>> CATEGORY: Security

Park Ticketing Management System 1.0 – ‘viewid’ SQL Injection

HelloWeb 2.0 – Arbitrary File Download

Barangay Management System 1.0 – Authentication Bypass

Aruba ClearPass Policy Manager 6.7.0 – Unauthenticated Remote Command Execution

FrootVPN 4.8 – ‘frootvpn’ Unquoted Service Path

WordPress Plugin Powie’s WHOIS Domain Check 0.9.31 – Persistent Cross-Site Scripting

Savsoft Quiz 5 – Persistent Cross-Site Scripting

SuperMicro IPMI 03.40 – Cross-Site Request Forgery (Add Admin)

BSA Radar 1.6.7234.24750 – Cross-Site Request Forgery (Change Password)

Online Shopping Portal 3.1 – ’email’ SQL Injection