>> TAG: #remote exploit

GetSimple CMS Custom JS Plugin 0.1 – CSRF to Persistent XSS

Regis Inventory And Monitoring System 1.0 – ‘Item List’ Stored XSS

Moodle 3.10.3 – ‘label’ Persistent Cross Site Scripting

Ovidentia 6 – ‘id’ SQL injection (Authenticated)

Linksys EA7500 2.0.8.194281 – Cross-Site Scripting

Genexis Platinum-4410 P4410-V2-1.31A – ‘start_addr’ Persistent Cross-Site Scripting

Dolibarr ERP/CRM 11.0.4 – File Upload Restrictions Bypass (Authenticated RCE)

Ext2Fsd v0.68 – ‘Ext2Srv’ Unquoted Service Path

MyBB 1.8.25 – Poll Vote Count SQL Injection

Hotel And Lodge Management System 1.0 – ‘Customer Details’ Stored XSS