Exponent CMS version 2.6 suffers from cross site scripting and brute forcing vulnerabilities.
>> ARCHIVE: 2021-12
Aver EVC300 firmware version 00.10.16.36 suffers from having multiple hard-coded secrets that can allow for access bypass.
Alfa Team Shell Tesla version 4.1 suffers from a remote code execution vulnerability.
Signup PHP Portal version 2.1 suffers from a remote shell upload vulnerability.
Video Sharing Website version 1.0 appears to suffer from a remote SQL injection vulnerability.
Bazaar Web PHP Social Listings suffers from a remote shell upload vulnerability.
This exploit requires Metasploit to have a FQDN and the ability to run a payload web server on port 80, 443, or 8080. The FQDN must also not resolve to…
Exponent CMS 2.6 – Multiple Vulnerabilities
phpKF CMS 3.00 Beta y6 – Remote Code Execution (RCE) (Unauthenticated)
WBCE CMS 1.5.1 – Admin Password Reset