Tag: 0day

[webapps] Savsoft Quiz 5 – 'field_title' Stored Cross-Site Scripting

[webapps] Forma LMS 2.3 – 'First & Last Name' Stored Cross-Site Scripting

[webapps] Laravel Nova 3.7.0 – 'range' DoS

[webapps] CMS Made Simple 2.2.15 – Stored Cross-Site Scripting via SVG File Upload (Authenticated)

[webapps] EgavilanMedia Address Book 1.0 Exploit – SQLi Auth Bypass

[webapps] Online Matrimonial Project 1.0 – Authenticated Remote Code Execution

[webapps] mojoPortal forums 2.7.0.0 – 'Title' Persistent Cross-Site Scripting

[webapps] Sony BRAVIA Digital Signage 1.7.8 – Unauthenticated Remote File Inclusion

[webapps] Coastercms 5.8.18 – Stored XSS

[webapps] Sony BRAVIA Digital Signage 1.7.8 – System API Information Disclosure