>> TAG: #0day

CMSUno 1.6 – Cross-Site Request Forgery (Change Admin Password)

RiteCMS 2.2.1 – Remote Code Execution

Wing FTP Server 6.3.8 – Remote Code Execution (Authenticated)

SuperMicro IPMI WebInterface 03.40 – Cross-Site Request Forgery (Add Admin)

Zyxel Armor X1 WAP6806 – Directory Traversal

BSA Radar 1.6.7234.24750 – Local File Inclusion

Trend Micro Web Security Virtual Appliance 6.5 SP2 Patch 4 Build 1901 – Remote Code Execution (Metasploit)

Park Ticketing Management System 1.0 – Authentication Bypass

Park Ticketing Management System 1.0 – ‘viewid’ SQL Injection

HelloWeb 2.0 – Arbitrary File Download