Month: September 2016

Z Web Solutions CMS v5.1 – Auth Bypass Web Vulnerability

iDesign CMS v2.7 – SQL Injection Web Vulnerability

KWSPHP CMS v1.6.995 – Persistent Cross Site Vulnerability

Magento Bug Bounty #18 – Persistent Web Vulnerability

IBM BlueMix Cloud – (API) Persistent Web Vulnerability

OpenDocMan v1.3.5 – Full Path Disclosure Vulnerability

Teampass v2.1.26 – Privilege Escalate Vulnerability

Teampass 2.1.26 – Authenticated File Upload Vulnerability

Micron CMS v5.3 – (cat_id) SQL Injection Vulnerability

BMW – (Token) Client Side Cross Site Scripting Vulnerability