Category: Security

[webapps] BlogEngine 3.3 – 'syndication.axd' XML External Entity Injection

[webapps] SimplePHPGal 0.7 – Remote File Inclusion

[webapps] NEC Electra Elite IPK II WebPro 01.03.01 – Session Enumeration

[webapps] BoltWire 6.03 – Local File Inclusion

[webapps] osTicket 1.14.1 – Persistent Authenticated Cross-Site Scripting

[local] Outline Service 1.3.3 – 'Outline Service ' Unquoted Service Path

[local] Frigate 3.36 – Buffer Overflow (SEH)

[webapps] addressbook 9.0.0.1 – 'id' SQL Injection

[webapps] ChemInv 1.0 – Authenticated Persistent Cross-Site Scripting

[webapps] php-fusion 9.03.50 – Persistent Cross-Site Scripting