Exploit-DB lists SQL injection in Automotive Shop Management System 1.0
The public web-app entry names version 1.0 only and gives no vendor, CVE, or fix.
Stories per day · 30 days
1 RSS
10 stories, newest first · one card per story
Stories tagged #webapp
[webapps] SuiteCRM 8.10.1 - Authenticated SSRF
Exploit-DB lists an authenticated SSRF exploit against SuiteCRM 8.10.1.
[webapps] InvoicePlane 1.7.1 - RCE
Exploit-DB published a remote code execution exploit for InvoicePlane 1.7.1.
[webapps] TigerGraph_Community_Edition 4.2.4 - arbitrary file write
Exploit-DB lists an arbitrary file-write flaw in TigerGraph Community Edition 4.2.4.
[webapps] Food-Ordering 1.0 - LFI
Exploit-DB publishes a local file inclusion proof-of-concept for Food-Ordering 1.0.
[webapps] Krayin CRM 2.2.4 - IDOR
Exploit-DB published an IDOR exploit for Krayin CRM 2.2.4.
[webapps] POMS oretnom23v1.0 - SQLi vulnerabilities
Exploit-DB published SQL injection exploits for POMS oretnom23 version 1.0.
[webapps] WordPress 7.0.2 - Path Travesal
Exploit-DB publishes a path traversal proof-of-concept against WordPress 7.0.2.
[webapps] Probo 0.222.2 - IDOR
A public proof-of-concept exploit was released for an IDOR vulnerability in web application Probo 0.222.2.
[remote] phpSysInfo 3.4.5 - IP Allowlist Bypass
A published exploit demonstrates an IP allowlist bypass in phpSysInfo 3.4.5, weakening access restrictions.