[webapps] qdPM 9.1 – Arbitrary File Upload
Posted by deepcore under Security (No Respond)
Archive for May, 2020
[webapps] Orchard Core RC1 – Persistent Cross-Site Scripting
Posted by deepcore under Security (No Respond)
[webapps] LibreNMS 1.46 – 'search' SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] Complaint Management System 1.0 – Authentication Bypass
Posted by deepcore under Security (No Respond)
[webapps] Online AgroCulture Farm Management System 1.0 – 'uname' SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] Victor CMS 1.0 – 'post' SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] OpenZ ERP 3.6.60 – Persistent Cross-Site Scripting
Posted by deepcore under Security (No Respond)
[local] SolarWinds MSP PME Cache Service 1.1.14 – Insecure File Permissions
Posted by deepcore under Security (No Respond)
[webapps] Sentrifugo CMS 3.2 – Persistent Cross-Site Scripting
Posted by deepcore under Security (No Respond)
[webapps] CuteNews 2.1.2 – Arbitrary File Deletion
Posted by deepcore under Security (No Respond)