Month: June 2018

[webapps] userSpice 4.3.24 – Username Enumeration

[webapps] Schools Alert Management Script – SQL Injection

[webapps] Event Manager Admin panel – 'events_new.php' SQL injection

[webapps] Schools Alert Management Script – Arbitrary File Deletion

[webapps] WordPress Plugin Pie Register < 3.0.9 – Blind SQL Injection

[webapps] userSpice 4.3.24 – 'X-Forwarded-For' Cross-Site Scripting

[webapps] Joomla! Component EkRishta 2.10 – 'cid' SQL Injection