php

日期	标题	类别	作者
2020-08-12	CMS Made Simple 2.2.14 – Authenticated Arbitrary File Upload	webapps	Roel van Beurden
2020-08-11	Fuel CMS 1.4.7 – ‘col’ SQL Injection (Authenticated)	webapps	Roel van Beurden
2020-08-10	Warehouse Inventory System 1.0 – Cross-Site Request Forgery (Change Admin Password)	webapps	boku
2020-08-07	Daily Expenses Management System 1.0 – ‘item’ SQL Injection	webapps	screetsec
2020-08-06	Victor CMS 1.0 – ‘Search’ SQL Injection	webapps	screetsec
2020-08-05	Stock Management System 1.0 – Authentication Bypass	webapps	Adeeb Shah
2020-08-04	Daily Expenses Management System 1.0 – ‘username’ SQL Injection	webapps	Daniel Ortiz
2020-07-30	Online Shopping Alphaware 1.0 – Authentication Bypass	webapps	Ahmed Abbas
2020-07-29	WordPress Plugin Maintenance Mode by SeedProd 5.1.1 – Persistent Cross-Site Scripting	webapps	Jinson Varghese Behanan
2020-07-27	eGroupWare 1.14 – ‘spellchecker.php’ Remote Command Execution	webapps	Berk KIRAS
2020-07-26	Koken CMS 0.22.24 – Arbitrary File Upload (Authenticated)	webapps	V1n1v131r4
2020-07-26	elaniin CMS – Authentication Bypass	webapps	BKpatron
2020-07-26	Online Course Registration 1.0 – Unauthenticated Remote Code Execution	webapps	boku
2020-07-26	LibreHealth 2.0.0 – Authenticated Remote Code Execution	webapps	boku
2020-07-26	PandoraFMS NG747 7.0 – ‘filename’ Persistent Cross-Site Scripting	webapps	Emre ÖVÜNÇ
2020-07-26	WordPress Plugin Email Subscribers & Newsletters 4.2.2 – ‘hash’ SQL Injection (Unauthenticated)	webapps	KBA@SOGETI_ESEC
2020-07-26	WordPress Plugin Email Subscribers & Newsletters 4.2.2 – Unauthenticated File Download	webapps	KBA@SOGETI_ESEC
2020-07-26	GOautodial 4.0 – Persistent Cross-Site Scripting (Authenticated)	webapps	Balzabu
2020-07-26	Virtual Airlines Manager 2.6.2 – Persistent Cross-Site Scripting	webapps	Peter Blue
2020-07-26	pfSense 2.4.4-p3 – Cross-Site Request Forgery	webapps	ghost_fh
2020-07-26	Webtareas 2.1p – Arbitrary File Upload (Authenticated)	webapps	AppleBois
2020-07-26	PandoraFMS 7.0 NG 746 – Persistent Cross-Site Scripting	webapps	AppleBois
2020-07-23	TimeClock Software 1.01 0 – (Authenticated) Time-Based SQL Injection	webapps	François Bibeau
2020-07-22	WordPress Theme NexosReal Estate 1.7 – ‘search_order’ SQL Injection	webapps	Vlad Vector