https://egsec.net/ Emil Gallajov (egsec) - penetration tester and application security researcher. en Sun, 26 Jul 2026 00:00:00 GMT https://egsec.net/codeastro-hms-stored-xss/ https://egsec.net/codeastro-hms-stored-xss/ Sun, 26 Jul 2026 00:00:00 GMT Several admin and doctor endpoints write unvalidated POST input straight to the database and render it back, giving stored XSS across the panel. appsec web php zero-day https://egsec.net/codeastro-hms-rce/ https://egsec.net/codeastro-hms-rce/ Sun, 26 Jul 2026 00:00:00 GMT The upload at /his_doc_update-account.php never checks what it is given, so a .php file lands in the webroot and runs. appsec web php zero-day https://egsec.net/codeastro-real-estate-sqli/ https://egsec.net/codeastro-real-estate-sqli/ Sun, 26 Jul 2026 00:00:00 GMT The id parameter on aboutedit.php is concatenated into an UPDATE statement with no sanitisation, letting an authenticated admin rewrite the query. appsec web php zero-day https://egsec.net/codeastro-real-estate-rce/ https://egsec.net/codeastro-real-estate-rce/ Sun, 26 Jul 2026 00:00:00 GMT Both aboutadd.php and aboutedit.php accept uploads without validating type or content, so a PHP reverse shell disguised as an image gives remote code execution. CVE-2024-10999 and CVE-2024-11000. appsec web php zero-day https://egsec.net/content-management-system-sqli/ https://egsec.net/content-management-system-sqli/ Sun, 26 Jul 2026 00:00:00 GMT The login form in index.php drops the username straight into an SQL query, so a payload as simple as ' OR sleep(10)# is enough to confirm injection. appsec web php zero-day