SQL Injection11/02/202522/02/202529659120Accepté
411502SourceCodester Best house rental management system project in php admin_class.php update_account​ function 4/15 SQL Injection20/09/202420/09/202427821216Accepté
411471SourceCodester Best house rental management system signup time-based SQL injection Vulnerability. 4/15 SQL Injection20/09/202420/09/202427821016Accepté
411113SourceCodester Best house rental management system project in php 4/15 SQL Injection19/09/202421/09/20242662770Dupliqué
410977SourceCodester Best house rental management system project in php 4/15 XSS19/09/202420/09/202427820319Accepté
410397SourceCodester Best house rental management system project in php 4/15 SQL Injection18/09/202419/09/20242687670Dupliqué
389263Xxxxxxxxxxxxxx Xxxxxxxx Xxxxxxx Xxx X.x Xxxxxx Xxxxx-xxxx Xxxxxxxxx12/08/202413/08/2024
 
0Rejeté
389255Leads Manager Tool 1.0 Stored Cross-Site Scripting12/08/202413/08/20242740650Dupliqué
290299Computer Inventory System SQL Injection Computer Inventory System SQL Injection 1 SQL Injection29/02/202401/03/20242553820Dupliqué
290298Computer Inventory System Computer Inventory System 1 Stored Cross-Site Scripting(XSS)29/02/202401/03/20242553830Dupliqué
290274FAQ Management System SQL Injection FAQ Management System SQL Injection 1 SQL Injection29/02/202401/03/20242553840Dupliqué
290273FAQ Management System FAQ Management System 1 Stored Cross-Site Scripting(XSS)29/02/202401/03/202425538613Accepté
288852oretnom23 Online Learning System V2 v1.0 XSS27/02/202428/02/202425512619Accepté
288057Walterjnr1 Web-Based Student Clearance System v1.0 XSS26/02/202427/02/202425486419Accepté
288037Walterjnr1 Web-Based Student Clearance System v1.0 Arbitrary File Upload26/02/202427/02/202425486319Accepté
288029Walterjnr1 Web-Based Student Clearance System v1.0 Arbitrary File Upload26/02/202428/02/20242103670Dupliqué
287953mayuri_k Free and Open Source inventory management system v1.0 SQL injections26/02/202427/02/202425486120Accepté
286693Xxxxxx_x Xxxx Xxxxxxx Xxxxxxxxxx Xxxxxx / Xxx23/02/202423/02/2024
 
0Rejeté
286692Xxxxxx_x Xxxx Xxxxxxx Xxxxxxxxxx Xxxxxx / Xxx Xxxxxxxxxx23/02/202423/02/2024
 
0Rejeté
286687oretnom23 Simple Student Attendance System / XSS23/02/202423/02/202425462519Accepté
286686oretnom23 Simple Student Attendance System / SQL injections23/02/202423/02/20242472540Dupliqué
286680Walterjnr1 Employee Management System / SQL injections23/02/202423/02/202425462420Accepté
286679Walterjnr1 Employee Management System / SQL injections23/02/202423/02/20242522780Dupliqué
257905SourceCodester Simple Student Attendance System 1.0 SQLI25/12/202327/12/20232472560Dupliqué
256155School Visitor Log e-Book School Visitor Log e-Book 1 Stored Cross-Site Scripting(XSS)21/12/202321/12/202324875013Accepté
254434SourceCodester Online student management system 1.0 XSS18/12/202319/12/20232483770Dupliqué
254433SourceCodester Online student management system 1.0 XSS18/12/202319/12/202324837719Accepté
254432SourceCodester Online student management system 1.0 SQLI18/12/202319/12/20232226650Dupliqué
250859Xxxxxxxxx Xxxxxxxx Xxxxxxxxx Xxxx Xxxxxxxxx Xxxx Xxx.xx.xxxxxx Xxxxxxx Xxxxxxxxx12/12/202313/12/2023
 
0Rejeté
250858Xxxxxxxxx Xxxxxxxx Xxxxxxxxx Xxxx Xxxxxxxxx Xxxx Xxx.xx.xxxxxx Xxxxxxx Xxxxxxxxx12/12/202313/12/2023
 
0Rejeté
250857Xxxxxxxxx Xxxxxxxx Xxxxxxxxx Xxxx Xxxxxxxxx Xxxx Xxx.xx.xxxxxx Xxxxxxx Xxxxxxxxx12/12/202313/12/2023
 
0Rejeté
245188SourceCodester Book Borrower System 1.0 Cross site scripting30/11/202330/11/202324644316Accepté
245172Sticky Notes App Sticky Notes App 1 Stored Cross-Site Scripting(XSS)30/11/202330/11/20232435970Dupliqué
243086URL Shortener URL Shortener 1 Stored Cross-Site Scripting(XSS)24/11/202326/11/202324613913Accepté
163002VIP-video-analysis system exists in XSS vulnerability unauthorized in admin/admincore.php31/05/202331/05/202323036019Accepté
163001VIP-video-analysis system exists in SSRF vulnerability unauthorized in data/title.php31/05/202331/05/202323035919Accepté
163000BeipyVideoResolution system exists in XSS vulnerability unauthorized in admin/admincore.php31/05/202331/05/202323035819Accepté
162999student-management-system login.php user SQL inject31/05/202331/05/202323035520Accepté
162998student-management-system resetPassword.php user password reset31/05/202331/05/202323035419Accepté
155091NFine Rapid development platform has weak password vulnerability11/05/202325/05/202322997419Accepté
155087Online Computer and Laptop Store SQL injection vulnerability in ./classes/Master.php11/05/202311/05/202322880320Accepté
155086Online Computer and Laptop Store SQL injection vulnerability in view_categories.php11/05/202311/05/202322880220Accepté
155085Online Computer and Laptop Store SQL injection vulnerability in view_product.php11/05/202311/05/202322880120Accepté
155084Online Computer and Laptop Store SQL injection vulnerability in products.php11/05/202311/05/202322880020Accepté
155083Online Computer and Laptop Store Xss vulnerability in products.php11/05/202311/05/202322879920Accepté
155081The default password vulnerability exists in the intelligent cooperative office system11/05/202318/05/202322937620Accepté
155073Service Provider Management System - SQL injections11/05/202317/05/202322927520Accepté
155065AC Repair and Services System - SQL injections11/05/202311/05/202322879820Accepté
155060Lost and Found Information System /classes/Master.php?f=delete_item SQL injection11/05/202311/05/202322878020Accepté
155059Lost and Found Information System items/index.php SQL injection11/05/202311/05/202322878120Accepté
61270Modbus Poll (version 9.10.0 and earlier) mbp file has a buffer overflow vulnerability30/12/202230/12/202221702217Accepté
61263Modbus Slave (version 7.5.1 and earlier) mbs file has a buffer overflow vulnerability30/12/202230/12/202221702117Accepté
43294Company Website CMS - /dashboard/contact 'phone' Stored Cross-Site Scripting(XSS)10/08/202211/08/202220616519Accepté
43293Company Website CMS - site-settings Identification and Authentication Failures10/08/202211/08/202220616120Accepté
42537Garage Management System - create new user Unauthorized29/07/202229/07/202220530120Accepté
42536Garage Management System - user_info 'userName' Stored Cross-Site Scripting(XSS)29/07/202229/07/202220530219Accepté
42535Garage Management System - Inmates/view_inmate 'id' SQL inject(SQLI)29/07/202229/07/202220530020Accepté
41841Library Management System with QR code Attendance and Auto Generate Library Card index.php SQL injection20/07/202220/07/202220457520Accepté
41840Library Management System with QR code Attendance and Auto Generate Library Card lab.php SQL injection20/07/202220/07/202220457420Accepté
41839Simple E-Learning System search.php SQL injection exists for parameter classCode20/07/202220/07/202220455219Accepté
41838Simple E-Learning System classRoom.php SQL injection exists for parameter classCode20/07/202220/07/202220455118Accepté
41746Wavlink touchlist_sync.cgicommand execution20/07/202220/07/202220453920Accepté
41745Wavlink nightled.cgi command execution20/07/202220/07/202220453820Accepté
41744Wavlink mesh.cgi command execution20/07/202220/07/202220453720Accepté
41683Garage Management System editbrand.php id SQL injections19/07/202219/07/20222041610Dupliqué
41682Garage Management System login.php username SQL injections19/07/202219/07/202220416019Accepté
41410URVE Web Manager uploader.php File upload vulnerability15/07/202215/07/202220390320Accepté
41409URVE Web Manager upload.php File upload vulnerability15/07/202215/07/202220390219Accepté
41408URVE Web Manager img_upload.php File upload vulnerability15/07/202215/07/202220390120Accepté
40278Online Hotel Booking System edit_room_cat.php id SQL inject30/06/202230/06/202220298220Accepté
40277Online Hotel Booking System edit_all_room.php id SQL inject30/06/202230/06/202220298120Accepté
38474Prison Management System -create_new user Identification and Authentication Failures07/06/202207/06/202220136720Accepté
38473Prison Management System - system_info 'name' Stored Cross-Site Scripting(XSS)07/06/202207/06/202220136819Accepté
38472Prison Management System - /pms/admin/visits/view_visit.php 'id' SQL inject(SQLI)07/06/202207/06/202220136520Accepté
38471Prison Management System - Inmates/view_inmate 'id' SQL inject(SQLI)07/06/202207/06/202220136620Accepté
38056Product Show Room Site System - 'Telephone' Stored Cross-Site Scripting(XSS)02/06/202202/06/202220095119Accepté
38055Product Show Room Site System - 'Message' Stored Cross-Site Scripting(XSS)02/06/202202/06/202220095019Accepté
37668Student Information System Authenticated 'Student Roll' Stored Cross-Site Scripting(XSS)24/05/202224/05/202220058619Accepté
37667Home Clean Services Management System Authenticated Stored Cross-Site Scripting(XSS)24/05/202224/05/202220058519Accepté
37666Home Clean Services Management System login.php email SQL injection24/05/202224/05/202220058420Accepté
37665Home Clean Services Management System admin/login.php username SQL inject24/05/202224/05/202220058320Accepté
37664Home Clean Services Management System add_register.php File Upload Getshell24/05/202224/05/202220058220Accepté
37616Xxxxxx Xxxx Xxxxxxxxx Xxxxxx - 'xxxxxxxx' Xxxxxx Xxxxx-xxxx Xxxxxxxxx(xxx)23/05/202223/05/2022
 
0Rejeté
37615Badminton Center Management System - 'username' Stored Cross-Site Scripting(XSS)23/05/202223/05/202220055919Accepté
37614Xxxxx://xxxxxx.xxx/xxxxxx/xxx/xxxx/xxxx/xxxxxx.xxx.xx/xxxxxxx-xxx-xxxxxxxxxx(xxx23/05/202223/05/2022
 
0Rejeté
37613Zoo Management System - 'admin_name' Stored Cross-Site Scripting(XSS)23/05/202223/05/202220055819Accepté
35906automad<=1.10.9 Stored Cross-Site Scripting(XSS)29/04/202229/04/202219870620Accepté
35905emlog<=pro-1.2.2 Stored Cross-Site Scripting(XSS)29/04/202229/04/202219870520Accepté
32889DolphinPHP<=1.5.0 Authenticated Stored Cross-Site Scripting(XSS)17/03/202217/03/202219536820Accepté
32637CVE-2022-25022 | htmly<=v2.8.2 Authenticated Stored Cross-Site Scripting(XSS)15/03/202215/03/20221940090Dupliqué
32547CLTPHP<=6.0 Authenticated Stored Cross-Site Scripting(XSS)14/03/202214/03/202219485719Accepté

Commits (6)

Chronologie (2)

IDEntréeCVEMise à jourModérerCP
12755982-5WAVLINK WN535K2/WN535K3 touchlist_sync.cgi élévation de privilègesCVE-2022-248820/07/202220/07/202243
12310850-1CLTPHP POST Parameter cross site scriptingCVE-2022-108525/03/202225/03/202222

◂ PrécédentAperçuSuivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!