>> ARCHIVE: 2022-06

Real Player 16.0.3.51 – ‘external::Import()’ Directory Traversal to Remote Code Execution (RCE)

SolarView Compact 6.00 – ‘pow’ Cross-Site Scripting (XSS)

Real Player v.20.0.8.310 G2 Control – ‘DoGoToURL()’ Remote Code Execution (RCE)

SolarView Compact 6.00 – ‘time_begin’ Cross-Site Scripting (XSS)

Avantune Genialcloud ProJ 10 – Cross-Site Scripting (XSS)

Marval MSM v14.19.0.12476 – Remote Code Execution (RCE) (Authenticated)

Old Age Home Management System 1.0 – SQLi Authentication Bypass

ChurchCRM 4.4.5 – SQLi