>> TAG: #0day

D-Park Pro 1.0 – SQL Injection

Same Sex Dating Software Pro 1.0 – SQL Injection

Ingenious 2.3.0 – Arbitrary File Upload

Shareet – ‘photo’ SQL Injection

iStock Management System 1.0 – Arbitrary File Upload

Oracle Java SE – Web Start jnlp XML External Entity Processing Information Disclosure

Joomla! Component Zh YandexMap 6.1.1.0 – ‘placemarklistid’ SQL Injection

iProject Management System 1.0 – ‘ID’ SQL Injection

Adult Script Pro 2.2.4 – SQL Injection

PHP Melody 2.6.1 – SQL Injection