Month: November 2021

[webapps] Eclipse Jetty 11.0.5 – Sensitive File Disclosure

[webapps] Fuel CMS 1.4.1 – Remote Code Execution (3)

[webapps] WordPress Plugin Hotel Listing 3 – 'Multiple' Cross-Site Scripting (XSS)

[webapps] WordPress Plugin Popup Anything 2.0.3 – 'Multiple' Stored Cross-Site Scripting (XSS)

[webapps] PHPJabbers Simple CMS 5 – 'name' Persistent Cross-Site Scripting (XSS)

[webapps] Ultimate POS 4.4 – 'name' Cross-Site Scripting (XSS)

[webapps] OpenAM 13.0 – LDAP Injection

[webapps] Vanguard 2.1 – 'Search' Cross-Site Scripting (XSS)

[webapps] Isshue Shopping Cart 3.5 – 'Title' Cross Site Scripting (XSS)

[webapps] Mult-e-Cart Ultimate 2.4 – 'id' SQL Injection