Employee Management System 1.0 – Cross Site Scripting (Stored)
>> CATEGORY: Security
Employee Management System 1.0 – Cross Site Scripting (Stored)
Company Visitor Management System (CVMS) 1.0 – Authentication Bypass
Restaurant Reservation System 1.0 – ‘date’ SQL Injection (Authenticated)
aaPanel 6.6.6 – Privilege Escalation & Remote Code Execution (Authenticated)
Vehicle Parking Management System 1.0 – Authentication Bypass
rConfig 3.9.5 – Remote Code Execution (Unauthenticated)
NodeBB Forum 1.12.2-1.14.2 – Account Takeover
Guild Wars 2 – Insecure Folder Permissions
berliCRM 1.0.24 – ‘src_record’ SQL Injection
Battle.Net 1.27.1.12428 – Insecure File Permissions