>> TAG: #0day

CBAS-Web 19.0.0 – Cross-Site Request Forgery (Add Super Admin)

CBAS-Web 19.0.0 – Information Disclosure

CBAS-Web 19.0.0 – Username Enumeration

eMerge E3 1.00-06 – Remote Code Execution

eMerge E3 1.00-06 – Privilege Escalation

Joomla 3.9.13 – ‘Host’ Header Injection

CBAS-Web 19.0.0 – ‘id’ Boolean-based Blind SQL Injection

Adrenalin Core HCM 5.4.0 – ‘strAction’ Reflected Cross-Site Scripting

Adrenalin Core HCM 5.4.0 – ‘prntDDLCntrlName’ Reflected Cross-Site Scripting

Prima FlexAir Access Control 2.3.38 – Remote Code Execution