See the article here: [webapps / 0day] – Topics viewer <= 2.3 Authentication Bypass & SQL Injection
Read More: [webapps / 0day] – WordPress Themes QualiFire File Upload Vulnerability
http://radprasong.pck1.go.th notified by hacker-1420
http://sahamitr.pck1.go.th/index.php notified by hacker-1420
http://banhuayyangmit.pck1.go.th/modules.php?name=Downloads notified by MrWanz
Originally posted here: [webapps / 0day] – WordPress Paid Business Listings v1.0.2 Blind SQL Injection
Read More: [webapps / 0day] – phpMoneyBooks 1.03 => Database Backup Disclosure Vulnerability
Follow this link: [local exploits] – python-wrapper untrusted search path/code execution
More: [webapps / 0day] – Small Reservation CMS – SQL Injection Vulnerability
Excerpt from: [webapps / 0day] – WordPress Plugins – Piecemaker Arbitrary File Upload Vulnerability