>> CATEGORY: exploit

FTPShell Client version 5.24 PWD remote buffer overflow exploit.

WordPress MailChimp plugin version 4.0.l7 suffers from cross site request forgery and cross site scripting vulnerabilities.

Red Jasmin version 1.0 suffers from a remote SQL injection vulnerability.

WordPress Huge IT Portfolio Gallery plugin version 2.0.77 suffers from a cross site scripting vulnerability.

WordPress Easy Facebook Like Box plugin version 4.3.0 suffers from cross site request forgery and cross site scripting vulnerabilities.

WordPress Check Email plugin version 0.3 suffers from a cross site scripting vulnerability.

OpManager versions 12100 and 12200 suffer from multiple cross site scripting and denial of service vulnerabilities.

Joomla K2 extension versions 2.5.0 through 2.7.1 suffer from cross site request forgery and remote shell upload vulnerabilities.

WordPress Canvas – Shortcodes plugin version 1.92 suffers from a persistent cross site scripting vulnerability.

WordPress Instagram Feed plugin version 1.4.6.2 suffers from cross site request forgery and cross site scripting vulnerabilities.