Control Web Panel versions prior to 0.9.8.1147 are vulnerable to unauthenticated OS command injection. Successful exploitation results in code execution as the root user. The results of the command are…

PHPJabbers Property Listing Script version 3.1 suffers from a cross site scripting vulnerability.

PHPJabbers Property Listing Script version 3.1 suffers from a remote SQL injection vulnerability.

PHPJabbers Travel Tours Script version 1.0 suffers from a cross site scripting vulnerability.

PHPJabbers Travel Tours Script version 1.0 suffers from a remote SQL injection vulnerability.

PHPJabbers Event Ticketing System Script version 1.0 suffers from a cross site scripting vulnerability.

Zstore version 6.6.0 suffers from a cross site scripting vulnerability.

PHPJabbers Car Park Booking System version 2.0 suffers from a cross site scripting vulnerability.

This paper goes over common components of broadcast systems, how hackers take advantage of them, and discusses some of the vulnerabilities discovered.