>> CATEGORY: exploit

Core FTP Le version 2.2 suffers from a remote buffer overflow vulnerability.

Clinic Management System suffers from an unauthenticated remote blind SQL injection vulnerability.

Beauty Parlour and SPA Saloon Management System suffers from an unauthenticated blind remote SQL injection vulnerability.

This Metasploit module exploits three separate vulnerabilities found in the Riverbed SteelCentral NetProfiler/NetExpress virtual appliances to obtain remote command execution as the root user. A SQL injection in the login…

Bug Tracker version 2.7.1 suffers from a database name and credential disclosure vulnerability.

WordPress All In One SEO Pack plugin version 2.3.6.1 suffers from a persistent cross site scripting vulnerability.

Tiki Wiki CMS version 15.0 suffers from an arbitrary file download vulnerability.

WordPress Activity Log plugin version 2.3.1 suffers from a cross site scripting vulnerability.

WordPress Live Chat Support plugin version 6.2.00 suffers from a persistent cross site scripting vulnerability.

Apache Archiva version 1.3.9 suffers from a cross site request forgery vulnerability.