Month: January 2019

[webapps] Horde Imp – 'imap_open' Remote Command Execution

[webapps] Bigcart – Ecommerce Multivendor System 1.0 – SQL Injection

[webapps] Modern POS 1.3 – Arbitrary File Download

[webapps] Modern POS 1.3 – SQL Injection

[webapps] Job Portal Platform 1.0 – SQL Injection

[webapps] Real Estate Custom Script 2.0 – SQL Injection

[webapps] ThinkPHP 5.X – Remote Command Execution

[webapps] HealthNode Hospital Management System 1.0 – SQL Injection

[webapps] Hucart CMS 5.7.4 – Cross-Site Request Forgery (Add Administrator Account)

[webapps] Cleanto 5.0 – SQL Injection