CSE Bookstore 1.0 – Authentication Bypass
CSE Bookstore 1.0 – Authentication Bypass
Nagios XI 5.7.3 – ‘mibs.php’ Remote Command Injection (Authenticated)
CMS Made Simple version 2.1.6 suffers from a server-side template injection vulnerability.
PDW File Browser versions 1.3 and below suffer from a cross site scripting vulnerability.
InoERP version 0.7.2 suffers from an unauthenticated remote code execution vulnerability.
Online Health Care System version 1.0 suffers from multiple persistent cross site scripting vulnerabilities.
The Genexis Platinum-4410 router suffers from a persistent cross site scripting vulnerability.
Sphider Search Engine 1.3.6 – ‘word_upper_bound’ RCE (Authenticated)
Client Management System 1.0 – ‘searchdata’ SQL injection
Sentrifugo 3.2 – File Upload Restriction Bypass (Authenticated)