>> TAG: #remote exploit

OpenCart 3.0.3.6 – ‘subject’ Stored Cross-Site Scripting

Boxoft Audio Converter 2.3.0 – ‘.wav’ Buffer Overflow (SEH)

VTiger v7.0 CRM – ‘To’ Persistent XSS

WonderCMS 3.1.3 – ‘content’ Persistent Cross-Site Scripting

Zortam Mp3 Media Studio 27.60 – Remote Code Execution (SEH)

PESCMS TEAM 2.3.2 – Multiple Reflected XSS

M/Monit 3.7.4 – Privilege Escalation

Fortinet FortiOS 6.0.4 – Unauthenticated SSL VPN User Password Modification

xuucms 3 – ‘keywords’ SQL Injection

Gitlab 12.9.0 – Arbitrary File Read (Authenticated)