Tag: 0day

[webapps] Employee Record System 1.0 – Unrestricted File Upload to Remote Code Execution

[webapps] Cockpit CMS 0.6.1 – Remote Code Execution

[webapps] Curfew e-Pass Management System 1.0 – Stored XSS

[webapps] iBall-Baton WRA150N Rom-0 Backup – File Disclosure (Sensitive Information)

[webapps] ECSIMAGING PACS 6.21.5 – SQL injection

[webapps] CRUD Operation 1.0 – Multiple Stored XSS

[local] dirsearch 0.4.1 – CSV Injection

[webapps] IPeakCMS 3.5 – Boolean-based blind SQLi

[local] IObit Uninstaller 10 Pro – Unquoted Service Path

[webapps] WordPress Plugin litespeed cache 3.6 – 'server_ip' Cross-Site Scripting