>> TAG: #remote exploit

Online Book Store 1.0 – ‘id’ SQL Injection

Fuel CMS 1.4.8 – ‘fuel_replace_id’ SQL Injection (Authenticated)

BlazeDVD 7.0 Professional – ‘.plf’ Local Buffer Overflow (SEH,ASLR,DEP)

Mara CMS 7.5 – Reflective Cross-Site Scripting

CMS Made Simple 2.2.14 – Arbitrary File Upload (Authenticated)

Online Shopping Alphaware 1.0 – ‘id’ SQL Injection

Nagios Log Server 2.1.6 – Persistent Cross-Site Scripting

SymphonyCMS 3.0.0 – Persistent Cross-Site Scripting

Eibiz i-Media Server Digital Signage 3.8.0 – Privilege Escalation

Mida eFramework 2.9.0 – Remote Code Execution