Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2006-11-27   Click Gallery - Multiple Input Validation Vulnerabilities 0 WEB Aria-Security Team
2006-11-27   Clickblog - 'Displaycalendar.asp' SQL Injection 0 WEB Aria-Security Team
2006-11-27   ClickContact - 'default.asp' Multiple SQL Injections 0 WEB Aria-Security Team
2006-11-25   fipsShop - Multiple SQL Injections 0 WEB Aria-Security Team
2006-11-25   cPanel WebHost Manager 3.1 - 'park?ndomain' Cross-Site Scripting 0 WEB Aria-Security Team
2006-11-25   cPanel WebHost Manager 3.1 - 'dofeaturemanager?feature' Cross-Site Scripting 0 WEB Aria-Security Team
2006-11-25   cPanel WebHost Manager 3.1 - 'editzone?domain' Cross-Site Scripting 0 WEB Aria-Security Team
2006-11-25   cPanel WebHost Manager 3.1 - 'domts2?domain' Cross-Site Scripting 0 WEB Aria-Security Team
2006-11-25   cPanel WebHost Manager 3.1 - 'editpkg?pkg' Cross-Site Scripting 0 WEB Aria-Security Team
2006-11-25   cPanel WebHost Manager 3.1 - 'addon_configsupport.cgi?supporturl' Cross-Site Scripting 0 WEB Aria-Security Team
2006-11-25   cPanel WebHost Manager 3.1 - 'dochangeemail?email' Cross-Site Scripting 0 WEB Aria-Security Team
2006-11-25   cPanel 11 Beta - Multiple Cross-Site Scripting Vulnerabilities 0 WEB Aria-Security Team
2006-11-25   SIAP CMS - 'login.asp' SQL Injection 0 WEB nagazakig74
2006-11-24   Fixit iDms Pro Image Gallery - 'showfile.asp?fid' SQL Injection 1 WEB Aria-Security Team
2006-11-24   Fixit iDms Pro Image Gallery - 'filelist.asp' Multiple SQL Injections 1 WEB Aria-Security Team
2006-11-24   MMGallery 1.55 - 'Thumbs.php' Cross-Site Scripting 1 WEB Al7ejaz Hacker
2006-11-24   ASP ListPics 5.0 - 'Listpics.asp' SQL Injection 1 WEB Aria-Security Team
2006-11-24   Simple PHP Gallery 1.1 - 'System SP_Index.php' Cross-Site Scripting 1 WEB Al7ejaz Hacker
2006-11-24   MidiCart ASP - 'Item_Show.asp?ID2006quant' SQL Injection 1 WEB Aria-Security Team
2006-11-23   Active PHP BookMarks 1.1.2 - Multiple Remote File Inclusions 1 WEB ThE-LoRd-Of-CrAcKiNg
2006-11-22   PMOS Help Desk 2.3 - 'ticket.php?email' Cross-Site Scripting 1 WEB SwEET-DeViL
2006-11-22   PMOS Help Desk 2.3 - 'ticketview.php' Multiple Cross-Site Scripting Vulnerabilities 1 WEB SwEET-DeViL
2006-11-21   My Little Weblog 2006.11.21 - 'Weblog.php' Cross-Site Scripting 1 WEB the_Edit0r
2006-11-21   CuteNews 1.4.5 - 'rss_title' Cross-Site Scripting 1 WEB Alireza Hassani
2006-11-21   CuteNews 1.4.5 - 'show_news.php' Cross-Site Scripting 0 WEB Alireza Hassani
2006-11-21   Seditio 1.10 - 'Users.Profile.Inc.php' SQL Injection 1 WEB Mustafa Can Bjorn
2006-11-21   CreaDirectory 1.2 - 'search.asp?search' Cross-Site Scripting 1 WEB laurent gaffie
2006-11-21   CreaDirectory 1.2 - 'addlisting.asp?cat' Cross-Site Scripting 1 WEB laurent gaffie
2006-11-21   CreaDirectory 1.2 - 'search.asp?category' SQL Injection 1 WEB laurent gaffie
2006-11-21   JiRos Link Manager 1.0 - 'viewlinks.asp?categoryId' SQL Injection 1 WEB laurent gaffie
2006-11-21   JiRos Link Manager 1.0 - 'openlink.asp?LinkID' SQL Injection 1 WEB laurent gaffie
2006-11-21   Link Exchange Lite 1.0 - Multiple SQL Injections 1 WEB laurent gaffie
2013-10-24   WordPress Theme SAICO 1.0 < 1.0.2 - Arbitrary File Upload 1 WEB Byakuya Kouta
2006-11-20   Wabbit PHP Gallery 0.9 - 'Dir' Directory Traversal 1 WEB the_Edit0r
2006-11-20   Klf-Realty 2.0 - 'detail.asp?property_id' SQL Injection 1 WEB laurent gaffie
2006-11-20   Klf-Realty 2.0 - 'search_listing.asp' Multiple SQL Injections 1 WEB laurent gaffie
2006-11-20   The Classified Ad System 3.0 - 'default.asp' Multiple Cross-Site Scripting Vulnerabilities 1 WEB laurent gaffie
2006-11-20   Rapid Classified 3.1 - 'advsearch.asp' Cross-Site Scripting 1 WEB laurent gaffie
2006-11-20   Rapid Classified 3.1 - 'reply.asp' Cross-Site Scripting 1 WEB laurent gaffie
2006-11-20   Rapid Classified 3.1 - 'search.asp' Cross-Site Scripting 1 WEB laurent gaffie
2006-11-20   Rapid Classified 3.1 - 'view_print.asp' Cross-Site Scripting 1 WEB laurent gaffie
2006-11-20   Rapid Classified 3.1 - 'viewad.asp' SQL Injection 2 WEB laurent gaffie
2013-10-22   ARRIS DG860A - NVRAM Backup Password Disclosure 1 WEB Justin Oberdorf
2006-11-20   Vikingboard 0.1.2 - 'admin.php?act' Traversal Arbitrary File Access 1 WEB laurent gaffie
2006-11-20   Gnews Publisher - Multiple SQL Injections 1 WEB Aria-Security Team
2006-11-20   Enthrallweb eHomes - 'result.asp' Multiple Cross-Site Scripting Vulnerabilities 2 WEB laurent gaffie
2006-11-20   Enthrallweb eHomes - 'result.asp' Multiple SQL Injections 1 WEB laurent gaffie
2006-11-20   Enthrallweb eHomes - 'compareHomes.asp' Multiple SQL Injections 1 WEB laurent gaffie
2006-11-20   Enthrallweb eHomes - 'homeDetail.asp?AD_ID' SQL Injection 0 WEB laurent gaffie
2006-11-20   Enthrallweb eClassifieds - 'dirSub.asp?sid' SQL Injection 1 WEB laurent gaffie
2006-11-20   Enthrallweb eClassifieds - 'dircat.asp?cid' SQL Injection 1 WEB laurent gaffie
2006-11-20   Enthrallweb eClassifieds - 'ad.asp' Multiple SQL Injections 1 WEB laurent gaffie
2006-11-20   Grandora Rialto 1.6 - 'forminfo.asp?refno' Cross-Site Scripting 1 WEB laurent gaffie
2006-11-20   Grandora Rialto 1.6 - 'searchmain.asp?cat' Cross-Site Scripting 1 WEB laurent gaffie
2006-11-20   Grandora Rialto 1.6 - 'searchkey.asp?Keyword' Cross-Site Scripting 0 WEB laurent gaffie
2006-11-20   Grandora Rialto 1.6 - 'listmain.asp?cat' Cross-Site Scripting 0 WEB laurent gaffie
2006-11-20   Grandora Rialto 1.6 - 'searchoption.asp' Multiple SQL Injections 0 WEB laurent gaffie
2006-11-20   Grandora Rialto 1.6 - 'searchmain.asp' Multiple SQL Injections 0 WEB laurent gaffie
2006-11-20   Grandora Rialto 1.6 - 'searchkey.asp' Multiple SQL Injections 0 WEB laurent gaffie
2006-11-20   Grandora Rialto 1.6 - 'printmain.asp?ID' SQL Injection 0 WEB laurent gaffie
2006-11-20   Grandora Rialto 1.6 - 'listmain.asp?cat' SQL Injection 0 WEB laurent gaffie
2006-11-20   Grandora Rialto 1.6 - 'listfull.asp?ID' SQL Injection 0 WEB laurent gaffie
2006-11-20   Grandora Rialto 1.6 - '/admin/default.asp' Multiple SQL Injections 0 WEB laurent gaffie
2006-11-20   vSpin Classified System 2004 - 'search.asp?minprice' Cross-Site Scripting 0 WEB laurent gaffie
2006-11-20   vSpin Classified System 2004 - 'cat.asp?catname' Cross-Site Scripting 0 WEB laurent gaffie
2006-11-20   vSpin Classified System 2004 - 'search.asp' Multiple SQL Injections 1 WEB laurent gaffie
2006-11-20   vSpin Classified System 2004 - 'cat.asp?cat' SQL Injection 1 WEB laurent gaffie
2006-11-20   BirdBlog 1.4 - '/admin/logs.php?page' Cross-Site Scripting 1 WEB the_Edit0r
2006-11-20   BirdBlog 1.4 - '/admin/entries.php?month' Cross-Site Scripting 1 WEB the_Edit0r
2006-11-20   BirdBlog 1.4 - '/admin/comments.php?month' Cross-Site Scripting 1 WEB the_Edit0r
2006-11-20   BirdBlog 1.4 - '/admin/admincore.php?msg' Cross-Site Scripting 1 WEB the_Edit0r
2006-11-20   Boonex 2.0 Dolphin - 'index.php' Remote File Inclusion 1 WEB S.W.A.T.
2006-11-18   Blog:CMS 4.1.3 - 'list.php' Cross-Site Scripting 1 WEB Katatafish
2006-11-18   Texas Rankem - 'tournament_id' SQL Injection 1 WEB Aria-Security Team
2006-11-18   Texas Rankem - 'selPlayer' SQL Injection 1 WEB Aria-Security Team
2013-10-20   ZonPHP 2.25 - Remote Code Execution 1 WEB Halim Cruzito
2006-11-18   ActiveNews Manager - 'articleId' SQL Injection (2) 1 WEB laurent gaffie
2006-11-18   Active News Manager - 'catID' SQL Injection 1 WEB laurent gaffie
2006-11-18   ActiveNews Manager - 'query' Cross-Site Scripting 1 WEB laurent gaffie
2006-11-18   ActiveNews Manager - 'page' SQL Injection 1 WEB laurent gaffie
2006-11-18   ActiveNews Manager - 'articleId' SQL Injection (1) 1 WEB laurent gaffie
2006-11-18   Alan Ward A-CART 2.0 - 'category.asp?catcode' SQL Injection (1) 1 WEB laurent gaffie
2006-11-18   A-Cart Pro 2.0 - 'product.asp?ProductID' SQL Injection 1 WEB laurent gaffie
2006-11-17   BestWebApp Dating Site - 'login_form.asp?msg' Cross-Site Scripting 0 WEB laurent gaffie
2006-11-17   BestWebApp Dating Site Login Component - Multiple Field SQL Injections 1 WEB laurent gaffie
2006-11-17   vBulletin 3.6.x - Admin Control Panel Multiple Cross-Site Scripting Vulnerabilities 1 WEB insanity
2006-11-17   20/20 Applications Data Shed 1.0 - 'listings.asp' Multiple SQL Injections 1 WEB laurent gaffie
2006-11-17   20/20 Applications Data Shed 1.0 - 'f-email.asp?itemID' SQL Injection 1 WEB laurent gaffie
2006-11-17   20/20 Auto Gallery 3.2 - Multiple SQL Injections 1 WEB laurent gaffie
2006-11-17   20/20 Real Estate 3.2 - Multiple SQL Injections 1 WEB laurent gaffie
2006-11-17   ASPCart 4.5 - Multiple SQL Injections 1 WEB laurent gaffie
2006-11-17   PHP Upload Tool 1.0 - Arbitrary File Upload / Directory Traversal 1 WEB Craig Heffner
2006-11-17   cPanel 10 - DNSlook.HTML Cross-Site Scripting 1 WEB Aria-Security Team
2013-10-19   WordPress Theme Area53 - Arbitrary File Upload 0 WEB Byakuya Kouta
2013-10-19   WHMCompleteSolution (WHMCS) 5.2.8 - SQL Injection 0 WEB g00n
2006-11-16   Xtreme ASP Photo Gallery 2.0 - 'displaypic.asp?catname' Cross-Site Scripting 0 WEB Aria-Security Team
2006-11-16   Xtreme ASP Photo Gallery 2.0 - 'displaypic.asp?sortorder' SQL Injection 0 WEB Aria-Security Team
2006-09-15   phpMyAdmin 2.x - Multiple Script Array Handling Full Path Disclosures 0 WEB laurent gaffie
2006-09-15   phpMyAdmin 2.x - 'sql.php?pos' Cross-Site Scripting 0 WEB laurent gaffie
2006-09-15   phpMyAdmin 2.x - 'querywindow.php' Multiple Cross-Site Scripting Vulnerabilities 0 WEB laurent gaffie
2006-09-15   phpMyAdmin 2.x - 'db_operations.php' Multiple Cross-Site Scripting Vulnerabilities 0 WEB laurent gaffie
2006-09-15   phpMyAdmin 2.x - 'db_create.php?db' Cross-Site Scripting 0 WEB laurent gaffie
2006-11-16   Image Gallery with Access Database - 'default.asp' Multiple SQL Injections 0 WEB Aria-Security Team
2006-11-16   Image Gallery with Access Database - 'dispimage.asp?id' SQL Injection 0 WEB Aria-Security Team
2006-11-16   Sphpblog 0.8 - Multiple Cross-Site Scripting Vulnerabilities 0 WEB the_Edit0r
2006-11-16   Odysseus Blog 1.0 - 'blog.php' Cross-Site Scripting 0 WEB the_Edit0r
2006-11-16   BlogTorrent Preview 0.92 - 'Announce.php' Cross-Site Scripting 0 WEB the_Edit0r
2006-11-16   i-Gallery 3.4 - 'igallery.asp' Multiple Cross-Site Scripting Vulnerabilities 0 WEB Aria-Security Team
2006-11-15   Hot Links - Perl PHP Information Disclosure 2 WEB hack2prison
2006-11-15   ASPIntranet 2.1 - Multiple SQL Injections 1 WEB Aria-Security Team
2006-11-15   Dragon Internet Events Listing 2.0.01 - 'admin_login.asp' Multiple Field SQL Injections 1 WEB Benjamin Moss
2006-11-15   Dragon Internet Events Listing 2.0.01 - 'event_searchdetail.asp?ID' SQL Injection 1 WEB Benjamin Moss
2006-11-15   Dragon Internet Events Listing 2.0.01 - 'venue_detail.asp?VenueID' SQL Injection 0 WEB Benjamin Moss
2006-11-15   Yetihost Helm 3.2.10 - Multiple Cross-Site Scripting Vulnerabilities 2 WEB Aria-Security Team
2006-11-14   High Performance Computers Solutions Shopping Cart - Multiple SQL Injections 1 WEB laurent gaffie
2006-11-15   CandyPress Store 3.5.2 14 - 'prodList.asp?brand' SQL Injection 1 WEB laurent gaffie
2006-11-15   CandyPress Store 3.5.2 14 - 'openPolicy.asp?policy' SQL Injection 1 WEB laurent gaffie
2013-10-18   Elite Graphix ElitCMS 1.01 / PRO - Multiple Web Vulnerabilities 1 WEB Vulnerability-Lab
2006-11-14   MGinternet Property Site Manager - 'admin_login.asp' Multiple SQL Injections 1 WEB laurent gaffie
2006-11-14   MGinternet Property Site Manager - 'listings.asp' Multiple SQL Injections 1 WEB laurent gaffie
2006-11-14   MGinternet Property Site Manager - 'detail.asp?p' SQL Injection 1 WEB laurent gaffie
2006-11-14   MGinternet Property Site Manager - 'listings.asp?s' Cross-Site Scripting 1 WEB laurent gaffie
2006-11-14   Mega Mall - 'order-track.php?orderNo' SQL Injection 1 WEB laurent gaffie
2006-11-14   Mega Mall - 'product_review.php' Multiple SQL Injections 1 WEB laurent gaffie
2006-11-14   Evolve Merchant - 'viewcart.asp' SQL Injection 1 WEB laurent gaffie