Tag: 0day

[webapps] CMSUno 1.6 – Cross-Site Request Forgery (Change Admin Password)

[webapps] RiteCMS 2.2.1 – Remote Code Execution

[webapps] Wing FTP Server 6.3.8 – Remote Code Execution (Authenticated)

[webapps] SuperMicro IPMI WebInterface 03.40 – Cross-Site Request Forgery (Add Admin)

[webapps] Zyxel Armor X1 WAP6806 – Directory Traversal

[webapps] BSA Radar 1.6.7234.24750 – Local File Inclusion

[webapps] Trend Micro Web Security Virtual Appliance 6.5 SP2 Patch 4 Build 1901 – Remote Code Execution (Metasploit)

[webapps] Park Ticketing Management System 1.0 – Authentication Bypass

[webapps] Park Ticketing Management System 1.0 – 'viewid' SQL Injection

[webapps] HelloWeb 2.0 – Arbitrary File Download