webapps

日期	标题	类别	作者
2020-06-05	Online-Exam-System 2015 – ‘feedback’ SQL Injection	webapps	Gus Ralph
2020-06-05	Online Course Registration 1.0 – Authentication Bypass	webapps	BKpatron
2020-06-04	Cayin Content Management Server 11.0 – Remote Command Injection (root)	webapps	LiquidWorm
2020-06-04	Online Marriage Registration System 1.0 – Remote Code Execution (1)	webapps	Enesdex
2020-06-04	D-Link DIR-615 T1 20.10 – CAPTCHA Bypass	webapps	huzaifa hussain
2020-06-04	Navigate CMS 2.8.7 – Authenticated Directory Traversal	webapps	Gus Ralph
2020-06-04	VMWAre vCloud Director 9.7.0.15498291 – Remote Code Execution	webapps	Tomas Melicher
2020-06-04	Navigate CMS 2.8.7 – Cross-Site Request Forgery (Add Admin)	webapps	Gus Ralph
2020-06-04	Clinic Management System 1.0 – Authenticated Arbitrary File Upload	webapps	BKpatron
2020-06-04	Oriol Espinal CMS 1.0 – ‘id’ SQL Injection	webapps	TSAR
2020-06-04	Navigate CMS 2.8.7 – ”sidx’ SQL Injection (Authenticated)	webapps	Gus Ralph
2020-06-04	Clinic Management System 1.0 – Unauthenticated Remote Code Execution	webapps	BKpatron
2020-06-04	Hostel Management System 2.0 – ‘id’ SQL Injection (Unauthenticated)	webapps	Enesdex
2020-06-04	AirControl 1.4.2 – PreAuth Remote Code Execution	webapps	0xd0ff9
2020-06-04	Cayin Digital Signage System xPost 2.5 – Remote Command Injection	webapps	LiquidWorm
2020-06-04	Cayin Signage Media Player 3.0 – Remote Command Injection (root)	webapps	LiquidWorm
2020-06-04	Secure Computing SnapGear Management Console SG560 3.1.5 – Arbitrary File Read	webapps	LiquidWorm
2020-06-04	SnapGear Management Console SG560 3.1.5 – Cross-Site Request Forgery (Add Super User)	webapps	LiquidWorm
2020-06-02	OpenCart 3.0.3.2 – Stored Cross Site Scripting (Authenticated)	webapps	Kailash Bohara
2020-06-02	Clinic Management System 1.0 – Authentication Bypass	webapps	BKpatron
2020-06-01	QuickBox Pro 2.1.8 – Authenticated Remote Code Execution	webapps	s1gh
2020-06-01	VMware vCenter Server 6.7 – Authentication Bypass	webapps	Photubias
2020-06-01	WordPress Plugin BBPress 2.5 – Unauthenticated Privilege Escalation	webapps	Raphael Karger
2020-05-29	Crystal Shard http-protection 0.2.0 – IP Spoofing Bypass	webapps	Halis Duraki