>> TAG: #remote exploit

ECSIMAGING PACS 6.21.5 – SQL injection

CRUD Operation 1.0 – Multiple Stored XSS

dirsearch 0.4.1 – CSV Injection

IPeakCMS 3.5 – Boolean-based blind SQLi

IObit Uninstaller 10 Pro – Unquoted Service Path

WordPress Plugin litespeed cache 3.6 – ‘server_ip’ Cross-Site Scripting

Expense Tracker 1.0 – ‘Expense Name’ Stored Cross-Site Scripting

Responsive E-Learning System 1.0 – Unrestricted File Upload to RCE

Responsive E-Learning System 1.0 – Stored Cross Site Scripting

WordPress Plugin WP24 Domain Check 1.6.2 – ‘fieldnameDomain’ Stored Cross Site Scripting