:: Deepquest :: This site contains information which could be considered illegal in some countries. It is provided here for educational use only and is not intended to be used for illegal activities.

Month: November 2020

Security

[webapps] BlogEngine 3.3.8 – 'Content' Stored XSS

BlogEngine 3.3.8 – ‘Content’ Stored XSS

deepcoreNov 6, 2020

Security

[webapps] Sentrifugo Version 3.2 – 'announcements' Remote Code Execution (Authenticated)

Sentrifugo Version 3.2 – ‘announcements’ Remote...

deepcoreNov 6, 2020

Security

[webapps] Sentrifugo 3.2 – 'assets' Remote Code Execution (Authenticated)

Sentrifugo 3.2 – ‘assets’ Remote Code...

deepcoreNov 6, 2020

Security

[webapps] SmartBlog 2.0.1 – 'id_post' Blind SQL injection

SmartBlog 2.0.1 – ‘id_post’ Blind SQL...

deepcoreNov 6, 2020

Security

[webapps] CMSUno 1.6.2 – 'lang' Remote Code Execution (Authenticated)

CMSUno 1.6.2 – ‘lang’ Remote Code...

deepcoreNov 6, 2020

exploit

Processwire CMS 2.4.0 Local File Inclusion

Processwire CMS version 2.4.0 suffers from...

deepcoreNov 5, 2020

exploit

PDW File Browser 1.3 Shell Upload

PDW File Browser version 1.3 suffers...

deepcoreNov 5, 2020

exploit

School Log Management System 1.0 Code Execution / SQL Injection

School Log Management System version 1.0...

deepcoreNov 5, 2020

exploit

Student Attendance Management System 1.0 Code Execution / SQL Injection

Student Attendance Management System version 1.0...

deepcoreNov 5, 2020

defacement

http://www.bdlh.go.th/ay.htm

http://www.bdlh.go.th/ay.htm notified by Senzawa

deepcoreNov 5, 2020