CVE-2018-5969

Cross Site Request Forgery CSRF exists in Photography CMS 1.0 via clients/resources/ajax/ajaxnewadmin.php, as demonstrated by adding an admin account...

Wedding photography system suffers from struts2 remote command execution vulnerability

Wedding Photography System is a website that provides wedding photography services. A struts2 remote command execution vulnerability exists in this product, which can be exploited by an attacker to gain control of the website...