Subscribe via feed.
Archive for October, 2018

School ERP Ultimate 2018 SQL Injection

Posted by deepcore under exploit (No Respond)

School ERP Ultimate version 2018 suffers from a remote SQL injection vulnerability.

The Open ISES Project 3.30A Arbitrary File Download

Posted by deepcore under exploit (No Respond)

The Open ISES Project version 3.30A suffers from an arbitrary file download vulnerability.

AjentiCP 1.2.23.13 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

AjentiCP versions 1.2.23.13 and below suffer from a persistent cross site scripting vulnerability.

eNdonesia Portal 8.7 SQL Injection

Posted by deepcore under exploit (No Respond)

eNdonesia Portal version 8.7 suffers from a remote SQL injection vulnerability.

Traq 3.7.1 CSRF / XSS / SQL Injection

Posted by deepcore under exploit (No Respond)

Traq version 3.7.1 suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.

Viva Visitor And Volunteer ID Tracking 0.95.1 SQL Injection

Posted by deepcore under exploit (No Respond)

Viva Visitor and Volunteer ID Tracking version 0.95.1 suffers from a remote SQL injection vulnerability.

VestaCP 0.9.8-22 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

VestaCP versions 0.9.8-22 and below suffer from multiple cross site scripting vulnerabilities.

[webapps] School ERP Pro+Responsive 1.0 – Arbitrary File Download

Posted by deepcore under Security (No Respond)

School ERP Pro+Responsive 1.0 – Arbitrary File Download

Tags: ,

[webapps] SIM-PKH 2.4.1 – 'id' SQL Injection

Posted by deepcore under Security (No Respond)

SIM-PKH 2.4.1 – ‘id’ SQL Injection

Tags: ,

[webapps] ServersCheck Monitoring Software 14.3.3 – 'id' SQL Injection

Posted by deepcore under Security (No Respond)

ServersCheck Monitoring Software 14.3.3 – ‘id’ SQL Injection

Tags: ,