>> CATEGORY: Security

FusionPBX 4.5.29 – Remote Code Execution (RCE) (Authenticated)

10-Strike Network Inventory Explorer Pro 9.31 – ‘srvInventoryWebServer’ Unquoted Service Path

Payment Terminal 3.1 – ‘Multiple’ Cross-Site Scripting (XSS)

Opencart 3 Extension TMD Vendor System – Blind SQL Injection

Opencart 3 Extension TMD Vendor System – Blind SQL Injection

PHPJabbers Simple CMS 5 – ‘name’ Persistent Cross-Site Scripting (XSS)

WordPress Plugin Hotel Listing 3 – ‘Multiple’ Cross-Site Scripting (XSS)

Fuel CMS 1.4.1 – Remote Code Execution (3)

Simplephpscripts Simple CMS 2.1 – ‘Multiple’ Stored Cross-Site Scripting (XSS)

Simplephpscripts Simple CMS 2.1 – ‘Multiple’ SQL Injection