>> TAG: #0day

MyBB Delete Account Plugin 1.4 – Cross-Site Scripting

User Management System 1.0 – ‘uid’ SQL Injection

Park Ticketing Management System 1.0 – ‘viewid’ SQL Injection

MyBB Trending Widget Plugin 1.2 – Cross-Site Scripting

bloofoxCMS 0.5.2.1 – CSRF (Add user)

BloofoxCMS 0.5.2.1 – ‘text’ Stored Cross Site Scripting

Online Grading System 1.0 – ‘uname’ SQL Injection

Quick.CMS 6.7 – Remote Code Execution (Authenticated)

EgavilanMedia PHPCRUD 1.0 – ‘Full Name’ Stored Cross Site Scripting

CMSUno 1.6.2 – ‘lang/user’ Remote Code Execution (Authenticated)