webapps

日期	标题	类别	作者
2019-09-24	Pfsense 2.3.4 / 2.4.4-p3 – Remote Code Injection	webapps	Nassim Asrir
2019-09-23	vBulletin 5.0 < 5.5.4 - 'widget_php ' Unauthenticated Remote Code Execution	webapps	anonymous
2019-09-23	Gila CMS < 1.11.1 - Local File Inclusion	webapps	Sainadh Jamalpur
2019-09-20	LayerBB < 1.1.4 - Cross-Site Request Forgery	webapps	0xB9
2019-09-19	GOautodial 4.0 – ‘CreateEvent’ Persistent Cross-Site Scripting	webapps	cakes
2019-09-19	DIGIT CENTRIS 4 ERP – ‘datum1’ SQL Injection	webapps	n1x_
2019-09-19	Western Digital My Book World II NAS 1.02.12 – Authentication Bypass / Command Execution	webapps	Noman Riffat
2019-09-18	Hospital-Management 1.26 – ‘fname’ SQL Injection	webapps	cakes
2019-09-16	CollegeManagementSystem-CMS 1.3 – ‘batch’ SQL Injection	webapps	cakes
2019-09-16	Symantec Advanced Secure Gateway (ASG) / ProxySG – Unrestricted File Upload	webapps	Pankaj Kumar Thakur
2019-09-16	NetGain EM Plus 10.1.68 – Remote Command Execution	webapps	azams
2019-09-14	College-Management-System 1.2 – Authentication Bypass	webapps	cakes
2019-09-14	Ticket-Booking 1.4 – Authentication Bypass	webapps	cakes
2019-09-13	LimeSurvey 3.17.13 – Cross-Site Scripting	webapps	SEC Consult
2019-09-13	phpMyAdmin 4.9.0.1 – Cross-Site Request Forgery	webapps	Manuel García Cárdenas
2019-09-13	Dolibarr ERP-CRM 10.0.1 – ‘User-Agent’ Cross-Site Scripting	webapps	Metin Yunus Kandemir
2019-09-11	eWON Flexy – Authentication Bypass	webapps	Photubias
2019-09-11	AVCON6 systems management platform – OGNL Remote Command Execution	webapps	Nassim Asrir
2019-09-10	WordPress Plugin Photo Gallery 1.5.34 – Cross-Site Scripting (2)	webapps	MTK
2019-09-10	WordPress Plugin Photo Gallery 1.5.34 – Cross-Site Scripting	webapps	MTK
2019-09-10	WordPress Plugin Photo Gallery 1.5.34 – SQL Injection	webapps	MTK
2019-09-09	Online Appointment – SQL Injection	webapps	mohammad zaheri
2019-09-09	Enigma NMS 65.0.0 – SQL Injection	webapps	xerubus
2019-09-09	Enigma NMS 65.0.0 – OS Command Injection	webapps	xerubus