Tag: 0day

[webapps] Apache Tomcat 9.0.0.M1 – Cross-Site Scripting (XSS)

[webapps] WordPress Plugin WPFront Notification Bar 1.9.1.04012 – Stored Cross-Site Scripting (XSS)

[webapps] Apache Tomcat 9.0.0.M1 – Open Redirect

[webapps] Invoice System 1.0 – 'Multiple' Stored Cross-Site Scripting (XSS)

[webapps] OpenEMR 5.0.1.3 – 'manage_site_files' Remote Code Execution (Authenticated) (2)

[webapps] Garbage Collection Management System 1.0 – SQL Injection + Arbitrary File Upload

[webapps] Church Management System 1.0 – SQL Injection (Authentication Bypass) + Arbitrary File Upload + RCE

[webapps] Zoo Management System 1.0 – 'Multiple' Stored Cross-Site-Scripting (XSS)

[webapps] Exam Hall Management System 1.0 – Unrestricted File Upload + RCE (Unauthenticated)

[webapps] Online Covid Vaccination Scheduler System 1.0 – Arbitrary File Upload to Remote Code Execution (Unauthenticated)