Month: December 2020

[webapps] Tailor Management System 1.0 – Unrestricted File Upload to Remote Code Execution

[webapps] Setelsa Conacwin 3.7.1.2 – Local File Inclusion

[local] 10-Strike Network Inventory Explorer 8.65 – Buffer Overflow (SEH)

[webapps] Online Shopping Alphaware 1.0 – Error Based SQL injection

[webapps] Pharmacy/Medical Store & Sale Point 1.0 – 'email' SQL Injection

[webapps] WordPress Plugin EventON Calendar 3.0.5 – Reflected Cross-Site Scripting

[webapps] Joomla! Component GMapFP 3.5 – Unauthenticated Arbitrary File Upload

[webapps] TypeSetter 5.1 – CSRF (Change admin e-mail)