China Banking and Insurance Information Technology Management Co. - Security Researcher

CVE-2020-23069 EXPLOITDB MEDIUM text WORKING POC

webTareas 2.0 - Path Traversal

Path Traversal vulneraility exists in webTareas 2.0 via the extpath parameter in general_serv.php, which could let a malicious user read arbitrary files.

CVSS 6.5

View Code

CVE-2020-28146 EXPLOITDB MEDIUM text WORKING POC

Eyoucms < 1.4.7 - XSS

Cross Site Scripting (XSS) vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter.

CVSS 6.1

View Code

EIP-2026-109052 EXPLOITDB text WORKING POC

Kuicms PHP EE 2.0 - Persistent Cross-Site Scripting

View Code