>> ARCHIVE: 2017-01

cPanel suffers from cross domain scripting, user enumeration, and information disclosure vulnerabilities.

Mozilla Firefox versions prior to 50.1.0 use-after proof of concept exploit.

Roxy Fileman version 1.4.5 suffers from a cross site scripting vulnerability.

SapLPD version 7.4.0 suffers from a denial of service vulnerability.

Zeroshell versions 3.6.0 and 3.7.0 suffer from an unauthenticated remote code execution vulnerability.

aSc Timetables 2017 suffers from buffer overflow and code execution vulnerabilities.

School Management Software version 2.75 suffers from a remote SQL injection vulnerability.

iTechscripts Freelancer Script version 5.11 suffers from a remote SQL injection vulnerability in the sk parameter.

Zimbra versions prior to 8.7 suffer from cross site request forgery vulnerabilities in the administrative interface.

Online Food Delivery version 2.04 suffers from a remote SQL injection vulnerability that allows for authentication bypass.