>> ARCHIVE: 2016-02

Chamilo LMS suffers from a persistent cross site scripting vulnerability.

Adobe’s site suffered from cross site scripting and open redirection vulnerabilities.

An independent vulnerability laboratory researcher discovered a client-side redirect web vulnerability in the official Prezi web-application.

ebay.com suffered from a cross site scripting vulnerability.

Vesta Control Panel versions 0.9.8-15 and below suffer from a persistent cross site scripting vulnerability via the user agent.

Umbraco versions prior to 7.4.0 suffers from server-side request forgery, cross site request forgery, and cross site scripting vulnerabilities.

Comodo Internet Security installs GeekBuddy which installs a weakly secure exposed VNC server.

osCommerce version 2.3.4 suffers from cross site request forgery and local file inclusion vulnerabilities.

osCmax version 2.5.4 suffers from code execution, cross site request forgery, and local file inclusion vulnerabilities.