>> TAG: #0day

SmartFoxServer 2X 2.17.0 – God Mode Console WebSocket XSS

AMD Fuel Service – ‘Fuel.service’ Unquote Service Path

SmartFoxServer 2X 2.17.0 – Credentials Disclosure

WordPress Plugin Supsystic Ultimate Maps 1.1.12 – ‘sidx’ SQL injection

WordPress Plugin Supsystic Backup 2.3.9 – Local File Inclusion

LiteSpeed Web Server Enterprise 5.4.11 – Command Injection (Authenticated)

PhreeBooks 5.2.3 ERP – Remote Code Execution (2)

SEO Panel 4.6.0 – Remote Code Execution (2)

Pixelimity 1.0 – ‘password’ Cross-Site Request Forgery

Car Rental Project 2.0 – Arbitrary File Upload to Remote Code Execution