>> TAG: #0day

Easy Chat Server 3.1 – Directory Traversal and Arbitrary File Read

SonicWall SMA 10.2.1.0-17sv – Password Reset

Macro Expert 4.7 – Unquoted Service Path

Dolibarr ERP-CRM 14.0.2 – Stored Cross-Site Scripting (XSS) / Privilege Escalation

SonicWall SMA 10.2.1.0-17sv – Password Reset

Macro Expert 4.7 – Unquoted Service Path

Dolibarr ERP-CRM 14.0.2 – Stored Cross-Site Scripting (XSS) / Privilege Escalation

WordPress Theme Enfold 4.8.3 – Reflected Cross-Site Scripting (XSS)

myfactory FMS 7.1-911 – ‘Multiple’ Reflected Cross-Site Scripting (XSS)

Online Motorcycle (Bike) Rental System 1.0 – Blind Time-Based SQL Injection (Unauthenticated)