>> TAG: #0day

Barangay Management System 1.0 – Authentication Bypass

Aruba ClearPass Policy Manager 6.7.0 – Unauthenticated Remote Command Execution

FrootVPN 4.8 – ‘frootvpn’ Unquoted Service Path

WordPress Plugin Powie’s WHOIS Domain Check 0.9.31 – Persistent Cross-Site Scripting

Savsoft Quiz 5 – Persistent Cross-Site Scripting

SuperMicro IPMI 03.40 – Cross-Site Request Forgery (Add Admin)

BSA Radar 1.6.7234.24750 – Cross-Site Request Forgery (Change Password)

Online Shopping Portal 3.1 – ’email’ SQL Injection

Sickbeard 0.1 – Remote Command Injection

Joomla! J2 JOBS 1.3.0 – ‘sortby’ Authenticated SQL Injection