Tag: remote exploit

[webapps] CMSUno 1.6.2 – 'lang' Remote Code Execution (Authenticated)

[webapps] SmartBlog 2.0.1 – 'id_post' Blind SQL injection

[webapps] Sentrifugo 3.2 – 'assets' Remote Code Execution (Authenticated)

[webapps] Sentrifugo Version 3.2 – 'announcements' Remote Code Execution (Authenticated)

[webapps] BlogEngine 3.3.8 – 'Content' Stored XSS

[webapps] iDS6 DSSPro Digital Signage System 6.2 – Cross-Site Request Forgery (CSRF)

[webapps] Processwire CMS 2.4.0 – 'download' Local File Inclusion

[webapps] School Log Management System 1.0 – 'username' SQL Injection / Remote Code Execution

[webapps] Student Attendance Management System 1.0 – 'username' SQL Injection / Remote Code Execution

[webapps] Multi Restaurant Table Reservation System 1.0 – 'table_id' Unauthenticated SQL Injection