>> TAG: #0day

Loan Management System 1.0 – Multiple Cross Site Scripting (Stored)

WordPress Plugin WP Courses < 2.0.29 – Broken Access Controls leading to Courses Content Disclosure

Visitor Management System in PHP 1.0 – SQL Injection (Authenticated)

Tourism Management System 1.0 – Arbitrary File Upload

Nagios XI 5.7.3 – ‘Manage Users’ Authenticated SQL Injection

Nagios XI 5.7.3 – ‘Contact Templates’ Persistent Cross-Site Scripting

Nagios XI 5.7.3 – ‘SNMP Trap Interface’ Authenticated SQL Injection

Online Student’s Management System 1.0 – Remote Code Execution (Authenticated)

Online Job Portal 1.0 – Cross Site Scripting (Stored)

Online Discussion Forum Site 1.0 – XSS in Messaging System