>> TAG: #0day

FlashGet 1.9.6 – Denial of Service (PoC)

Draytek VigorAP 1000C – Persistent Cross-Site Scripting

School File Management System 1.0 – ‘username’ SQL Injection

Online Clothing Store 1.0 – Arbitrary File Upload

Pisay Online E-Learning System 1.0 – Remote Code Execution

Online AgroCulture Farm Management System 1.0 – ‘pid’ SQL Injection

Online Clothing Store 1.0 – Persistent Cross-Site Scripting

YesWiki cercopitheque 2020.04.18.1 – ‘id’ SQL Injection

i-doit Open Source CMDB 1.14.1 – Arbitrary File Deletion

Booked Scheduler 2.7.7 – Authenticated Directory Traversal