The Horde_Data module version 2.1.4 (and before) present in Horde Groupware version 5.2.22 allows authenticated users to inject arbitrary PHP code thus achieving remote code execution the server hosting the…
UCM6202 1.0.18.13 – Remote Command Injection
Veyon 4.3.4 – ‘VeyonService’ Unquoted Service Path
WordPress Plugin WPForms 1.5.9 – Persistent Cross-Site Scripting
UliCMS 2020.1 – Persistent Cross-Site Scripting
http://nonpho.go.th notified by GH057_5P3C706
http://laopruan.go.th notified by GH057_5P3C706
http://nonnamtang.go.th notified by GH057_5P3C706
rConfig 3.9.4 – ‘search.crud.php’ Remote Command Injection
CyberArk PSMP 10.9.1 – Policy Restriction Bypass