>> CATEGORY: Security

Submitty 20.04.01 – Persistent Cross-Site Scripting

NukeViet VMS 4.4.00 – Cross-Site Request Forgery (Change Admin Password)

Victor CMS 1.0 – ‘comment_author’ Persistent Cross-Site Scripting

Victor CMS 1.0 – Authenticated Arbitrary File Upload

Pi-Hole – heisenbergCompensator Blocklist OS Command Execution (Metasploit)

Online Examination System 1.0 – ‘eid’ SQL Injection

WordPress Plugin Ajax Load More 5.3.1 – ‘#1’ Authenticated SQL Injection

forma.lms The E-Learning Suite 2.3.0.2 – Persistent Cross-Site Scripting

Oracle Hospitality RES 3700 5.7 – Remote Code Execution

Monstra CMS 3.0.4 – Authenticated Arbitrary File Upload