Tag: remote exploit

[webapps] Moodle 3.9 – Remote Code Execution (RCE) (Authenticated)

[webapps] CMSuno 1.7 – 'tgo' Stored Cross-Site Scripting (XSS) (Authenticated)

[webapps] GFI Mail Archiver 15.1 – Telerik UI Component Arbitrary File Upload (Unauthenticated)

[webapps] Client Management System 1.1 – 'cname' Stored Cross-site scripting (XSS)

[webapps] WordPress Plugin WP Customize Login 1.1 – 'Change Logo Title' Stored Cross-Site Scripting (XSS)

[webapps] qdPM 9.1 – Remote Code Execution (RCE) (Authenticated)

[webapps] qdPM 9.2 – DB Connection String and Password Exposure (Unauthenticated)

[webapps] ApacheOfBiz 17.12.01 – Remote Command Execution (RCE) via Unsafe Deserialization of XMLRPC arguments

[webapps] Hotel Management System 1.0 – Cross-Site Scripting (XSS) Arbitrary File Upload Remote Code Execution (RCE)

[webapps] Men Salon Management System 1.0 – SQL Injection Authentication Bypass