Tag: 0day

[dos] Nsauditor 3.2.2.0 – 'Event Description' Denial of Service (PoC)

[webapps] TestLink 1.9.20 – Unrestricted File Upload (Authenticated)

[webapps] Teachers Record Management System 1.0 – 'searchteacher' SQL Injection

[local] Tasks 9.7.3 – Insecure Permissions

[local] PDFCOMPLETE Corporate Edition 4.1.45 – 'pdfcDispatcher' Unquoted Service Path

[webapps] School File Management System 1.0 – 'multiple' Stored Cross-Site Scripting

[webapps] School Event Attendance Monitoring System 1.0 – 'Item Name' Stored Cross-Site Scripting

[webapps] PEEL Shopping 9.3.0 – 'address' Stored Cross-Site Scripting

[webapps] b2evolution 6.11.6 – 'redirect_to' Open Redirect

[webapps] b2evolution 6.11.6 – 'tab3' Reflected XSS