>> CATEGORY: Security

Movable Type 7 r.5002 – XMLRPC API OS Command Injection (Metasploit)

WordPress Plugin Supsystic Contact Form 1.7.18 – ‘label’ Stored Cross-Site Scripting (XSS)

PHPGurukul Hostel Management System 2.1 – Cross-site request forgery (CSRF) to Cross-site Scripting (XSS)

WordPress Plugin Supsystic Contact Form 1.7.18 – ‘label’ Stored Cross-Site Scripting (XSS)

PHPGurukul Hostel Management System 2.1 – Cross-site request forgery (CSRF) to Cross-site Scripting (XSS)

WordPress Plugin Filterable Portfolio Gallery 1.0 – ‘title’ Stored Cross-Site Scripting (XSS)

WordPress Plugin Filterable Portfolio Gallery 1.0 – ‘title’ Stored Cross-Site Scripting (XSS)

Hikvision Web Server Build 210702 – Command Injection

Engineers Online Portal 1.0 – File Upload Remote Code Execution (RCE)

Apache HTTP Server 2.4.50 – Remote Code Execution (RCE) (2)