webapps

日期	标题	类别	作者
2020-07-26	elaniin CMS – Authentication Bypass	webapps	BKpatron
2020-07-26	Online Course Registration 1.0 – Unauthenticated Remote Code Execution	webapps	boku
2020-07-23	TimeClock Software 1.01 0 – (Authenticated) Time-Based SQL Injection	webapps	François Bibeau
2020-07-23	UBICOD Medivision Digital Signage 1.5.1 – Authorization Bypass	webapps	LiquidWorm
2020-07-22	WordPress Theme NexosReal Estate 1.7 – ‘search_order’ SQL Injection	webapps	Vlad Vector
2020-07-22	Docsify.js 4.11.4 – Reflective Cross-Site Scripting	webapps	Amin Sharifi
2020-07-22	Sophos VPN Web Panel 2020 – Denial of Service (Poc)	webapps	Berk KIRAS
2020-07-17	CMSUno 1.6 – Cross-Site Request Forgery (Change Admin Password)	webapps	Noth
2020-07-16	Wing FTP Server 6.3.8 – Remote Code Execution (Authenticated)	webapps	V1n1v131r4
2020-07-15	Infor Storefront B2B 1.0 – ‘usr_name’ SQL Injection	webapps	ratboy
2020-07-15	Online Farm Management System 0.1.0 – Persistent Cross-Site Scripting	webapps	KeopssGroup0day,Inc
2020-07-15	Web Based Online Hotel Booking System 0.1.0 – Authentication Bypass	webapps	KeopssGroup0day,Inc
2020-07-15	Online Polling System 1.0 – Authentication Bypass	webapps	AppleBois
2020-07-15	Joomla! J2 JOBS 1.3.0 – ‘sortby’ Authenticated SQL Injection	webapps	Mehmet Kelepçe
2020-07-15	Zyxel Armor X1 WAP6806 – Directory Traversal	webapps	Rajivarnan R
2020-07-15	SuperMicro IPMI WebInterface 03.40 – Cross-Site Request Forgery (Add Admin)	webapps	Metin Yunus Kandemir
2020-07-14	Trend Micro Web Security Virtual Appliance 6.5 SP2 Patch 4 Build 1901 – Remote Code Execution (Metasploit)	webapps	Mehmet Ince
2020-07-14	BSA Radar 1.6.7234.24750 – Local File Inclusion	webapps	William Summerhill
2020-07-13	Park Ticketing Management System 1.0 – Authentication Bypass	webapps	gh1mau
2020-07-13	Park Ticketing Management System 1.0 – ‘viewid’ SQL Injection	webapps	gh1mau
2020-07-10	Barangay Management System 1.0 – Authentication Bypass	webapps	BKpatron
2020-07-10	HelloWeb 2.0 – Arbitrary File Download	webapps	bRpsd
2020-07-09	Savsoft Quiz 5 – Persistent Cross-Site Scripting	webapps	th3d1gger
2020-07-09	WordPress Plugin Powie’s WHOIS Domain Check 0.9.31 – Persistent Cross-Site Scripting	webapps	mqt