>> CATEGORY: Security

Simple Traffic Offense System 1.0 – Stored Cross Site Scripting (XSS)

phpAbook 0.9i – SQL Injection

ES File Explorer 4.1.9.7.4 – Arbitrary File Read

Netgear WNAP320 2.0.3 – ‘macAddress’ Remote Code Execution (RCE) (Unauthenticated)

SAS Environment Manager 2.5 – ‘name’ Stored Cross-Site Scripting (XSS)

Atlassian Jira Server/Data Center 8.16.0 – Reflected Cross-Site Scripting (XSS)

WordPress Plugin YOP Polls 6.2.7 – Stored Cross Site Scripting (XSS)

Lightweight facebook-styled blog 1.3 – Remote Code Execution (RCE) (Authenticated) (Metasploit)

Simple Client Management System 1.0 – ‘uemail’ SQL Injection (Unauthenticated)

Seeddms 5.1.10 – Remote Command Execution (RCE) (Authenticated)