The vulnerability laboratory core research team discovered a persistent cross site vulnerability in the Mahara v19.10.2 …
PMB 5.6 – ‘logid’ SQL Injection
CSZ CMS 1.2.7 – Persistent Cross-Site Scripting
Neowise CarbonFTP 1.4 – Insecure Proprietary Password Encryption
P5 FNIP-8x16A FNIP-4xSH 1.0.20 – Cross-Site Request Forgery (Add Admin)
jizhi CMS 1.6.7 – Arbitrary File Download
NSClient++ 0.5.2.35 – Authenticated Remote Code Execution
Oracle Solaris Common Desktop Environment 1.6 – Local Privilege Escalation
IQrouter 3.3.1 Firmware – Remote Code Execution
CSZ CMS 1.2.7 – ‘title’ HTML Injection