>> TAG: #0day

Net-Billetterie 2.9 – ‘login’ SQL Injection

Notepad3 1.0.2.350 – Denial of Service (PoC)

PHP Mass Mail 1.0 – Arbitrary File Upload

ntpd 4.2.8p10 – Out-of-Bounds Read (PoC)

iServiceOnline 1.0 – ‘r’ SQL Injection

Helpdezk 1.1.1 – ‘query’ SQL Injection

EdTv 2 – ‘id’ SQL Injection

Electricks eCommerce 1.0 – Cross-Site Request Forgery (Change Admin Password)

AMPPS 2.7 – Denial of Service (PoC)

Atlassian Jira – Authenticated Upload Code Execution (Metasploit)