Tag: 0day

[webapps] PHP-Fusion CMS 9.03.90 – Cross-Site Request Forgery (Delete admin shoutbox message)

[webapps] Online Hotel Reservation System 1.0 – Cross-site request forgery (CSRF)

[webapps] WordPress Plugin Easy Contact Form 1.1.7 – 'Name' Stored Cross-Site Scripting (XSS)

[webapps] Online Hotel Reservation System 1.0 – 'description' Stored Cross-site Scripting

[webapps] Online Hotel Reservation System 1.0 – 'id' Time-based SQL Injection

[webapps] Online Hotel Reservation System 1.0 – 'person' time-based SQL Injection

[webapps] E-Learning System 1.0 – Authentication Bypass & RCE POC

[webapps] Online Movie Streaming 1.0 – Admin Authentication Bypass

[webapps] Laravel 8.4.2 debug mode – Remote code execution

[webapps] Nagios XI 5.7.X – Remote Code Exection RCE (Authenticated)