Tag: 0day

[webapps] Concrete5 8.5.4 – 'name' Stored XSS

[webapps] Equipment Inventory System 1.0 – 'multiple' Stored XSS

[webapps] Budget Management System 1.0 – 'Budget title' Stored XSS

[webapps] SyncBreeze 10.1.16 – XML Parsing Stack-based Buffer Overflow

[webapps] GetSimple CMS Custom JS Plugin 0.1 – CSRF to Persistent XSS

[webapps] Regis Inventory And Monitoring System 1.0 – 'Item List' Stored XSS

[webapps] Moodle 3.10.3 – 'label' Persistent Cross Site Scripting

[webapps] Ovidentia 6 – 'id' SQL injection (Authenticated)

[webapps] Linksys EA7500 2.0.8.194281 – Cross-Site Scripting

[webapps] Genexis Platinum-4410 P4410-V2-1.31A – 'start_addr' Persistent Cross-Site Scripting