>> CATEGORY: Security

ChurchCRM 4.4.5 – SQLi

Old Age Home Management System 1.0 – SQLi Authentication Bypass

Marval MSM v14.19.0.12476 – Remote Code Execution (RCE) (Authenticated)

Avantune Genialcloud ProJ 10 – Cross-Site Scripting (XSS)

SolarView Compact 6.00 – ‘time_begin’ Cross-Site Scripting (XSS)

Real Player v.20.0.8.310 G2 Control – ‘DoGoToURL()’ Remote Code Execution (RCE)

SolarView Compact 6.00 – ‘pow’ Cross-Site Scripting (XSS)

Real Player 16.0.3.51 – ‘external::Import()’ Directory Traversal to Remote Code Execution (RCE)

WordPress Plugin Motopress Hotel Booking Lite 4.2.4 – Stored Cross-Site Scripting (XSS)

Confluence Data Center 7.18.0 – Remote Code Execution (RCE)