Tag: 0day

[webapps] Cerberus FTP Web Service 11 – 'svg' Stored Cross-Site Scripting (XSS)

[webapps] Accela Civic Platform 21.1 – 'servProvCode' Cross-Site-Scripting (XSS)

[dos] n+otes 1.6.2 – Denial of Service (PoC)

[dos] Sticky Notes Widget Version 3.0.6 – Denial of Service (PoC)

[local] memono Notepad Version 4.2 – Denial of Service (PoC)

[webapps] Student Result Management System 1.0 – 'class' SQL Injection

[webapps] TextPattern CMS 4.8.7 – Stored Cross-Site Scripting (XSS)

[webapps] WordPress Plugin visitors-app 0.3 – 'user-agent' Stored Cross-Site Scripting (XSS)

[webapps] OpenCart 3.0.3.7 – 'Change Password' Cross-Site Request Forgery (CSRF)

[webapps] OpenCart 3.0.3.6 – 'subject' Stored Cross-Site Scripting