>> TAG: #remote exploit

CITSmart ITSM 9.1.2.27 – ‘query’ Time-based Blind SQL Injection (Authenticated)

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 – RCE

jQuery 1.2 – Cross-Site Scripting (XSS)

Simple Student Information System 1.0 – SQL Injection (Authentication Bypass)

Blitar Tourism 1.0 – Authentication Bypass SQLi

ExpressVPN VPN Router 1.0 – Router Login Panel’s Integer Overflow

vsftpd 2.3.4 – Backdoor Command Execution

PrestaShop 1.7.6.7 – ‘location’ Blind Sql Injection

CMSimple 5.2 – ‘External’ Stored XSS

DMA Radius Manager 4.4.0 – Cross-Site Request Forgery (CSRF)