Month: July 2021

[webapps] Webmin 1.973 – Cross-Site Request Forgery (CSRF)

[webapps] Garbage Collection Management System 1.0 – SQL Injection + Arbitrary File Upload

[webapps] OpenEMR 5.0.1.3 – 'manage_site_files' Remote Code Execution (Authenticated) (2)

[webapps] Invoice System 1.0 – 'Multiple' Stored Cross-Site Scripting (XSS)

[webapps] Apache Tomcat 9.0.0.M1 – Open Redirect

[webapps] WordPress Plugin WPFront Notification Bar 1.9.1.04012 – Stored Cross-Site Scripting (XSS)

[webapps] Apache Tomcat 9.0.0.M1 – Cross-Site Scripting (XSS)