>> TAG: #0day

Lansweeper 7.2 – Incorrect Access Control

FileRun 2019.05.21 – Reflected Cross-Site Scripting

Student Enrollment 1.0 – Unauthenticated Remote Code Execution

Odoo 12.0 – Local File Inclusion

Online Student Enrollment System 1.0 – Unauthenticated Arbitrary File Upload

WebPort 1.19.1 – Reflected Cross-Site Scripting

Beauty Parlour Management System 1.0 – Authentication Bypass

College-Management-System-Php 1.0 – Authentication Bypass

Bandwidth Monitor 3.9 – ‘Svc10StrikeBandMontitor’ Unquoted Service Path

Gila CMS 1.11.8 – ‘query’ SQL Injection