webapps

日期	标题	类别	作者
2020-12-21	Online Marriage Registration System 1.0 – ‘searchdata’ SQL Injection	webapps	Raffaele Sabato
2020-12-21	Point of Sale System 1.0 – Multiple Stored XSS	webapps	Saeed Bala Ahmed
2020-12-21	Flexmonster Pivot Table & Charts 2.7.17 – ‘Remote JSON’ Reflected XSS	webapps	Marco Nappi
2020-12-21	Flexmonster Pivot Table & Charts 2.7.17 – ‘To remote CSV’ Reflected XSS	webapps	Marco Nappi
2020-12-21	Flexmonster Pivot Table & Charts 2.7.17 – ‘To OLAP’ Reflected XSS	webapps	Marco Nappi
2020-12-21	Flexmonster Pivot Table & Charts 2.7.17 – ‘Remote Report’ Reflected XSS	webapps	Marco Nappi
2020-12-21	SCO Openserver 5.0.7 – ‘outputform’ Command Injection	webapps	Ramikan
2020-12-21	SCO Openserver 5.0.7 – ‘section’ Reflected XSS	webapps	Ramikan
2020-12-21	Spiceworks 7.5 – HTTP Header Injection	webapps	Ramikan
2020-12-21	Academy-LMS 4.3 – Stored XSS	webapps	Vinicius Alves
2020-12-21	Spotweb 1.4.9 – ‘search’ SQL Injection	webapps	BouSalman
2020-12-18	WordPress Plugin Duplicator 1.3.26 – Unauthenticated Arbitrary File Read (Metasploit)	webapps	SunCSR Team
2020-12-18	Alumni Management System 1.0 – ‘id’ SQL Injection	webapps	Aakash Madaan
2020-12-18	Alumni Management System 1.0 – “Course Form” Stored XSS	webapps	Aakash Madaan
2020-12-18	Alumni Management System 1.0 – Unrestricted File Upload To RCE	webapps	Aakash Madaan
2020-12-18	Point of Sale System 1.0 – Authentication Bypass	webapps	Saeed Bala Ahmed
2020-12-18	Xeroneit Library Management System 3.1 – “Add Book Category ” Stored XSS	webapps	Kislay Kumar
2020-12-18	SyncBreeze 10.0.28 – ‘login’ Denial of Service (Poc)	webapps	Ahmed Elkhressy
2020-12-18	Smart Hospital 3.1 – “Add Patient” Stored XSS	webapps	Kislay Kumar
2020-12-17	PHPJabbers Appointment Scheduler 2.3 – Reflected XSS (Cross-Site Scripting)	webapps	Andrea Intilangelo
2020-12-17	Employee Record System 1.0 – Multiple Stored XSS	webapps	Saeed Bala Ahmed
2020-12-17	Interview Management System 1.0 – ‘id’ SQL Injection	webapps	Saeed Bala Ahmed
2020-12-17	Interview Management System 1.0 – Stored XSS in Add New Question	webapps	Saeed Bala Ahmed
2020-12-17	Online Tours & Travels Management System 1.0 – “id” SQL Injection	webapps	Saeed Bala Ahmed