>> CATEGORY: exploit

chatNow version 0.0.0 suffers from a cross site scripting vulnerability.

SimplePHPQuiz suffers from a remote blind SQL injection vulnerability.

Gnome Eye of Gnome version 3.10.2 suffers from an out-of-bounds write vulnerability.

WordPress Bonkersbeat theme version 1.0, Method theme version 1.8, and Awake theme version 3.2 suffer from an arbitrary file download vulnerability.

VideoIQ Camera suffers from a file disclosure vulnerability.

WordPress Mail Masta plugin version 1.0 suffers from a local file inclusion vulnerability.

phpCollab CMS version 2.5 suffers from a cross site request forgery vulnerability.

AVS Audio Converter version 8.2.1 suffers from a buffer overflow vulnerability.

ISPconfig version 3.0.5.4 p6 suffers from a cross site scripting vulnerability. It also leaks exception information.

ObiHai ObiPhone 1032/1062 with firmware less than 5-0-0-3497 suffers from buffer overflow, cross site scripting, cross site request forgery, command injection, denial of service, and various other vulnerabilities.