Chamilo LMS 1.11.14 – Remote Code Execution (Authenticated)
Chamilo LMS 1.11.14 – Remote Code Execution (Authenticated)
Podcast Generator 3.1 – ‘Long Description’ Persistent Cross-Site Scripting (XSS)
Student Management System 1.0 – ‘message’ Persistent Cross-Site Scripting (Authenticated)
Hexagon G!nius Auskunftsportal versions prior to 5.0.0.0 suffer from a remote SQL injection vulnerability.
Customer Relationship Management (CRM) System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
Customer Relationship Management (CRM) System version 1.0 suffers from a persistent cross site scripting vulnerability.
Customer Relationship Management (CRM) System version 1.0 suffers from a remote shell upload vulnerability.
Odoo version 12.0.20190101 suffers from an unquoted service path vulnerability.
Splinterware System Scheduler Professional version 5.30 suffers an unquoted service path vulnerability.
Android NFC suffers from a type confusion vulnerability in nfa_rw_sys_disable.