AlchemyCMS 4.1 – Cross-Site Scripting
>> ARCHIVE: 2018-10
AlchemyCMS 4.1 – Cross-Site Scripting
Advanced HRM 1.6 – Remote Code Execution
FLIR AX8 Thermal Camera 1.32.16 – RTSP Stream Disclosure
MaxOn ERP Software 8.x-9.x – ‘nomor’ SQL Injection
FLIR Brickstream 3D+ 2.1.742.1842 – Config File Disclosure
FLIR AX8 Thermal Camera 1.32.16 – Arbitrary File Disclosure
Academic Timetable Final Build 7.0a-7.0b – ‘id’ SQL Injection
HaPe PKH version 1.1 suffers from a remote SQL injection vulnerability.
Cockpit CMS suffers from cross site request forgery, cross site scripting, and traversal vulnerabilities. Version 0.6.2 should address these issues.
Phoenix Contact WebVisit 2985725 suffers from an authentication bypass vulnerability.