Category: Security

[webapps] i-doit Open Source CMDB 1.14.1 – Arbitrary File Deletion

[webapps] Booked Scheduler 2.7.7 – Authenticated Directory Traversal

[webapps] Online Clothing Store 1.0 – 'username' SQL Injection

[webapps] webTareas 2.0.p8 – Arbitrary File Deletion

[webapps] GitLab 12.9.0 – Arbitrary File Read

[remote] Saltstack 3000.2 – Remote Code Execution

[webapps] Fishing Reservation System 7.5 – 'uid' SQL Injection

[local] Oracle Database 11g Release 2 – 'OracleDBConsoleorcl' Unquoted Service Path

[webapps] Online Scheduling System 1.0 – 'username' SQL Injection

[webapps] webERP 4.15.1 – Unauthenticated Backup File Access