Category: Security

[webapps] WordPress Plugin Modern Events Calendar V 6.1 – SQL Injection (Unauthenticated)

[remote] Oracle WebLogic Server 14.1.1.0.0 – Local File Inclusion

[webapps] Online Project Time Management System 1.0 – SQLi (Authenticated)

[webapps] Online Project Time Management System 1.0 – Multiple Stored Cross Site Scripting (XSS) (Authenticated)

[webapps] PHPIPAM 1.4.4 – SQLi (Authenticated)

[webapps] Landa Driving School Management System 2.0.1 – Arbitrary File Upload

[webapps] uDoctorAppointment v2.1.1 – 'Multiple' Cross Site Scripting (XSS)

[webapps] Rocket LMS 1.1 – Persistent Cross Site Scripting (XSS)

[webapps] Affiliate Pro 1.7 – 'Multiple' Cross Site Scripting (XSS)

[remote] Archeevo 5.0 – Local File Inclusion