#Multiple,webapps,
-
Apache Superset 1.1.0 - Time-Based Account Enumeration
-
Simple Traffic Offense System 1.0 - Stored Cross Site Scripting (XSS)
-
Vianeos OctoPUS 5 - 'login_user' SQLi
-
perfexcrm 1.10 - 'State' Stored Cross-site scripting (XSS)
-
Wyomind Help Desk 1.3.6 - Remote Code Execution (RCE)
-
Oracle Fatwire 6.3 - Multiple Vulnerabilities
-
GFI Mail Archiver 15.1 - Telerik UI Component Arbitrary File Upload (Unauthenticated)
-
ProcessMaker 3.5.4 - Local File inclusion
-
CyberPanel 2.1 - Remote Code Execution (RCE) (Authenticated)
-
ZesleCP 3.1.9 - Remote Code Execution (RCE) (Authenticated)
-
WPanel 4.3.1 - Remote Code Execution (RCE) (Authenticated)
-
Strapi CMS 3.0.0-beta.17.4 - Remote Code Execution (RCE) (Unauthenticated)
-
Antminer Monitor 0.5.0 - Authentication Bypass
-
T-Soft E-Commerce 4 - change 'admin credentials' Cross-Site Request Forgery (CSRF)
-
Open Game Panel - Remote Code Execution (RCE) (Authenticated)
-
Odine Solutions GateKeeper 1.0 - 'trafficCycle' SQL Injection
-
Logitech Media Server 8.2.0 - 'Title' Cross-Site Scripting (XSS)
-
i3 International Annexxus Cameras Ax-n 5.2.0 - Application Logic Flaw
-
Codiad 2.8.4 - Remote Code Execution (Authenticated) (4)
-
Isshue Shopping Cart 3.5 - 'Title' Cross Site Scripting (XSS)