Subscribe via feed.
Archive for June, 2021

[webapps] Stock Management System 1.0 – 'user_id' Blind SQL injection (Authenticated)

Posted by deepcore under Security (No Respond)

Stock Management System 1.0 – ‘user_id’ Blind SQL injection (Authenticated)

Tags: ,

[webapps] Small CRM 3.0 – 'Authentication Bypass' SQL Injection

Posted by deepcore under Security (No Respond)

Small CRM 3.0 – ‘Authentication Bypass’ SQL Injection

Tags: ,

[webapps] COVID19 Testing Management System 1.0 – 'State' Stored Cross-Site-Scripting (XSS)

Posted by deepcore under Security (No Respond)

COVID19 Testing Management System 1.0 – ‘State’ Stored Cross-Site-Scripting (XSS)

Tags: ,

Solar-Log 500 2.8.2 Incorrect Access Control

Posted by deepcore under exploit (No Respond)

Solar-Log 500 version 2.8.2 suffers from an incorrect access control vulnerability.

Solar-Log 500 2.8.2 Password Disclosure

Posted by deepcore under exploit (No Respond)

Solar-Log 500 version 2.8.2 suffers from password disclosure vulnerabilities.

Ability FTP Server 2.34 Denial Of Service

Posted by deepcore under exploit (No Respond)

Ability FTP server version 2.34 APPE denial of service exploit.

Microsoft SharePoint Server 16.0.10372.20060 Server-Side Request Forgery

Posted by deepcore under exploit (No Respond)

Microsoft SharePoint Server version 16.0.10372.20060 suffers from a GetXmlDataFromDataSource server-side request forgery vulnerability.

Cerberus FTP Web Service 11 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Cerberus FTP Web Service version 11 suffers from a persistent cross site scripting vulnerability.

Zenario CMS 8.8.52729 SQL Injection

Posted by deepcore under exploit (No Respond)

Zenario CMS version 8.8.52729 suffers from authenticated blind and error-based remote SQL injection vulnerabilities.

WoWonder Social Network Platform 3.1 Authentication Bypass

Posted by deepcore under exploit (No Respond)

WoWonder Social Network Platform version 3.1 suffers from an authentication bypass vulnerability.