Tag: remote exploit

[webapps] Chamilo LMS 1.11.14 – Remote Code Execution (Authenticated)

[webapps] Podcast Generator 3.1 – 'Long Description' Persistent Cross-Site Scripting (XSS)

[webapps] Student Management System 1.0 – 'message' Persistent Cross-Site Scripting (Authenticated)

[webapps] Dental Clinic Appointment Reservation System 1.0 – 'date' UNION based SQL Injection (Authenticated)

[webapps] Dental Clinic Appointment Reservation System 1.0 – Authentication Bypass (SQLi)

[webapps] ZeroShell 3.9.0 – Remote Command Execution

[local] Microsoft Internet Explorer 8/11 and WPAD service 'Jscript.dll' – Use-After-Free

[local] Firefox 72 IonMonkey – JIT Type Confusion

[local] Splinterware System Scheduler Professional 5.30 – Unquoted Service Path

[webapps] Chevereto 3.17.1 – Cross Site Scripting (Stored)