>> TAG: #remote exploit

Selea CarPlateServer (CPS) 4.0.1.6 – Remote Program Execution

CASAP Automated Enrollment System 1.0 – Authentication Bypass

ERPNext 12.14.0 – SQL Injection (Authenticated)

Online Documents Sharing Platform 1.0 – ‘user’ SQL Injection

Apartment Visitors Management System 1.0 – ’email’ SQL Injection

Nagios XI 5.7.5 – Multiple Persistent Cross-Site Scripting

WordPress Plugin Simple Job Board 2.9.3 – Authenticated File Read (Metasploit)

ChurchRota 2.6.4 – RCE (Authenticated)

Oracle Business Intelligence Enterprise Edition 11.1.1.7.140715 – Stored XSS

Voting System 1.0 – File Upload RCE (Authenticated Remote Code Execution)