Online Voting System 1.0 – SQLi (Authentication Bypass) + Remote Code Execution (RCE)
Online Voting System 1.0 – SQLi (Authentication Bypass) + Remote Code Execution (RCE)
Online Birth Certificate System 1.1 – ‘Multiple’ Stored Cross-Site Scripting (XSS)
Simple Client Management System 1.0 – Remote Code Execution (RCE)
WordPress Plugin Backup Guard 1.5.8 – Remote Code Execution (Authenticated)
Church Management System 1.0 – ‘password’ SQL Injection (Authentication Bypass)
Church Management System 1.0 – Unrestricted File Upload to Remote Code Execution (Authenticated)
Church Management System 1.0 – ‘Multiple’ Stored Cross-Site Scripting (XSS)
AKCP sensorProbe SPX476 suffers from multiple cross site scripting vulnerabilities.
b2evolution version 7.2.2 suffers from a cross site request forgery vulnerability.
WordPress Modern Events Calendar plugin version 5.16.2 suffers from an issue where unauthenticated parties can export all event data.