>> CATEGORY: Security

ImpressCMS 1.4.2 – Remote Code Execution (RCE) (Authenticated)

Support Board 3.3.3 – ‘Multiple’ SQL Injection (Unauthenticated)

Evolution CMS 3.1.6 – Remote Code Execution (RCE) (Authenticated)

Seowon 130-SLC router – ‘queriesCnt’ Remote Code Execution (Unauthenticated)

AlphaWeb XE – File Upload Remote Code Execution (RCE) (Authenticated)

Purchase Order Management System 1.0 – Remote File Upload

ECOA Building Automation System – ‘multiple’ Cross-Site Request Forgery (CSRF)

ECOA Building Automation System – Directory Traversal Content Disclosure

ECOA Building Automation System – Configuration Download Information Disclosure

ECOA Building Automation System – Cookie Poisoning Authentication Bypass