This Metasploit module exploits the command injection vulnerability of MailCleaner Community Edition product. An authenticated user can execute an operating system command under the context of the web server user…

MyBB OUGC Awards plugin version 1.8.3 suffers from a cross site scripting vulnerability.

Webgalamb suffers from remote code execution, cross site request forgery, cross site scripting, information leakage, and remote SQL injection vulnerabilities.

Base Soundtouch iOS application version 18.1.4 suffers from a cross site scripting vulnerability.

PLC Wireless Router GPN2.4P21-C-CN suffers from a cross site scripting vulnerability.

phpMoAdmin version 1.1.5 suffers from cross site request forgery and cross site scripting vulnerabilities.

BMC Remedy and ITAM versions 7.1.00 and 9.1.02.003 suffer from multiple information disclosure vulnerabilities.

WordPress UserPro plugin versions prior to 4.9.21 suffers from a user registration privilege escalation vulnerability.

MyT Project Management version 1.5.1 suffers from a remote SQL injection vulnerability.

The BMC Network Automation allows authenticated users to hijack established remote sessions of other users, version v8.7.00.000 b383 u038 was confirmed to be vulnerable.