>> TAG: #remote exploit

CraftCMS 3 vCard Plugin 1.0.0 – Remote Code Execution

qdPM 9.1 – ‘cfg[app_app_name]’ Persistent Cross-Site Scripting

Victor CMS 1.0 – ‘cat_id’ SQL Injection

php-fusion 9.03.50 – ‘ctype’ SQL Injection

Submitty 20.04.01 – Persistent Cross-Site Scripting

NukeViet VMS 4.4.00 – Cross-Site Request Forgery (Change Admin Password)

Victor CMS 1.0 – ‘comment_author’ Persistent Cross-Site Scripting

Victor CMS 1.0 – Authenticated Arbitrary File Upload

Pi-Hole – heisenbergCompensator Blocklist OS Command Execution (Metasploit)

Online Examination System 1.0 – ‘eid’ SQL Injection