>> ARCHIVE: 2015-12

dotCMS 3.2.4 – Multiple Vulnerabilities

OpenMRS 2.3 (1.11.4) – XML External Entity (XXE) Processing Exploit

PHP Utility Belt – Remote Code Execution

OpenMRS 2.3 (1.11.4) – Multiple Cross-Site Scripting Vulnerabilities

WordPress Polls Widget Plugin 1.0.7 – SQL Injection Vulnerability

phpFileManager 0.9.8 Remote Code Execution

iniNet SpiderControl SCADA Web Server Service 2.02 – Insecure File Permissions

OpenMRS 2.3 (1.11.4) – Expression Language Injection Vulnerability

iniNet SpiderControl PLC Editor Simatic 6.30.04 – Insecure File Permissions

Atlassian HipChat for Jira Plugin Velocity Template Injection