Tag: 0day

[local] BarracudaDrive v6.5 – Insecure Folder Permissions

[webapps] Stock Management System 1.0 – Cross-Site Request Forgery (Change Username)

[webapps] moziloCMS 2.0 – Persistent Cross-Site Scripting (Authenticated)

[webapps] Mara CMS 7.5 – Remote Code Execution (Authenticated)

[webapps] Online Book Store 1.0 – 'id' SQL Injection

[webapps] Fuel CMS 1.4.8 – 'fuel_replace_id' SQL Injection (Authenticated)

[local] BlazeDVD 7.0 Professional – '.plf' Local Buffer Overflow (SEH,ASLR,DEP)

[webapps] Mara CMS 7.5 – Reflective Cross-Site Scripting

[webapps] CMS Made Simple 2.2.14 – Arbitrary File Upload (Authenticated)

[webapps] Online Shopping Alphaware 1.0 – 'id' SQL Injection