>> TAG: #remote exploit

Simple Client Management System 1.0 – ‘multiple’ Stored Cross-Site Scripting (XSS)

Money Transfer Management System 1.0 – Authentication Bypass

Froxlor 0.10.29.1 – SQL Injection (Authenticated)

WordPress Plugin Backup and Restore 1.0.3 – Arbitrary File Deletion

Simple Client Management System 1.0 – SQLi (Authentication Bypass)

zlog 1.2.15 – Buffer Overflow

FusionPBX 4.5.29 – Remote Code Execution (RCE) (Authenticated)

10-Strike Network Inventory Explorer Pro 9.31 – ‘srvInventoryWebServer’ Unquoted Service Path

Payment Terminal 3.1 – ‘Multiple’ Cross-Site Scripting (XSS)

Opencart 3 Extension TMD Vendor System – Blind SQL Injection