webapps

日期	标题	类别	作者
2019-10-16	Accounts Accounting 7.02 – Persistent Cross-Site Scripting	webapps	Debashis Pal
2019-10-15	Bolt CMS 3.6.10 – Cross-Site Request Forgery	webapps	r3m0t3nu11
2019-10-14	WordPress Core < 5.2.3 - Viewing Unauthenticated/Password/Private Posts	webapps	Sebastian Neef
2019-10-14	Apache Httpd mod_rewrite – Open Redirects	webapps	Sebastian Neef
2019-10-14	Apache Httpd mod_proxy – Error Page Cross-Site Scripting	webapps	Sebastian Neef
2019-10-14	Kirona-DRS 5.5.3.5 – Information Disclosure	webapps	Ramikan
2019-10-14	Ajenti 2.1.31 – Remote Code Execution	webapps	Jeremy Brown
2019-10-14	Express Invoice 7.12 – ‘Customer’ Persistent Cross-Site Scripting	webapps	Debashis Pal
2019-10-11	WordPress Plugin Arforms 3.7.1 – Directory Traversal	webapps	Ahmad Almorabea
2019-10-11	Intelbras Router WRN150 1.0.18 – Persistent Cross-Site Scripting	webapps	Prof. Joas Antonio
2019-10-10	TP-Link TL-WR1043ND 2 – Authentication Bypass	webapps	Uriel Kosayev
2019-10-10	SMA Solar Technology AG Sunny WebBox device – 1.6 – Cross-Site Request Forgery	webapps	Borja Merino
2019-10-08	Zabbix 4.4 – Authentication Bypass	webapps	Todor Donev
2019-10-07	Joomla! 3.4.6 – ‘configuration.php’ Remote Code Execution	webapps	Alessandro Groppo
2019-10-07	vBulletin 5.0 < 5.5.4 - 'updateAvatar' Authenticated Remote Code Execution	webapps	EgiX
2019-10-07	IBM Bigfix Platform 9.5.9.62 – Arbitrary File Upload	webapps	Jakub Palaczynski
2019-10-07	Subrion 4.2.1 – ‘Email’ Persistant Cross-Site Scripting	webapps	Creatigon
2019-10-07	Zabbix 4.2 – Authentication Bypass	webapps	Milad Khoshdel
2019-10-04	LabCollector 5.423 – SQL Injection	webapps	Carlos Avila
2019-10-03	PHP 7.0 < 7.3 (Unix) - 'gc' disable_functions Bypass	webapps	mm0r1
2019-10-03	AnchorCMS < 0.12.3a - Information Disclosure	webapps	Tijme Gommers
2019-10-03	mintinstall 7.9.9 – Code Execution	webapps	İbrahim Hakan Şeker
2019-10-02	Detrix EDMS 1.2.3.1505 – SQL Injection	webapps	Burov Konstantin
2019-10-01	DotNetNuke 9.3.2 – Cross-Site Scripting	webapps	Semen Alexandrovich Lyhin