>> TAG: #0day

Travel Agency 1.1 – ‘cid’ SQL Injection

phpLDAPadmin 1.2.2 – ‘server_id’ LDAP Injection (Username)

Opencart < 3.0.2.0 – Denial of Service

QEMU Guest Agent 2.12.50 – Denial of Service

phpMyAdmin 4.8.1 – Local File Inclusion

GreenCMS 2.3.0603 – Information Disclosure

LFCMS 3.7.0 – Cross-Site Request Forgery (Add User)

LFCMS 3.7.0 – Cross-Site Request Forgery (Add Admin)

Dell EMC RecoverPoint < 5.1.2 – Local Root Command Execution

Mirasys DVMS Workstation 5.12.6 – Path Traversal