Tag: 0day

[webapps] WordPress Plugin Simple Job Board 2.9.3 – Authenticated File Read (Metasploit)

[webapps] ChurchRota 2.6.4 – RCE (Authenticated)

[webapps] Oracle Business Intelligence Enterprise Edition 11.1.1.7.140715 – Stored XSS

[webapps] Voting System 1.0 – File Upload RCE (Authenticated Remote Code Execution)

[webapps] osTicket 1.14.2 – SSRF

[webapps] Life Insurance Management System 1.0 – 'client_id' SQL Injection

[webapps] Cisco UCS Manager 2.2(1d) – Remote Command Execution

[webapps] Xwiki CMS 12.10.2 – Cross Site Scripting (XSS)

[webapps] Inteno IOPSYS 3.16.4 – root filesystem access via sambashare (Authenticated)

[webapps] Life Insurance Management System 1.0 – File Upload RCE (Authenticated)