>> TAG: #0day

Sonicwall SonicOS 6.5.4 – ‘Common Name’ Cross-Site Scripting (XSS)

PHP Melody 3.0 – ‘Multiple’ Cross-Site Scripting (XSS)

PHP Melody 3.0 – ‘vid’ SQL Injection

PHP Melody 3.0 – Persistent Cross-Site Scripting (XSS)

Mult-e-Cart Ultimate 2.4 – ‘id’ SQL Injection

Isshue Shopping Cart 3.5 – ‘Title’ Cross Site Scripting (XSS)

Vanguard 2.1 – ‘Search’ Cross-Site Scripting (XSS)

OpenAM 13.0 – LDAP Injection

Ultimate POS 4.4 – ‘name’ Cross-Site Scripting (XSS)

Simplephpscripts Simple CMS 2.1 – ‘Multiple’ Stored Cross-Site Scripting (XSS)