Tag: remote exploit

[webapps] WordPress Plugin Fitness Calculators 1.9.5 – Cross-Site Request Forgery (CSRF)

[webapps] Police Crime Record Management Project 1.0 – Time Based SQLi

[webapps] Simple Attendance System 1.0 – Unauthenticated Blind SQLi

[webapps] Filerun 2021.03.26 – Remote Code Execution (RCE) (Authenticated)

[webapps] Budget and Expense Tracker System 1.0 – Remote Code Execution (RCE) (Unauthenticated)

[webapps] WebsiteBaker 2.13.0 – Remote Code Execution (RCE) (Authenticated)

[dos] Yenkee Hornet Gaming Mouse – 'GM312Fltr.sys' Denial-Of-Service (PoC)

[webapps] T-Soft E-Commerce 4 – change 'admin credentials' Cross-Site Request Forgery (CSRF)

[webapps] Church Management System 1.0 – 'search' SQL Injection (Unauthenticated)

[webapps] WordPress 5.7 – 'Media Library' XML External Entity Injection (XXE) (Authenticated)