>> ARCHIVE: 2018-06

This Metasploit module exploits a vulnerability in WebKitFaviconDatabase when pageURL is unset. If successful, it could lead to application crash, resulting in denial of service.

Schools Alert Management Script suffers from an arbitrary file real vulnerability.

Schools Alert Management Script suffers from a remote SQL injection vulnerability.

WordPress Pie Register plugin versions prior to 3.0.9 suffer from a remote blind SQL injection vulnerability.

The Event Manager PHP Script admin panel suffers from a remote SQL injection vulnerability in events_new.php.

Joomla Ek Rishta component version 2.10 suffers from a remote SQL injection vulnerability.

Schools Alert Management Script suffers from an arbitrary file deletion vulnerability.

userSpice version 4.3.24 suffers from an X-Forwarded-For cross site scripting vulnerability.

userSpice version 4.3.24 suffers from a username enumeration vulnerability.

Splunk versions 6.2.3 through 7.0.1 suffer from an information disclosure vulnerability.