Small CRM 3.0 – ‘Authentication Bypass’ SQL Injection

from Exploit-DB.com RSS Feed https://ift.tt/3q2BRe1
via IFTTT

Stock Management System 1.0 – ‘user_id’ Blind SQL injection (Authenticated)

from Exploit-DB.com RSS Feed https://ift.tt/3vma9K0
via IFTTT

COVID19 Testing Management System 1.0 – ‘State’ Stored Cross-Site-Scripting (XSS)

from Exploit-DB.com RSS Feed https://ift.tt/35eCqHY
via IFTTT

GLPI 9.4.5 – Remote Code Execution (RCE)

from Exploit-DB.com RSS Feed https://ift.tt/3woFFbB
via IFTTT

Accela Civic Platform 21.1 – ‘contactSeqNumber’ Insecure Direct Object References (IDOR)

from Exploit-DB.com RSS Feed https://ift.tt/3pTR2Gi
via IFTTT

Accela Civic Platform 21.1 – ‘successURL’ Cross-Site-Scripting (XSS)

from Exploit-DB.com RSS Feed https://ift.tt/3gzUbqg
via IFTTT

WoWonder Social Network Platform 3.1 – Authentication Bypass

from Exploit-DB.com RSS Feed https://ift.tt/3czkonX
via IFTTT

Zenario CMS 8.8.52729 – ‘cID’ Blind & Error based SQL injection (Authenticated)

from Exploit-DB.com RSS Feed https://ift.tt/3gcKnDK
via IFTTT

Solar-Log 500 2.8.2 – Unprotected Storage of Credentials

from Exploit-DB.com RSS Feed https://ift.tt/3whI8od
via IFTTT

Solar-Log 500 2.8.2 – Incorrect Access Control

from Exploit-DB.com RSS Feed https://ift.tt/3pGS601
via IFTTT