Tag: remote exploit

[webapps] osTicket 1.14.2 – SSRF

[webapps] Life Insurance Management System 1.0 – 'client_id' SQL Injection

[webapps] Cisco UCS Manager 2.2(1d) – Remote Command Execution

[webapps] Xwiki CMS 12.10.2 – Cross Site Scripting (XSS)

[webapps] Inteno IOPSYS 3.16.4 – root filesystem access via sambashare (Authenticated)

[webapps] Life Insurance Management System 1.0 – File Upload RCE (Authenticated)

[webapps] PHP-Fusion CMS 9.03.90 – Cross-Site Request Forgery (Delete admin shoutbox message)

[webapps] Online Hotel Reservation System 1.0 – Cross-site request forgery (CSRF)

[webapps] WordPress Plugin Easy Contact Form 1.1.7 – 'Name' Stored Cross-Site Scripting (XSS)

[webapps] Online Hotel Reservation System 1.0 – 'description' Stored Cross-site Scripting