>> TAG: #0day

TestLink 1.9.11 – Multiple SQL Injection Vulnerabilities

RBS Change Complet Open Source 3.6.8 – CSRF Vulnerability

Internet Explorer 8 – Fixed Col Span ID Full ASLR, DEP & EMET 5.0 Bypass (MS12-037)

Microsoft Exchange IIS HTTP Internal IP Address Disclosure

GS Foto Uebertraeger 3.0 iOS – File Include Vulnerability

OpenFiler 2.99.1 – CSRF Vulnerability

Cart Engine 3.0 – Multiple Vulnerabilities

Bash Environment Variables Code Injection Exploit

GNU bash Environment Variable Command Injection

OsClass 3.4.1 (index.php, file param) – Local File Inclusion