This exploit triggers a denial of service vulnerability in SurfOffline Professional version 2.2.0.103. By providing a specially crafted payload as the 'Project Name' parameter, an attacker can cause the program to crash, overwriting the SEH (Structured Exception Handling) value.
The FTP Navigator 8.03 software is vulnerable to a denial of service (DoS) attack when a specially crafted payload is sent to the 'Custom Command' input box. This can cause the program to crash, overwriting the Structured Exception Handler (SEH) and potentially leading to remote code execution.
The Dairy Farm Shop Management System 1.0 web application is vulnerable to SQL injection in multiple areas. The most severe of these is the username parameter on the login page as this injection can be done unauthenticated.
The 'pmc_username' parameter of pass_reset.php is vulnerable to reflected XSS. Payload: '><script>alert('xss')</script> Vulnerable URL: http://localhost/plus/pass_reset.php?L=english&pmc_username=''><script>alert('xss')</script>