webapps

日期	标题	类别	作者
2017-10-12	E-Sic Software livre CMS – ‘f’ SQL Injection	webapps	Elber Tavares
2017-10-12	E-Sic Software livre CMS – ‘cpfcnpj’ SQL Injection	webapps	Elber Tavares
2017-10-12	E-Sic Software livre CMS – Autentication Bypass	webapps	Elber Tavares
2017-10-12	E-Sic Software livre CMS – ‘q’ SQL Injection	webapps	Guilherme Assmann
2017-10-12	OctoberCMS 1.0.425 (Build 425) – Cross-Site Scripting	webapps	Ishaq Mohammed
2017-10-11	Trend Micro Data Loss Prevention Virtual Appliance 5.2 – Path Traversal	webapps	Leonardo Duarte
2017-10-11	Trend Micro InterScan Messaging Security (Virtual Appliance) – ‘Proxy.php’ Remote Code Execution (Metasploit)	webapps	Mehmet Ince
2017-10-11	Trend Micro OfficeScan 11.0/XG (12.0) – Remote Code Execution (Metasploit)	webapps	Mehmet Ince
2017-10-10	Complain Management System – Hard-Coded Credentials / Blind SQL injection	webapps	havysec
2017-10-09	PHP Melody 2.7.3 – Multiple Vulnerabilities	webapps	SecuriTeam
2017-10-09	ClipShare 7.0 – SQL Injection	webapps	8bitsec
2017-10-09	Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution (2)	webapps	intx0x80
2017-10-09	QNAP HelpDesk < 1.1.12 - SQL Injection	webapps	SecuriTeam
2017-10-04	ClipBucket 2.8.3 – Remote Code Execution	webapps	Meisam Monsef
2017-10-03	EPESI 1.8.2 rev20170830 – Cross-Site Scripting	webapps	Zeeshan Shaikh
2017-10-03	Fiberhome AN5506-04-F – Command Injection	webapps	Tauco
2017-10-02	OpenText Document Sciences xPression 4.5SP1 Patch 13 – ‘documentId’ SQL Injection	webapps	Marcin Woloszyn
2017-10-02	OpenText Document Sciences xPression 4.5SP1 Patch 13 – ‘jobRunId’ SQL Injection	webapps	Marcin Woloszyn
2017-10-02	phpCollab 2.5.1 – SQL Injection	webapps	Sysdream
2017-10-02	phpCollab 2.5.1 – Arbitrary File Upload	webapps	Sysdream
2017-10-02	NPM-V (Network Power Manager) 2.4.1 – Password Reset	webapps	Saeed reza Zamanian
2017-09-29	ConverTo Video Downloader & Converter 1.4.1 – Arbitrary File Download	webapps	Ihsan Sencan
2017-09-29	WordPress Plugin WPHRM – SQL Injection	webapps	Ihsan Sencan
2017-09-29	FileRun < 2017.09.18 - SQL Injection	webapps	SPARC