>> TAG: #0day

FS Care Clone – ‘sitterService’ SQL Injection

FS Thumbtack Clone – ‘ser’ SQL Injection

Mura CMS < 6.2 – Server-Side Request Forgery / XML External Entity Injection

FS Realtor Clone – ‘id’ SQL Injection

Kaltura < 13.1.0 – Remote Code Execution

Unitrends UEB 9 – bpserverd Authentication Bypass Remote Command Execution (Metasploit)

Unitrends UEB 9 – http api/storage Remote Root (Metasploit)

Polycom – Command Shell Authorization Bypass (Metasploit)

FS Food Delivery Script – ‘keywords’ SQL Injection

FS Car Rental Script – ‘pickup_location’ SQL Injection