>> TAG: #remote exploit

Faulty Evaluation System 1.0 – ‘multiple’ Stored Cross-Site Scripting

Billing Management System 2.0 – ’email’ SQL injection Auth Bypass

BlackCat CMS 1.3.6 – ‘Display name’ Cross Site Scripting (XSS)

Online Internship Management System 1.0 – ’email’ SQL injection Auth Bypass

Managed Switch Port Mapping Tool 2.85.2 – Denial of Service (PoC)

AgataSoft PingMaster Pro 2.1 – Denial of Service (PoC)

Nsauditor 3.2.2.0 – ‘Event Description’ Denial of Service (PoC)

TestLink 1.9.20 – Unrestricted File Upload (Authenticated)

Teachers Record Management System 1.0 – ‘searchteacher’ SQL Injection

Tasks 9.7.3 – Insecure Permissions