>> ARCHIVE: 2020-09

Piwigo version 2.10.1 suffers from a cross site scripting vulnerability.

Acronis Cyber Backup version 12.5 Build 16341 suffers from a server-side request forgery vulnerability.

1CRM versions 8.6.7 and below suffer from an insecure direct object reference vulnerability.

This Metasploit module exploits a command injection vulnerability in Mida Solutions eFramework version 2.9.0 and prior. The ajaxreq.php file allows unauthenticated users to inject arbitrary commands in the PARAM parameter…

Tailor MS version 1.0 suffers from a cross site scripting vulnerability.

ThinkAdmin version 6 suffers from an arbitrary file read vulnerability.