>> TAG: #remote exploit

Bludit 3.9.2 – Directory Traversal

WordPress Plugin Email Subscribers & Newsletters 4.2.2 – ‘hash’ SQL Injection (Unauthenticated)

Online Course Registration 1.0 – Unauthenticated Remote Code Execution

LibreHealth 2.0.0 – Authenticated Remote Code Execution

elaniin CMS – Authentication Bypass

Koken CMS 0.22.24 – Arbitrary File Upload (Authenticated)

PandoraFMS 7.0 NG 746 – Persistent Cross-Site Scripting

Port Forwarding Wizard 4.8.0 – Buffer Overflow (SEH)

UBICOD Medivision Digital Signage 1.5.1 – Cross-Site Request Forgery (Add Admin)

Webtareas 2.1p – Arbitrary File Upload (Authenticated)