EyouCMS 1.4.6 – Persistent Cross-Site Scripting
>> AUTHOR: deepcore
EyouCMS 1.4.6 – Persistent Cross-Site Scripting
Online-Exam-System 2015 – ‘fid’ SQL Injection
QNAP QTS and Photo Station 6.0.3 – Remote Command Execution
WordPress Form Maker plugin versions 5.4.1 and below suffer from a remote SQL injection vulnerability.
GoldWave version 5.70 SEH unicode buffer overflow exploit.
Victor CMS version 1.0 suffers from an add_user persistent cross site scripting vulnerability.
Online Discussion Forum Site version 1.0 suffers from a remote code execution vulnerability.
OpenEMR versions prior to 5.0.1 suffer from a remote code execution vulnerability.
Joomla XCloner Backup version 3.5.3 suffers from a local file disclosure vulnerability.
This Metasploit module exploits a command execution vulnerability in Pi-Hole versions 3.3 and below. When adding a new domain to the whitelist, it is possible to chain a command to…