Total exploitable projects:;26;Total exploitable calls:;117;Total vulnerabilities:;218;;;;;;
;;;;;;;;;;;
Sums:;60;65;3;81;2;4;3;86;8;;
Project with extract call;Privilege Escalation;SQL Injection;Command Injection;XSS;Redirect;Information Leakage;SSRF;CFG Influence;Intended;Link to extract call;Exploit payload
D0g3-Lab:i-SOON_CTF_2019;1;;;;;1;1;;1;https://github.com/D0g3-Lab/i-SOON_CTF_2019/blob/ac2b981b3b1ee5acd7aeedd58c345c07ff55088a/Web/easy_serialize_php/www/index.php#L19;control file_get_contents parameter
Xeoncross:forumfive;1;;;1;;;;1;;https://github.com/xeoncross/forumfive/blob/36aa2db563773129e26b67670932a5d244de286c/forum.php#L87;control $_SESSION['admin'], XSS print $topic['title']
hzequn:PHP_hotel add_news.php POST;1;;;1;;;;;;https://github.com/hzequn/PHP_hotel/blob/a7713e883d1917ca903d8d8232595e8497c993c7/add_news.php#L4;control $_SESSION['username'] for priv esc and XSS, set POST['name'] for SQLi
hzequn:PHP_hotel introduce.php POST;;1;;1;;;;;;https://github.com/hzequn/PHP_hotel/blob/a7713e883d1917ca903d8d8232595e8497c993c7/introduce.php#L3;set $content for sqli and XSS
PacktPublishing:Mastering-PHP-Design-Patterns;1;;;1;;;;1;1;https://github.com/PacktPublishing/Mastering-PHP-Design-Patterns/blob/9d2aa52de9a02c1deae04b9e6e75da531a0d2adf/Chapter%202/BlindFaith/HorrendouslyInsecure.php#L10;set $isAdmin for privesc, set $name for XSS
outdoorbits:little-backup-box cmd-runner.php;;;1;1;;;;1;;https://github.com/outdoorbits/little-backup-box/blob/f74d7fd6d48c59ec06cb0c28e30a0cf39e78cf1f/scripts/cmd-runner.php#L20;set CMD = 'update' and $WORKING_DIR to command for command injection, echo html through command injection for XSS :D
outdoorbits:little-backup-box cmd.php GET;;;1;1;;;;1;;https://github.com/outdoorbits/little-backup-box/blob/f74d7fd6d48c59ec06cb0c28e30a0cf39e78cf1f/scripts/cmd.php#L31;set $PARAM1 and $CMD = 'update' for XSS, $CMD = 'format' and $PARAM1 to cmd for command injection through cmd-runner.php above
ByPupil:ctfhub;;;;;;1;;1;1;https://github.com/ByPupil/ctfhub/blob/048138a711c952c889ea50db6a78a297f50fe5a9/php_characteristics/picoctf2013_php1/src/index.php#L10;set $password and $secret_key to same value to leak flag..
CQuiroga97:parqueadero guardarUsuario.php;;1;;;;;;;;https://github.com/CQuiroga97/parqueadero/blob/f19909a2c36bba98c8ad58563e2ca51ae0b18b5c/guardarUsuario.php#L3;set $id for SQLi
CQUiroga97:parqueadero iniciar.php;1;1;;;;;;;;https://github.com/CQuiroga97/parqueadero/blob/f19909a2c36bba98c8ad58563e2ca51ae0b18b5c/iniciar.php#L4;set $id for SQLi, set $_SESSION['id'] and $_SESSION['rol'] for privesc
CQUiroga97:parqueadero despejarSlot.php;;1;;;;;;;;https://github.com/CQuiroga97/parqueadero/blob/f19909a2c36bba98c8ad58563e2ca51ae0b18b5c/parqueadero/despejarSlot.php#L3;set $placa for SQLi
CQUiroga97:parqueadero entradaVehiculo.php;1;1;;1;;;;;;https://github.com/CQuiroga97/parqueadero/blob/f19909a2c36bba98c8ad58563e2ca51ae0b18b5c/parqueadero/entradaVehiculo.php#L5;set $parqueadero for SQLi, set $nombre for XSS when $parqueadero is set to valid sql returning no results, session is started in other file, so set $_SESSION['id'] etc for privesc
CQUiroga97:parqueadero mostrarSlots.php;;1;;;;;;;;https://github.com/CQuiroga97/parqueadero/blob/f19909a2c36bba98c8ad58563e2ca51ae0b18b5c/parqueadero/mostrarSlots.php#L3;set $id for SQLi
CQUiroga97:parqueadero nuevoSlot.php;;1;;;;;;;;https://github.com/CQuiroga97/parqueadero/blob/f19909a2c36bba98c8ad58563e2ca51ae0b18b5c/parqueadero/nuevoSlot.php#L3;set $parquadero for SQLi
CQUiroga97:parqueadero ocuparSlot.php;;1;;;;;;;;https://github.com/CQuiroga97/parqueadero/blob/f19909a2c36bba98c8ad58563e2ca51ae0b18b5c/parqueadero/ocuparSlot.php#L3;set $placa for SQLi
CQUiroga97:parqueadero guardarVehiculo.php;1;1;;;;;;;;https://github.com/CQuiroga97/parqueadero/blob/f19909a2c36bba98c8ad58563e2ca51ae0b18b5c/usuario/guardarVehiculo.php#L4;set $tipo for SQLi, session is started, so set $_SESSION['rol'] etc for privesc
nirzaf:ecfinder;;;;;1;;;1;;https://github.com/nirzaf/ecfinder/blob/d27a91148de4f15fe1b94e4f5d39ba1cfc0efb63/public/index.php#L6;set $_SERVER['REQUEST_URI'] to url to redirect to and add $_POST['sPhrase'] for open redirect
swisskyrepo:Vulny-Code-Static-Analysis;;;;;;1;1;1;1;https://github.com/swisskyrepo/Vulny-Code-Static-Analysis/blob/4280f14b2ffad652eb9390cfe6899e30ecc1b94a/vulns/extract.php#L4;set $shiyan and $flag for file_get_contents
hongriSec:PHP-Audit-Labs content.php;1;1;;;;;;;1;https://github.com/hongriSec/PHP-Audit-Labs/blob/721e94e2917db6d0bde2f6a0cd94c695fbd5e635/PHP-CTF-Docker/dockerfile_day14/day14/content.php#L3;set $message_id for SQLi, set $_SESSION['username'] and $_SESSION['user_id'] for privesc
hongriSec:PHP-Audit-Labs do.php;1;1;;;;;;;1;https://github.com/hongriSec/PHP-Audit-Labs/blob/721e94e2917db6d0bde2f6a0cd94c695fbd5e635/PHP-CTF-Docker/dockerfile_day14/day14/do.php#L4;set $_SESSION['user_id']  for SQLi and privesc
imagemlt:CTF_web_dockers;;;;;;1;1;1;1;https://github.com/imagemlt/CTF_web_dockers/blob/55cf0bbd3e5f101993f851f333251fcaff5e3bfd/shiyanbar/shiyanbar/web2/web2.php#L7;set $filename for file_get_contents
46elks:46elks-getting-started;;1;;;;;;;;https://github.com/46elks/46elks-getting-started/blob/3a3fa7a138a8d1c420164f9e6c48f6e8f9d93530/code-examples/SMS-orders/order.php#L154;set $from for SQLi
montrehack:challenges;1;;;;;;;1;1;https://github.com/montrehack/challenges/blob/58d98e6fa73d4990243273fdad719d1cba828bc2/2017-04-17/html/captcha1.php#L7;set $_SESSION to bypass captcha
sams:Thematic-html5boilerplate;1;;;;1;;;1;;https://github.com/sams/Thematic-html5boilerplate/blob/cc107fdd51b6f7ee6374b4bf2638eee87b4edbc1/functions/phpthumb/PHPThumb.php#L359;set $cache_uri for redirect, set $_SESSION for wordpress session?
jbachand:thefacebook.us viewmessages.php;1;;;;;;;1;;https://github.com/jbachand/thefacebook.us/blob/65686fe99b651c21eefdb2de00c3f8b9592eeb37/website/viewmessages.php#L20;set $_SESSION['authData'] for privesc
jbachand:thefacebook.us support.php;1;;;1;;;;;;https://github.com/jbachand/thefacebook.us/blob/65686fe99b651c21eefdb2de00c3f8b9592eeb37/website/support.php#L11;set $_SESSION['authData'] for privesc, $schoolsuggested for xss
jbachand:thefacebook.us contact.php;1;1;;1;;;;1;;https://github.com/jbachand/thefacebook.us/blob/65686fe99b651c21eefdb2de00c3f8b9592eeb37/website/contact.php#L11;set $_SESSION['authData'] for privesc, $schoolsuggested for xss, $newschool for SQLi (Database::insert is unsafe)
jbachand:thefacebook.us login.php;;1;;;;;;;;https://github.com/jbachand/thefacebook.us/blob/65686fe99b651c21eefdb2de00c3f8b9592eeb37/website/a/login.php#L19;$email for SQLi
skylar69-wtf:CC-CHECKERS-API braintreeapi.php;;;;1;;;;;;https://github.com/skylar69-wtf/CC-CHECKERS-API/blob/e570a0cf85418e96ec492e0a3f9287a5dd890d1f/braintree%20api.php#L10;$lista split by | for XSS
skylar69-wtf:CC-CHECKERS-API stripenew.php;;;;1;;;;;;https://github.com/skylar69-wtf/CC-CHECKERS-API/blob/e570a0cf85418e96ec492e0a3f9287a5dd890d1f/stripenew.php#L9;$lista split by | for XSS
philipdowner:WPMigrate;;1;;;;;;;;https://github.com/philipdowner/WPMigrate/blob/2bb9cb0ccb95d5027ab0ad330e9d51de42779461/wp-migrate.php#L150;$old_url and $new_url for SQLi
profmoriarity:wfuxx;;;1;1;;;;;;https://github.com/profmoriarity/wfuxx/blob/3cb3d39a23bdaa2186eb23dac64d0e49a646c647/wfuxx.php#L99;set $list, $target for command injection, variables are reflected in javascript context too
OpenSIPS:opensips-cp list_admins.php add;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/admin/list_admins/list_admins.php#L50;$_GET['action']=add && privesc by setting $_SESSION['read_only'], xss by setting $fname too
OpenSIPS:opensips-cp list_admins.php edit;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/admin/list_admins/list_admins.php#L126;$_GET['action']=edit, requires privesc from other vuln && set $table for SQLi, set $form_error for XSS
OpenSIPS:opensips-cp list_admins.php edit_tools;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/admin/list_admins/list_admins.php#L210;$_GET['action']=edit_tools && privesc by setting $_SESSION['read_only'], set $table for SQLi, set $form_error for XSS
OpenSIPS:opensips-cp list_admins.php modify_tools;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/admin/list_admins/list_admins.php#L230;$_GET['action']=modify_tools, requires privesc && set $table for SQLi, set $errors for XSS
OpenSIPS:opensips-cp list_admins.php dp_act;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/admin/list_admins/list_admins.php#L321;$_GET['action']=dp_act, set $errors for XSS, modify $_SESSION for privesc, set $table for SQLi
OpenSIPS:opensips-cp list_admins.test.inc.php;;1;;;;;;;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/admin/list_admins/lib/list_admins.test.inc.php#L24;set $table for XSS, set all other fields to random value to pass form_valid checks, modify $_SESSION for privesc
OpenSIPS:opensips-cp list_admins.inc.php;;1;;;;;;;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/admin/list_admins/lib/list_admins.inc.php#L24;set $table for XSS, set all other fields to random value to pass form_valid checks, modify $_SESSION for privesc
OpenSIPS:opensips-cp db_config.php add;1;;;;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/admin/db_config/db_config.php#L107;$_GET['action']=add, privesc through $_SESSION['read_only']=false
OpenSIPS:opensips-cp db_config.php add_verify;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/admin/db_config/db_config.php#L120;$_GET['action']=add_verify, requires privesc, set $table for SQLi, set $errors for XSS
OpenSIPS:opensips-cp db_config.php modify_params;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/admin/db_config/db_config.php#L47;$_GET['action']=modify_params, requires privesc, set $table for SQLi, set $errors for XSS
OpenSIPS:opensips-cp tools_config.php;;1;;;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/admin/tools_config/tools_config.php#L48;$_GET['action']=modify_params, requires privesc, set $table for SQLi
OpenSIPS:opensips-cp system_config.php add;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/admin/boxes_config/system_config.php#L112;$_GET['action']=add, privesc through $_SESSION['read_only']=false, $page_name for XSS
OpenSIPS:opensips-cp system_config.php add_verify;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/admin/boxes_config/system_config.php#L126;$_GET['action']=add_verify, requires privesc, set $table for SQLi, set $errors for XSS
OpenSIPS:opensips-cp system_config.php modify_params;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/admin/boxes_config/system_config.php#L47;$_GET['action']=modify_params, requires privesc, set $table for SQLi, set $errors for XSS
OpenSIPS:opensips-cp boxes_config.php add;1;;;;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/admin/boxes_config/system_config.php#L112;$_GET['action']=add, privesc through $_SESSION['read_only']=false
OpenSIPS:opensips-cp boxes_config.php add_verify;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/admin/boxes_config/system_config.php#L126;$_GET['action']=add_verify, requires privesc, set $table for SQLi, set $errors for XSS
OpenSIPS:opensips-cp boxes_config.php modify_params;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/admin/boxes_config/system_config.php#L47;$_GET['action']=modify_params, requires privesc, set $table for SQLi, set $errors for XSS
OpenSIPS:opensips-cp alias_management.php add;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/users/alias_management/alias_management.php#L58;$_GET['action']=add, privesc through $_SESSION['read_only']=false, $page_name for XSS
OpenSIPS:opensips-cp alias_management.php edit;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/users/alias_management/alias_management.php#L122;$_GET['action']=edit, requires privesc, set $table for SQLi, set $form_error for XSS
OpenSIPS:opensips-cp alias_management.php dp_act;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/users/alias_management/alias_management.php#L222;$_GET['action']=dp_act, set $errors for XSS, modify $_SESSION for privesc
OpenSIPS:opensips-cp user_management.php add;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/users/user_management/user_management.php#L266;$_GET['action']=add, privesc through $_SESSION['read_only']=false, $page_name for XSS
OpenSIPS:opensips-cp user_management.php edit;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/users/user_management/user_management.php#L76;$_GET['action']=edit, requires privesc, set $table for SQLi, set $page_name for XSS
OpenSIPS:opensips-cp user_management.php dp_act;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/users/user_management/user_management.php#L232;$_GET['action']=dp_act, set $errors for XSS, modify $_SESSION for privesc
OpenSIPS:opensips-cp group_management.php add;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/users/group_management/group_management.php#L52;$_GET['action']=add, privesc through $_SESSION['read_only']=false, $page_name for XSS
OpenSIPS:opensips-cp group_management.php edit;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/users/group_management/group_management.php#L112;$_GET['action']=edit, requires privesc, set $table for SQLi, set $page_name for XSS
OpenSIPS:opensips-cp group_management.php dp_act;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/users/group_management/group_management.php#L214;"$_GET['action']=dp_act, set $errors for XSS, modify $_SESSION for privesc, set $delete=""Delete"" and $table for SQLi"
OpenSIPS:opensips-cp dispatcher.php add;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/dispatcher/dispatcher.php#L53;$_GET['action']=add, privesc through $_SESSION['read_only']=false, $page_name for XSS
OpenSIPS:opensips-cp dispatcher.php edit;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/dispatcher/dispatcher.php#L121;$_GET['action']=edit, requires privesc, set $table for SQLi, set $page_name for XSS
OpenSIPS:opensips-cp dispatcher.php ds_search;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/dispatcher/dispatcher.php#L209;$_GET['action']=ds_search, set $errors for XSS, modify $_SESSION for privesc
OpenSIPS:opensips-cp rtpengine.php add;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/rtpengine/rtpengine.php#L69;$_GET['action']=add, privesc through $_SESSION['read_only']=false, $page_name for XSS
OpenSIPS:opensips-cp rtpengine.php edit;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/rtpengine/rtpengine.php#L134;$_GET['action']=edit, requires privesc, set $table for SQLi, set $page_name for XSS
OpenSIPS:opensips-cp rtpengine.php search;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/rtpengine/rtpengine.php#L224;"$_GET['action']=search, set $errors for XSS, modify $_SESSION for privesc, set $delete=""Delete RTPproxy Sock"" and $table for SQLi"
OpenSIPS:opensips-cp dashboard.php add_blank_panel;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/dashboard/dashboard.php#L238;$_GET['action']=add_blank_panel, privesc through $_SESSION['read_only']=false, $page_name for XSS
OpenSIPS:opensips-cp dashboard.php add_verify;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/dashboard/dashboard.php#L305;$_GET['action']=add_verify, requires privesc, set $table for SQLi, set $errors for XSS
OpenSIPS:opensips-cp dashboard.php clone_panel_verify;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/dashboard/dashboard.php#L344;$_GET['action']=clone_panel_verify, requires privesc, set $table for SQLi, set $errors for XSS
OpenSIPS:opensips-cp dashboard.php change_panel_name;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/dashboard/dashboard.php#L414;$_GET['action']=change_panel_name, privesc through $_SESSION['read_only']=false, $page_name for XSS
OpenSIPS:opensips-cp dashboard.php change_name_verify;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/dashboard/dashboard.php#L429;$_GET['action']=change_name_verify, requires privesc, set $table for SQLi, set $errors for XSS
OpenSIPS:opensips-cp rtpproxy.php add;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/rtpproxy/rtpproxy.php#L70;$_GET['action']=add, privesc through $_SESSION['read_only']=false, $page_name for XSS
OpenSIPS:opensips-cp rtpproxy.php edit;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/rtpproxy/rtpproxy.php#L142;$_GET['action']=edit, requires privesc, set $table for SQLi, set $page_name for XSS
OpenSIPS:opensips-cp rtpproxy.php dp_act;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/rtpproxy/rtpproxy.php#L236;"$_GET['action']=dp_act, set $errors for XSS, modify $_SESSION for privesc, set $delete=""Delete RTPproxy Sock"" and $table for SQLi"
OpenSIPS:opensips-cp address.php add;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/addresses/address.php#L51;$_GET['action']=add, privesc through $_SESSION['read_only']=false, $page_name for XSS, $_GET['clone']=1 and $table for SQLi
OpenSIPS:opensips-cp address.php edit;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/addresses/address.php#L114;$_GET['action']=edit, requires privesc, set $table for SQLi, set $page_name for XSS
OpenSIPS:opensips-cp address.php dp_act;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/addresses/address.php#L203;"$_GET['action']=dp_act, set $errors for XSS, modify $_SESSION for privesc, set $delete=""Delete Address"" and $table for SQLi"
OpenSIPS:opensips-cp dialplan.php add;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/dialplan/dialplan.php#L57;$_GET['action']=add, privesc through $_SESSION['read_only']=false, $page_name for XSS, $_GET['clone']=1 and $table for SQLi
OpenSIPS:opensips-cp dialplan.php clone;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/dialplan/dialplan.php#L74;$_GET['action']=clone, privesc through $_SESSION['read_only']=false, $page_name for XSS, $_GET['clone']=1 and $table for SQLi
OpenSIPS:opensips-cp dialplan.php edit;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/dialplan/dialplan.php#L138;$_GET['action']=edit, privesc through $_SESSION['read_only']=false, $page_name for XSS, $table for SQLi
OpenSIPS:opensips-cp dialplan.php search;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/dialplan/dialplan.php#L225;$_GET['action']=search, privesc through $_SESSION['read_only']=false, $errors for XSS, $table for SQLi
OpenSIPS:opensips-cp clusterer.php add;;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/clusterer/clusterer.php#L57;$_GET['action']=add, requires privesc, $page_name for XSS
OpenSIPS:opensips-cp clusterer.php edit;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/clusterer/clusterer.php#L101;$_GET['action']=edit, requires privesc, $page_name for XSS, $table for SQLi
OpenSIPS:opensips-cp clusterer.php search;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/clusterer/clusterer.php#L205;$_GET['action']=search, privesc through $_SESSION['read_only']=false, $errors for XSS, $table for SQLi
OpenSIPS:opensips-cp loadbalancer.php add;;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/loadbalancer/loadbalancer.php#L61;$_GET['action']=add, requires privesc, $page_name for XSS
OpenSIPS:opensips-cp loadbalancer.php edit;;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/loadbalancer/loadbalancer.php#L104;$_GET['action']=edit, requires privesc, $page_name for XSS, $table for SQLi
OpenSIPS:opensips-cp loadbalancer.php search;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/loadbalancer/loadbalancer.php#L201;$_GET['action']=search, privesc through $_SESSION['read_only']=false, $errors for XSS, $table for SQLi
OpenSIPS:opensips-cp tracer.php search;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/siptrace/tracer.php#L91;$_GET['action']=search, privesc through $_SESSION['read_only']=false, $page_name for XSS, $table for SQLi
OpenSIPS:opensips-cp dialog.php dp_act;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/dialog/dialog.php#L92;$_GET['action']=search, privesc through $_SESSION['read_only']=false, $errors for XSS
OpenSIPS:opensips-cp gateways.php add;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/drouting/gateways.php#L214;$_GET['action']=add && $_GET['add']=Add, privesc through $_SESSION['read_only']=false, $form_error for XSS
OpenSIPS:opensips-cp gateways.php search;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/drouting/gateways.php#L306;$_GET['action']=search, privesc through $_SESSION['read_only']=false, $page_name for XSS, $table for SQLi
OpenSIPS:opensips-cp rules.php add;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/drouting/rules.php#L140;$_GET['action']=add && $_GET['add']=Add, privesc through $_SESSION['read_only']=false, $form_error for XSS
OpenSIPS:opensips-cp rules.php search;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/drouting/rules.php#L187;$_GET['action']=search, privesc through $_SESSION['read_only']=false, $page_name for XSS, $table for SQLi
OpenSIPS:opensips-cp groups.php add;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/drouting/groups.php#L139;$_GET['action']=add && $_GET['add']=Add, privesc through $_SESSION['read_only']=false, $form_error for XSS
OpenSIPS:opensips-cp groups.php search;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/drouting/groups.php#L174;$_GET['action']=search, privesc through $_SESSION['read_only']=false, $page_name for XSS, $table for SQLi
OpenSIPS:opensips-cp carriers.php add;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/drouting/carriers.php#L211;$_GET['action']=add && $_GET['add']=Add, privesc through $_SESSION['read_only']=false, $form_error for XSS
OpenSIPS:opensips-cp carriers.php search;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/drouting/carriers.php#L284;$_GET['action']=search, privesc through $_SESSION['read_only']=false, $page_name for XSS, $table for SQLi
OpenSIPS:opensips-cp settings.php gw_types;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/drouting/settings.php#L33;$_GET['action']=gw_types, privesc through $_SESSION['read_only']=false, $page_name for XSS
OpenSIPS:opensips-cp settings.php groups;1;;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/drouting/settings.php#L60;$_GET['action']=groups, privesc through $_SESSION['read_only']=false, $page_name for XSS
OpenSIPS:opensips-cp cdrviewer.php search;1;1;;1;;;;1;;https://github.com/OpenSIPS/opensips-cp/blob/529c50ef55206b9c74e4fbd4ad9b20d3769f8400/web/tools/system/cdrviewer/cdrviewer.php#L63;$_GET['action']=search, privesc through $_SESSION['read_only']=false, $page_name for XSS, $table for SQLi
codingstatus:php-admin-panel-template;;1;;;;;;;;https://github.com/codingstatus/php-admin-panel-template/blob/f3b3996888917e555198ca03402475fa31390ce7/scripts/backend-script.php#L534;set $tableName for SQLi
Rizwan17:Ecommerce add_product;1;;;;;;;1;;https://github.com/Rizwan17/Ecommerce/blob/a15ab61577ebdfbf7cd01bc991222567de929e5a/admin/classes/Products.php#L354;set $_SESSION for privesc, 
Rizwan17:Ecommerce edit_product;1;;;;;;;1;;https://github.com/Rizwan17/Ecommerce/blob/a15ab61577ebdfbf7cd01bc991222567de929e5a/admin/classes/Products.php#L394;set $_SESSION for privesc, 
Rizwan17:Ecommerce admin_register;1;;;;;;;1;;https://github.com/Rizwan17/Ecommerce/blob/a15ab61577ebdfbf7cd01bc991222567de929e5a/admin/classes/Credentials.php#L57;set $_SESSION for privesc, 
Rizwan17:Ecommerce admin_login;1;;;;;;;1;;https://github.com/Rizwan17/Ecommerce/blob/a15ab61577ebdfbf7cd01bc991222567de929e5a/admin/classes/Credentials.php#L75;set $_SESSION for privesc, 
Witchbug:hotel-booking reservation.php;;1;;;;;;;;https://github.com/Witchbug/hotel-booking/blob/113ec9bd95b943c2627dd52783eee71b006046b3/reservation.php#L9;set $checkin for SQLi
Witchbug:hotel-booking booknow.php;;1;;1;;;;;;https://github.com/Witchbug/hotel-booking/blob/113ec9bd95b943c2627dd52783eee71b006046b3/booknow.php#L9;set $checkin for SQLi, $roomname for XSS
Witchbug:hotel-booking edit_all_room.php;;1;;;;;;;;https://github.com/Witchbug/hotel-booking/blob/113ec9bd95b943c2627dd52783eee71b006046b3/edit_all_room.php#L14;set $checkin for SQLi
Witchbug:hotel-booking login.php;1;1;;;;;;;;https://github.com/Witchbug/hotel-booking/blob/113ec9bd95b943c2627dd52783eee71b006046b3/admin/login.php#L53;set $_SESSION['login']=true for privesc, set $emailusername for SQLi
Witchbug:hotel-booking addroom.php;;1;;;;;;;;https://github.com/Witchbug/hotel-booking/blob/113ec9bd95b943c2627dd52783eee71b006046b3/admin/addroom.php#L8;set $roomname for SQLi
Witchbug:hotel-booking edit_room_cat.php;;1;;;;;;;;https://github.com/Witchbug/hotel-booking/blob/113ec9bd95b943c2627dd52783eee71b006046b3/admin/edit_room_cat.php#L14;set $roomname for SQLi
Witchbug:hotel-booking registration.php;;1;;;;;;;;https://github.com/Witchbug/hotel-booking/blob/113ec9bd95b943c2627dd52783eee71b006046b3/admin/registration.php#L6;set $uname for SQLi
highfidelity-worklist:worklist;;;;1;;;;;;https://github.com/highfidelity-worklist/worklist/blob/62c8eaabd267430bd2111459356c140d568268be/controllers/Resend.php#L5;set $msg for XSS
wp-premium:memberpress-developer process_reset_password_form;;;;1;;;;1;;https://github.com/wp-premium/memberpress-developer/blob/ed2d65ee4d1cdcef6b09223beb5774809fd9a20b/app/controllers/MeprLoginCtrl.php#L250;set $errors for XSS, rendered in /shared/errors view
wp-premium:memberpress-developer process_forget_password_form;;;;1;;;;1;;https://github.com/wp-premium/memberpress-developer/blob/ed2d65ee4d1cdcef6b09223beb5774809fd9a20b/app/controllers/MeprLoginCtrl.php#L199;set $errors for XSS, rendered in /shared/errors view
wp-premium:memberpress-developer display_signup_form;;;;1;;;;1;;https://github.com/wp-premium/memberpress-developer/blob/ed2d65ee4d1cdcef6b09223beb5774809fd9a20b/app/controllers/MeprCheckoutCtrl.php#L69;set $errors for XSS, rendered in /shared/errors view
wp-premium:memberpress-business process_reset_password_form;;;;1;;;;1;;https://github.com/wp-premium/memberpress-business/blob/cda9ffb0f8d603e42a7dd8c586f393ce12bd8c21/app/controllers/MeprLoginCtrl.php#L299;set $errors for XSS, rendered in /shared/errors view
wp-premium:memberpress-business process_forget_password_form;;;;1;;;;1;;https://github.com/wp-premium/memberpress-business/blob/cda9ffb0f8d603e42a7dd8c586f393ce12bd8c21/app/controllers/MeprLoginCtrl.php#L248;set $errors for XSS, rendered in /shared/errors view
wp-premium:memberpress-business display_signup_form;;;;1;;;;1;;https://github.com/wp-premium/memberpress-business/blob/cda9ffb0f8d603e42a7dd8c586f393ce12bd8c21/app/controllers/MeprCheckoutCtrl.php#L131;set $errors for XSS, rendered in /shared/errors view