>> TAG: #0day

Wondershare MirrorGo 2.0.11.346 – Insecure File Permissions

Simple Real Estate Portal System 1.0 – ‘id’ SQLi

Adobe ColdFusion 11 – LDAP Java Object Deserialization Remode Code Execution (RCE)

Air Cargo Management System v1.0 – SQLi

aaPanel 6.8.21 – Directory Traversal (Authenticated)

Student Record System 1.0 – ‘cid’ SQLi (Authenticated)

Thinfinity VirtualUI 2.5.41.0 – IFRAME Injection

WordPress Plugin Perfect Survey – 1.5.1 – SQLi (Unauthenticated)

HMA VPN 5.3 – Unquoted Service Path

Cab Management System 1.0 – ‘id’ SQLi (Authenticated)