>> CATEGORY: exploit

Zechat version 1.5 suffers from a remote SQL injection vulnerability.

Joomla! Jimtawl component version 2.2.7 suffers from a remote SQL injection vulnerability.

Photo Nettoyeur version 1.4.5 suffers from an insecure file permission vulnerability.

LayerBB Forum version 1.1.1 suffers from a remote SQL injection vulnerability.

NICO-FTP version 3.0.1.19 suffers from a buffer overflow vulnerability.

virtualenv version 16.0.0 suffers from a sandbox escape vulnerability.

WordPress Pie Register plugin version 3.0.15 suffers from a cross site scripting vulnerability.

ISPConfig versions prior to 3.1.13 remote command execution exploit.

D-Link Central WiFiManager Software Controller suffers from hard-coded credential, code execution, and cross site scripting vulnerabilities. Version 1.03 is affected.

OPAC EasyWeb Five version 5.7 suffers from a remote SQL injection vulnerability in the biblio input.