>> TAG: #remote exploit

Employee Record Management System 1.2 – ’empid’ SQL injection (Unauthenticated)

Umbraco v8.14.1 – ‘baseUrl’ SSRF

Umbraco v8.14.1 – ‘baseUrl’ SSRF

WebCTRL OEM 6.5 – ‘locale’ Reflected Cross-Site Scripting (XSS)

Movable Type 7 r.5002 – XMLRPC API OS Command Injection (Metasploit)

Mini-XML 3.2 – Heap Overflow

Movable Type 7 r.5002 – XMLRPC API OS Command Injection (Metasploit)

WordPress Plugin Supsystic Contact Form 1.7.18 – ‘label’ Stored Cross-Site Scripting (XSS)

PHPGurukul Hostel Management System 2.1 – Cross-site request forgery (CSRF) to Cross-site Scripting (XSS)

WordPress Plugin Supsystic Contact Form 1.7.18 – ‘label’ Stored Cross-Site Scripting (XSS)