Tag: remote exploit

[webapps] Under Construction Page with CPanel 1.0 – SQL injection

[local] IDT PC Audio 1.0.6433.0 – 'STacSV' Unquoted Service Path

[webapps] Pharmacy Store Management System 1.0 – 'id' SQL Injection

[local] aSc TimeTables 2021.6.2 – Denial of Service (PoC)

[webapps] Artworks Gallery 1.0 – Arbitrary File Upload RCE (Authenticated) via Edit Profile

[webapps] Expense Management System – 'description' Stored Cross Site Scripting

[webapps] Artworks Gallery 1.0 – Arbitrary File Upload RCE (Authenticated)

[webapps] TypeSetter 5.1 – CSRF (Change admin e-mail)

[webapps] Joomla! Component GMapFP 3.5 – Unauthenticated Arbitrary File Upload

[webapps] WordPress Plugin EventON Calendar 3.0.5 – Reflected Cross-Site Scripting