Tag: 0day

[webapps] Open Game Panel – Remote Code Execution (RCE) (Authenticated)

[webapps] Young Entrepreneur E-Negosyo System 1.0 – SQL Injection Authentication Bypass

[webapps] Drupal Module MiniorangeSAML 8.x-2.22 – Privilege escalation via XML Signature Wrapping

[webapps] Dairy Farm Shop Management System 1.0 – SQL Injection Authentication Bypass

[webapps] Exam Form Submission System 1.0 – SQL Injection Authentication Bypass

[webapps] Blood Bank System 1.0 – SQL Injection / Authentication Bypass

[webapps] Phpwcms 1.9.30 – File Upload to XSS

[webapps] Vehicle Service Management System 1.0 – Remote Code Execution (RCE) (Unauthenticated)

[webapps] WhatsUpGold 21.0.3 – Stored Cross-Site Scripting (XSS)

[webapps] CMSimple_XH 1.7.4 – Remote Code Execution (RCE) (Authenticated)