webapps

PHP Coupon Script 6.0 – ‘cid’ SQL Injection

# # # # #

Affiliate Niche Script 3.4.0 – SQL Injection

# # # # #

PHP Classifieds Script 5.6.2 – SQL Injection

# # # # #

Joomla! Component Sponsor Wall 8.0 – SQL Injection

# # # # #

Joomla! Component Flip Wall 8.0 – ‘wallid’ SQL Injection

# # # # #

Apache2Triad 1.5.4 – Multiple Vulnerabilities

[+] Credits: John Page AKA hyp3rlinx

ZKTime Web Software 2.0 – Improper Access Restrictions

Exploit Title: ZKTime Web Software 2.0 - Broken Authentication

ZKTime Web Software 2.0 – Cross-Site Request Forgery

Exploit Title: ZKTime Web Software 2.0 - Cross Site Request Forgery

Symantec Messaging Gateway 10.6.3-2 – Root Remote Command Execution

This is an advisory for CVE-2017-6327 which is an unauthenticated remote

QuantaStor Software Defined Storage < 4.3.1 - Multiple Vulnerabilities

1. --- Advisory details ---

iTech Movie Script 7.51 – SQL Injection

# # # # #

iTech Job Script 9.27 – SQL Injection

# # # # #

iTech Dating Script 3.40 – SQL Injection

# # # # #

iTech Multi Vendor Script 6.63 – SQL Injection

# # # # #

iTech Travel Script 9.49 – SQL Injection

# # # # #

iTech Freelancer Script 5.27 – SQL Injection

# # # # #

iTech Image Sharing Script 4.13 – SQL Injection

# # # # #

iTech Classifieds Script 7.41 – SQL Injection

# # # # #

iTech Caregiver Script 2.71 – SQL Injection

# # # # #

iTech Business Networking Script 8.26 – SQL Injection

# # # # #

iTech B2B Script 4.42 – SQL Injection

# # # # #

DeWorkshop 1.0 – Arbitrary File Upload

# # # # #

Joomla! Component SP Movie Database 1.3 – SQL Injection

# # # # #

Joomla! Component Calendar Planner 1.0.1 – SQL Injection

# # # # #

Joomla! Component Zap Calendar Lite 4.3.4 – SQL Injection

# # # # #

SOA School Management 3.0 – SQL Injection

# # # # #

eCardMAX 10.5 – SQL Injection

# # # # #

Joomla! Component KissGallery 1.0.0 – SQL Injection

# # # # #

Joomla! Component Twitch Tv 1.1 – SQL Injection

# # # # #

Joomla! Component Appointment 1.1 – SQL Injection

# # # # #

LiveProjects 1.0 – SQL Injection

# # # # #

LiveSales 1.0 – SQL Injection

# # # # #

LiveInvoices 1.0 – SQL Injection

# # # # #

LiveSupport 1.0 – SQL Injection

# # # # #

LiveCRM 1.0 – SQL Injection

# # # # #

Matrimony Script 2.7 – SQL Injection

# # # # #

Food Ordering Script 1.0 – SQL Injection

# # # # #

Doctor Patient Project 1.0 – SQL Injection

# # # # #

Photogallery Project 1.0 – SQL Injection

# # # # #

Online Quiz Project 1.0 – SQL Injection

# # # # #

RPi Cam Control < 6.3.14 - Multiple Vulnerabilities

#####

AdvanDate iCupid Dating Software 12.2 – SQL Injection

# # # # #

ClipBucket 2.8.3 – Multiple Vulnerabilities

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

Quali CloudShell 7.1.0.6508 (Patch 6) – Persistent Cross-Site Scripting

# Vulnerability type: Multiple Stored Cross Site Scripting

RPi Cam Control < 6.3.14 - Remote Command Execution

#####

AirMaster 3000M – Multiple Vulnerabilities

RealTime RWR-3G-100 Router – Cross-Site Request Forgery (Change Admin Password)

De-Tutor 1.0 – SQL Injection

# # # # #

De-Journal 1.0 – SQL Injection

# # # # #

DeWorkshop 1.0 – SQL Injection

# # # # #