php

日期	标题	类别	作者
2021-01-05	Online Learning Management System 1.0 – RCE (Authenticated)	webapps	Bedri Sertkaya
2021-01-05	CSZ CMS 1.2.9 – Multiple Cross-Site Scripting	webapps	SunCSR
2021-01-05	Responsive FileManager 9.13.4 – ‘path’ Path Traversal	webapps	Sun* Cyber Security Research Team
2021-01-05	Baby Care System 1.0 – ‘Post title’ Stored XSS	webapps	Hardik Solanki
2021-01-05	Responsive E-Learning System 1.0 – ‘id’ Sql Injection	webapps	Kshitiz Raj
2021-01-04	WordPress Core 5.2.2 – ‘post previews’ XSS	webapps	gx1
2021-01-04	Subrion CMS 4.2.1 – ‘avatar[path]’ XSS	webapps	icekam
2021-01-04	CMS Made Simple 2.2.15 – RCE (Authenticated)	webapps	Andrey Stoykov
2021-01-04	sar2html 3.2.1 – ‘plot’ Remote Code Execution	webapps	Musyoka Ian
2021-01-04	Advanced Comment System 1.0 – ‘ACS_path’ Path Traversal	webapps	Francisco Javier Santiago Vázquez
2021-01-04	Mantis Bug Tracker 2.24.3 – ‘access’ SQL Injection	webapps	EthicalHCOP
2021-01-04	4images v1.7.11 – ‘Profile Image’ Stored Cross-Site Scripting	webapps	Ritesh Gohil
2020-12-24	Apartment Visitors Management System 1.0 – Authentication Bypass	webapps	Kshitiz Raj
2020-12-24	WordPress Plugin Adning Advertising 1.5.5 – Arbitrary File Upload	webapps	spacehen
2020-12-24	WordPress Plugin WP-PostRatings 1.86 – ‘postratings_image’ Cross-Site Scripting	webapps	Park Won Seok
2020-12-23	Baby Care System 1.0 – ‘roleid’ SQL Injection	webapps	Vijay Sachdeva
2020-12-23	Sales and Inventory System for Grocery Store 1.0 – Multiple Stored XSS	webapps	Vijay Sachdeva
2020-12-23	WordPress Epsilon Framework Multiple Themes – Unauthenticated Function Injection	webapps	gx1
2020-12-23	Online Learning Management System 1.0 – ‘id’ SQL Injection	webapps	Aakash Madaan
2020-12-23	Online Learning Management System 1.0 – Multiple Stored XSS	webapps	Aakash Madaan
2020-12-23	Online Learning Management System 1.0 – Authentication Bypass	webapps	Aakash Madaan
2020-12-23	Class Scheduling System 1.0 – Multiple Stored XSS	webapps	Aakash Madaan
2020-12-22	Faculty Evaluation System 1.0 – Stored XSS	webapps	Vijay Sachdeva
2020-12-22	Artworks Gallery Management System 1.0 – ‘id’ SQL Injection	webapps	Vijay Sachdeva