Month: May 2020

[webapps] Victor CMS 1.0 – Authenticated Arbitrary File Upload

[webapps] Victor CMS 1.0 – 'comment_author' Persistent Cross-Site Scripting

[webapps] NukeViet VMS 4.4.00 – Cross-Site Request Forgery (Change Admin Password)

[webapps] Submitty 20.04.01 – Persistent Cross-Site Scripting

[webapps] php-fusion 9.03.50 – 'ctype' SQL Injection

[webapps] Victor CMS 1.0 – 'cat_id' SQL Injection

[webapps] qdPM 9.1 – 'cfg[app_app_name]' Persistent Cross-Site Scripting

[remote] HP LinuxKI 6.01 – Remote Command Injection

[webapps] Online Healthcare management system 1.0 – Authentication Bypass

[webapps] Mikrotik Router Monitoring System 1.2.3 – 'community' SQL Injection