>> CATEGORY: Security

Academy-LMS 4.3 – Stored XSS

Spiceworks 7.5 – HTTP Header Injection

Flexmonster Pivot Table & Charts 2.7.17 – ‘To OLAP’ Reflected XSS

Flexmonster Pivot Table & Charts 2.7.17 – ‘Remote Report’ Reflected XSS

Flexmonster Pivot Table & Charts 2.7.17 – ‘To remote CSV’ Reflected XSS

Flexmonster Pivot Table & Charts 2.7.17 – ‘Remote JSON’ Reflected XSS

Point of Sale System 1.0 – Multiple Stored XSS

SCO Openserver 5.0.7 – ‘outputform’ Command Injection

SCO Openserver 5.0.7 – ‘section’ Reflected XSS

Point of Sale System 1.0 – Authentication Bypass