Tag: remote exploit

[webapps] GetSimple CMS Plugin Multi User 1.8.2 – Cross-Site Request Forgery (Add Admin)

[webapps] vBulletin 5.6.2 – 'widget_tabbedContainer_tab_panel' Remote Code Execution

[webapps] CMS Made Simple 2.2.14 – Authenticated Arbitrary File Upload

[webapps] Fuel CMS 1.4.7 – 'col' SQL Injection (Authenticated)

[webapps] Warehouse Inventory System 1.0 – Cross-Site Request Forgery (Change Admin Password)

[webapps] ManageEngine ADSelfService Build prior to 6003 – Remote Code Execution (Unauthenticated)

[local] BarcodeOCR 19.3.6 – 'BarcodeOCR' Unquoted Service Path

[webapps] All-Dynamics Digital Signage System 2.0.2 – Cross-Site Request Forgery (Add Admin)

[webapps] Daily Expenses Management System 1.0 – 'item' SQL Injection

[webapps] Victor CMS 1.0 – 'Search' SQL Injection