Month: December 2020

[webapps] Savsoft Quiz 5 – 'field_title' Stored Cross-Site Scripting

[local] Chromium 83 – Full CSP Bypass

[webapps] Testa Online Test Management System 3.4.7 – 'q' SQL Injection

[webapps] Phpscript-sgh 0.1.0 – Time Based Blind SQL Injection

[webapps] MiniCMS 1.10 – 'content box' Stored XSS

[webapps] Composr CMS 10.0.34 – 'banners' Persistent Cross Site Scripting

[local] IDT PC Audio 1.0.6499.0 – 'STacSV' Unquoted Service Path

[webapps] WordPress Plugin Canto 1.3.0 – Blind SSRF (Unauthenticated)