>> ARCHIVE: 2017-11

Nice PHP FAQ Script suffers from a remote SQL injection vulnerability.

Fake Magazine Cover Script suffers from a remote SQL injection vulnerability.

CPA Lead Reward Script suffers from a remote SQL injection vulnerability.

Basic B2B Script suffers from a remote SQL injection vulnerability.

Creative Management System CMS Lite version 1.4 suffers from a remote SQL injection vulnerability.

MyMagazine Magazine and Blog CMS version 1.0 suffers from a remote SQL injection vulnerability.

News Magazine and Blog CMS version 1.0 suffers from a remote SQL injection vulnerability.

The ZyXEL PK5001Z modem has a hardcoded backdoor admin account that allows escalation to root.

OctoberCMS version 1.0.426 (Build 426) suffers from a cross site request forgery vulnerability.

Ingenious School Management System version 2.3.0 suffers from a remote SQL injection vulnerability.