>> TAG: #0day

Microweber CMS 1.2.15 – Account Takeover

Telesquare SDT-CW3B1 1.1.0 – OS Command Injection

SolarView Compact 6.00 – Directory Traversal

qdPM 9.1 – Remote Code Execution (RCE) (Authenticated) (v2)

OpenCart v3.x Newsletter Module – Blind SQLi

m1k1o’s Blog v.10 – Remote Code Execution (RCE) (Authenticated)

Survey Sparrow Enterprise Survey Software 2022 – Stored Cross-Site Scripting (XSS)

T-Soft E-Commerce 4 – ‘UrunAdi’ Stored Cross-Site Scripting (XSS)

SDT-CW3B1 1.1.0 – OS Command Injection

T-Soft E-Commerce 4 – SQLi (Authenticated)