>> TAG: #0day

Exam Hall Management System 1.0 – Unrestricted File Upload (Unauthenticated)

Visual Tools DVR VX16 4.2.28 – Local Privilege Escalation

Phone Shop Sales Managements System 1.0 – Authentication Bypass (SQLi)

Visual Tools DVR VX16 4.2.28.0 – OS Command Injection (Unauthenticated)

perfexcrm 1.10 – ‘State’ Stored Cross-site scripting (XSS)

WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 – Directory Traversal

Phone Shop Sales Managements System 1.0 – ‘Multiple’ Arbitrary File Upload to Remote Code Execution

Church Management System 1.0 – ‘Multiple’ Stored Cross-Site Scripting (XSS)

Church Management System 1.0 – Unrestricted File Upload to Remote Code Execution (Authenticated)

Church Management System 1.0 – ‘password’ SQL Injection (Authentication Bypass)