>> TAG: #remote exploit

Vianeos OctoPUS 5 – ‘login_user’ SQLi

Online Voting System 1.0 – Remote Code Execution (Authenticated)

Online Voting System 1.0 – Authentication Bypass (SQLi)

WordPress Plugin XCloner 4.2.12 – Remote Code Execution (Authenticated)

Doctors Patients Management System 1.0 – SQL Injection (Authentication Bypass)

Apache Superset 1.1.0 – Time-Based Account Enumeration

Simple Traffic Offense System 1.0 – Stored Cross Site Scripting (XSS)

phpAbook 0.9i – SQL Injection

ES File Explorer 4.1.9.7.4 – Arbitrary File Read

Netgear WNAP320 2.0.3 – ‘macAddress’ Remote Code Execution (RCE) (Unauthenticated)