SugarCRM 6.5.18 – Persistent Cross-Site Scripting

Online Doctor Appointment Booking System PHP and Mysql 1.0 – ‘q’ SQL Injection

Pandora FMS 7.0 NG 749 – ‘CG Items’ SQL Injection (Authenticated)

Car Rental Management System 1.0 – ‘car_id’ Sql Injection

Cisco 7937G – DoS/Privilege Escalation

KiteService 1.2020.1113.1 – ‘KiteService.exe’ Unquoted Service Path

Water Billing System 1.0 – ‘id’ SQL Injection (Authenticated)

Car Rental Management System 1.0 – Remote Code Execution (Authenticated)

PMB 5.6 – ‘chemin’ Local File Disclosure

Atheros Coex Service Application 8.0.0.255 – ‘ZAtheros Bt&Wlan Coex Agent’ Unquoted Service Path