Category: Security

[webapps] Ecessa WANWorx WVR-30 < 10.7.4 – Cross-Site Request Forgery (Add Superuser)

[webapps] WordPress Plugin iThemes Security < 7.0.3 – SQL Injection

[webapps] Travel Agency 1.1 – 'cid' SQL Injection

[webapps] phpLDAPadmin 1.2.2 – 'server_id' LDAP Injection (Username)

[dos] Opencart < 3.0.2.0 – Denial of Service

[dos] QEMU Guest Agent 2.12.50 – Denial of Service

[webapps] phpMyAdmin 4.8.1 – Local File Inclusion

[webapps] GreenCMS 2.3.0603 – Information Disclosure

[webapps] LFCMS 3.7.0 – Cross-Site Request Forgery (Add User)

[webapps] LFCMS 3.7.0 – Cross-Site Request Forgery (Add Admin)