>> ARCHIVE: 2020-02

Cacti version 1.2.8 suffers from an unauthenticated remote code execution vulnerability.

Cacti version 1.2.8 suffers from an authenticated remote code execution vulnerability.

DirectWeb version 0.4.0 suffers from a cross site scripting vulnerability.

Easy2Pilot version 8 suffers from remote SQL injection, backdoor account, and cross site request forgery vulnerabilities.

Apache Tomcat AJP Ghostcat file read and inclusion exploit.

Core FTP LE version 2.2 suffers from a denial of service vulnerability.

PhpIX 2012 Professional (Beta) suffers from a remote SQL injection vulnerability.

Business Live Chat Software version 1.0 suffers from a cross site request forgery vulnerability.

PHP-Fusion CMS versions 9 through 9.03 suffer from multiple cross site scripting vulnerabilities.

Comtrend VR-3033 suffers from a command injection vulnerability.