CWH Underground CMS Gratis Indonesia - 'config.php' PHP Code Injection
webapps php

Manuel García Cárdenas Telaen 2.7.x - Open Redirection
webapps php CVE-2013-2621;OSVDB-93838

Manuel García Cárdenas Telaen 2.7.x - Cross-Site Scripting
webapps php CVE-2013-2623;OSVDB-93837

Manuel García Cárdenas Telaen - Information Disclosure
webapps php CVE-2013-2624;OSVDB-93839

drone PHD Help Desk 2.12 - SQL Injection
webapps php OSVDB-93878

CWH Underground PhpTax 0.8 - File Manipulation 'newvalue' / Remote Code Execution
webapps php OSVDB-94098

localhost.re HostBill - 'cpupdate.php' Authentication Bypass
webapps php

Core Security Zavio IP Cameras Firmware 1.6.03 - Multiple Vulnerabilities
webapps hardware CVE-2013-2570;CVE-2013-2569;CVE-2013-2568;CVE-2013-2567;OSVDB-93713;OSVDB-93712;OSVDB-93711;OSVDB-93710

Core Security MayGion IP Cameras Firmware 09.27 - Multiple Vulnerabilities
webapps hardware CVE-2013-1605;CVE-2013-1604;OSVDB-93709;OSVDB-93708

Core Security TP-Link IP Cameras Firmware 1.6.18P12 - Multiple Vulnerabilities
webapps hardware CVE-2013-2573;CVE-2013-2572;OSVDB-93707;OSVDB-93706

b0rh YeaLink IP Phone Firmware 9.70.0.100 - Phone Call
webapps hardware OSVDB-93744

Adam Simuntis TP-Link WR842ND - Remote Multiple SSID Directory Traversals
webapps hardware OSVDB-94095

cheki Elastix - Multiple Cross-Site Scripting Vulnerabilities
webapps php

k3170makan WordPress Plugin ADIF Log Search Widget - 'logbook_search.php' Cross-Site Scripting
webapps php

Rooster(XEKA) RadioCMS 2.2 - 'menager.php?playlist_id' SQL Injection
webapps php CVE-2013-3531;OSVDB-92088

waraxe WordPress Plugin Spider Catalog 1.4.6 - Multiple Vulnerabilities
webapps php OSVDB-93598;OSVDB-93597;OSVDB-93596;OSVDB-93595;OSVDB-93594;OSVDB-93593;OSVDB-93592;OSVDB-93591;OSVDB-93590;OSVDB-93589