Category: Security

[webapps] ChurchCRM 4.4.5 – SQLi

[webapps] Old Age Home Management System 1.0 – SQLi Authentication Bypass

[remote] Marval MSM v14.19.0.12476 – Remote Code Execution (RCE) (Authenticated)

[webapps] Avantune Genialcloud ProJ 10 – Cross-Site Scripting (XSS)

[webapps] SolarView Compact 6.00 – 'time_begin' Cross-Site Scripting (XSS)

[local] Real Player v.20.0.8.310 G2 Control – 'DoGoToURL()' Remote Code Execution (RCE)

[webapps] SolarView Compact 6.00 – 'pow' Cross-Site Scripting (XSS)

[local] Real Player 16.0.3.51 – 'external::Import()' Directory Traversal to Remote Code Execution (RCE)

[webapps] WordPress Plugin Motopress Hotel Booking Lite 4.2.4 – Stored Cross-Site Scripting (XSS)

[webapps] Confluence Data Center 7.18.0 – Remote Code Execution (RCE)