Tag: 0day

[webapps] Online Clothing Store 1.0 – 'username' SQL Injection

[webapps] webTareas 2.0.p8 – Arbitrary File Deletion

[webapps] GitLab 12.9.0 – Arbitrary File Read

[remote] Saltstack 3000.2 – Remote Code Execution

[webapps] Fishing Reservation System 7.5 – 'uid' SQL Injection

[local] Oracle Database 11g Release 2 – 'OracleDBConsoleorcl' Unquoted Service Path

[webapps] Online Scheduling System 1.0 – 'username' SQL Injection

[webapps] webERP 4.15.1 – Unauthenticated Backup File Access

[webapps] BlogEngine 3.3 – 'syndication.axd' XML External Entity Injection

[webapps] SimplePHPGal 0.7 – Remote File Inclusion