Month: February 2022

[webapps] WordPress Plugin Secure Copy Content Protection and Content Locking 2.8.1 – SQL-Injection (Unauthenticated)

[webapps] Home Owners Collection Management System 1.0 – 'id' Blind SQL Injection

[webapps] Home Owners Collection Management System 1.0 – Remote Code Execution (RCE) (Authenticated)

[webapps] Hospital Management Startup 1.0 – 'Multiple' SQLi

[webapps] Home Owners Collection Management System 1.0 – Account Takeover (Unauthenticated)

[local] Cain & Abel 4.9.56 – Unquoted Service Path

[webapps] WordPress Plugin Contact Form Builder 1.6.1 – Cross-Site Scripting (XSS)