>> CATEGORY: Security

WordPress Plugin Modern Events Calendar V 6.1 – SQL Injection (Unauthenticated)

Oracle WebLogic Server 14.1.1.0.0 – Local File Inclusion

Online Project Time Management System 1.0 – SQLi (Authenticated)

Online Project Time Management System 1.0 – Multiple Stored Cross Site Scripting (XSS) (Authenticated)

PHPIPAM 1.4.4 – SQLi (Authenticated)

Landa Driving School Management System 2.0.1 – Arbitrary File Upload

uDoctorAppointment v2.1.1 – ‘Multiple’ Cross Site Scripting (XSS)

Rocket LMS 1.1 – Persistent Cross Site Scripting (XSS)

Affiliate Pro 1.7 – ‘Multiple’ Cross Site Scripting (XSS)

Archeevo 5.0 – Local File Inclusion