Tag: 0day

[webapps] Openlitespeed WebServer 1.7.8 – Command Injection (Authenticated) (2)

[webapps] b2evolution 6.11.6 – 'plugin name' Stored XSS

[webapps] Online Car Rental System 1.0 – Stored Cross Site Scripting

[local] AnyTXT Searcher 1.2.394 – 'ATService' Unquoted Service Path

[local] Epson USB Display 1.6.0.0 – 'EMP_UDSA' Unquote Service Path

[webapps] Adobe Connect 10 – Username Disclosure

[webapps] Jenzabar 9.2.2 – 'query' Reflected XSS.

[webapps] WordPress Plugin Welcart e-Commerce 2.0.0 – 'search[order_column][0]' SQL injection

[local] Millewin 13.39.146.1 – Local Privilege Escalation

[webapps] WordPress Plugin Supsystic Pricing Table 1.8.7 – Multiple Vulnerabilities