>> TAG: #0day

Employee Daily Task Management System 1.0 – ‘Name’ Stored Cross-Site Scripting (XSS)

Employee and Visitor Gate Pass Logging System 1.0 – ‘name’ Stored Cross-Site Scripting (XSS)

Kmaleon 1.1.0.205 – ‘tipocomb’ SQL Injection (Authenticated)

Simple Client Management System 1.0 – ‘multiple’ Stored Cross-Site Scripting (XSS)

Money Transfer Management System 1.0 – Authentication Bypass

Froxlor 0.10.29.1 – SQL Injection (Authenticated)

WordPress Plugin Backup and Restore 1.0.3 – Arbitrary File Deletion

Simple Client Management System 1.0 – SQLi (Authentication Bypass)

zlog 1.2.15 – Buffer Overflow

FusionPBX 4.5.29 – Remote Code Execution (RCE) (Authenticated)