http://envfund.onep.go.th/ay.htm notified by D3D0T
http://envfund.onep.go.th/ay.htm notified by D3D0T
ZeroLogon – Netlogon Elevation of Privilege
BigBlueButton 2.2.25 – Arbitrary File Disclosure and Server-Side Request Forgery
WordPress Plugin WPForms 1.6.3.1 – Persistent Cross Site Scripting (Authenticated)
Advanced System Care Service version 13 suffers from an unquoted service path vulnerability.
Pandora FMS version 7.0 NG 749 suffers from a remote SQL injection vulnerability.
KiteService version 1.2020.1113.1 suffers from an unquoted service path vulnerability.
Taskcafe version 0.1.0 and 0.1.1 suffer from a cross-origin resource sharing vulnerability.
Water Billing System version 1.0 suffers from a remote SQL injection vulnerability. This version was already found to be susceptible to SQL injection by Sarang Tumne in November of 2020.
Super Store Finder versions 3.3 and below suffer from a cross site scripting vulnerability.