>> TAG: #0day

DomainMod 4.09.03 – ‘sslpaid’ Cross-Site Scripting

TP-Link TL-WR840N/TL-WR841N – Authenticaton Bypass

CloudMe Sync < 1.11.0 – Buffer Overflow (SEH) (DEP Bypass)

Lyrist – ‘id’ SQL Injection

Listing Hub CMS 1.0 – SQL Injection

Ingenious School Management System – ‘id’ SQL Injection

BookingWizz Booking System 5.5 – ‘id’ SQL Injection

Sharetronix CMS 3.6.2 – Cross-Site Request Forgery / Cross-Site Scripting

WordPress Plugin Events Calendar – SQL Injection / Cross-Site Scripting

ClipperCMS 1.3.3 – Cross-Site Scripting