>> TAG: #0day

Online Railway Reservation System 1.0 – Remote Code Execution (RCE) (Unauthenticated)

HTTP Commander 3.1.9 – Stored Cross Site Scripting (XSS)

Online Railway Reservation System 1.0 – Admin Account Creation (Unauthenticated)

Online Railway Reservation System 1.0 – ‘Multiple’ Stored Cross Site Scripting (XSS) (Unauthenticated)

VUPlayer 2.49 – ‘.wax’ Local Buffer Overflow (DEP Bypass)

Online Veterinary Appointment System 1.0 – ‘Multiple’ SQL Injection

Siemens S7 Layer 2 – Denial of Service (DoS)

WordPress Plugin Contact Form Entries 1.1.6 – Cross Site Scripting (XSS) (Unauthenticated)

CMSimple 5.4 – Cross Site Scripting (XSS)

RiteCMS 3.1.0 – Arbitrary File Overwrite (Authenticated)