>> ARCHIVE: 2020-05

VirtualTablet Server version 3.0.2 denial of service proof of concept exploit.

Online Scheduling System version 1.0 suffers from a persistent cross site scripting vulnerability.

Online Scheduling System version 1.0 suffers from an authentication bypass vulnerability.

PHP-Fusion version 9.03.50 suffers from a persistent cross site scripting vulnerability.

Apache OFBiz version 17.12.03 suffers from a cross site request forgery vulnerability.

Firefox suffers from an out-of-bounds access vulnerability in js::ReadableStreamCloseInternal.

This archive contains all of the 201 exploits added to Packet Storm in April, 2020.

ChemInv version 1 suffers from a persistent cross site scripting vulnerability.

HardDrive version 2.1 for iOS suffers from an arbitrary file upload vulnerability.