Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2006-03-06   DVGuestbook 1.0/1.2.2 - 'dv_gbook.php?f' Cross-Site Scripting 2 WEB Liz0ziM
2006-03-06   DVGuestbook 1.0/1.2.2 - 'index.php?page' Cross-Site Scripting 3 WEB Liz0ziM
2006-03-04   Simplog 1.0.2 - Information Disclosure 2 WEB Retard
2006-03-04   CutePHP CuteNews 1.4.1 - 'index.php' Cross-Site Scripting 2 WEB Roozbeh Afrasiabi
2006-03-04   Woltlab Burning Board 2.3.4 - 'misc.php' Cross-Site Scripting 2 WEB r57shell
2006-03-04   Easy Forum 2.5 - New User Image File HTML Injection 4 WEB Aliaksandr Hartsuyeu
2006-03-04   VBZooM Forum 1.11 - 'contact.php?UserID' Cross-Site Scripting 2 WEB Mr.SNAKE
2006-03-04   VBZooM Forum 1.11 - 'comment.php?UserID' Cross-Site Scripting 2 WEB Mr.SNAKE
2006-03-04   VBZoom Forum 1.11 - 'show.php' MainID SQL Injection 2 WEB Mr.SNAKE
2006-03-02   LogIT 1.3/1.4 - Remote File Inclusion 1 WEB botan
2006-03-02   NZ eCommerce System - 'index.php' Multiple SQL Injections 2 WEB r0t
2006-03-02   vBulletin 3.0/3.5 - 'profile.php?Email' HTML Injection 2 WEB imei
2006-03-02   PluggedOut Nexus 0.1 - 'forgotten_password.php' SQL Injection 2 WEB Hamid Ebadi
2006-03-02   DCI-Designs Dawaween 1.03 - 'Poems.php' SQL Injection 2 WEB sherba
2006-03-01   SMBlog 1.2 - Arbitrary PHP Command Execution 2 WEB botan
2006-02-28   PEHEPE Membership Management System 3.0 - Remote PHP Script Code Injection 2 WEB Yunus Emre Yilmaz
2006-02-26   PEHEPE Membership Management System 3.0 - 'Sol_menu.php' Cross-Site Scripting 3 WEB Yunus Emre Yilmaz
2006-02-28   Mozilla Thunderbird 1.5 - Multiple Remote Information Disclosure Vulnerabilities 3 WEB Crashfr
2006-02-28   EJ3 TOPo 2.2.178 - 'Inc_header.php' Cross-Site Scripting 3 WEB Yunus Emre Yilmaz
2006-02-28   QwikiWiki 1.4 - 'index.php' Cross-Site Scripting 3 WEB Dr^Death
2006-02-27   n8cms 1.1/1.2 - 'mailto.php?userid' Cross-Site Scripting 2 WEB Liz0ziM
2006-02-27   n8cms 1.1/1.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Liz0ziM
2006-02-27   n8cms 1.1/1.2 - 'index.php' Multiple SQL Injections 3 WEB Liz0ziM
2006-02-25   D3Jeeb Pro 3 - 'catogary.php?catid' SQL Injection 3 WEB SAUDI
2006-02-25   D3Jeeb Pro 3 - 'fastlinks.php?catid' SQL Injection 3 WEB SAUDI
2006-02-27   Archangel Weblog 0.90.2 - Authentication Bypass 3 WEB KingOfSka
2006-02-27   Woltlab Burning Board 1.1.1/2.x - 'galerie_onfly.php' Cross-Site Scripting 3 WEB botan
2006-02-27   Woltlab Burning Board 1.1.1/2.x - 'galerie_index.php?Username' Cross-Site Scripting 3 WEB botan
2006-02-27   Fantastic News 2.1.1 - SQL Injection 3 WEB SAUDI
2006-02-25   Thomson SpeedTouch 500 Series - LocalNetwork Page 'name' Cross-Site Scripting 3 WEB Preben Nylokken
2006-02-25   PHP-Nuke 7.8 - 'Mainfile.php' SQL Injection 3 WEB waraxe
2013-08-03   RiteCMS 1.0.0 - Multiple Vulnerabilities 3 WEB Yashar shahinzadeh
2006-02-25   DCI-Taskeen 1.03 - 'cat.php' Multiple SQL Injections 3 WEB Linux_Drox
2006-02-25   DCI-Taskeen 1.03 - 'basket.php' Multiple SQL Injections 3 WEB Linux_Drox
2006-02-25   FreeHostShop Website Generator 3.3 - Arbitrary File Upload 3 WEB NSA Group
2006-02-25   SPiD 1.3.1 - 'Scan_Lang_Insert.php' Local File Inclusion 3 WEB NSA Group
2006-02-25   Battleaxe Software BttlxeForum 2.0 - 'Failure.asp' Cross-Site Scripting 3 WEB rUnViRuS
2006-02-22   myPHPNuke 1.8.8 - 'download.php' Cross-Site Scripting 3 WEB Mustafa Can Bjorn
2006-02-22   myPHPNuke 1.8.8 - 'reviews.php' Cross-Site Scripting 3 WEB Mustafa Can Bjorn
2006-02-23   JGS-Gallery 4.0 - 'Board jgs_galerie_scroll.php?userid' Cross-Site Scripting 3 WEB nuker
2006-02-23   JGS-Gallery 4.0 - 'jgs_galerie_slideshow.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB nuker
2006-02-23   PHPX 3.5.9 - XCode Tag HTML Injection 3 WEB Thomas Pollet
2006-02-23   CubeCart 3.0.x - Arbitrary File Upload 2 WEB NSA Group
2006-02-23   Oi! Email Marketing System 3.0 - 'index.php' SQL Injection 2 WEB h4cky0u
2006-02-23   NOCC 1.0 - 'html_bottom_table.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB rgod
2006-02-23   NOCC 1.0 - 'no_mail.php?html_no_mail' Cross-Site Scripting 3 WEB rgod
2006-02-23   NOCC 1.0 - 'filter_prefs.php?html_filter_select' Cross-Site Scripting 3 WEB rgod
2006-02-23   NOCC 1.0 - 'error.php?html_error_occurred' Cross-Site Scripting 3 WEB rgod
2006-02-23   Web Calendar Pro - 'Dropbase.php' SQL Injection 3 WEB ReZEN
2013-08-02   Oracle Hyperion 11 - Directory Traversal 2 WEB Richard Warren
2013-08-02   WordPress Plugin Better WP Security 3.4.8/3.4.9/3.4.10/3.5.2/3.5.3 - Persistent Cross-Site Scripting 3 WEB Richard Warren
2013-08-02   TP-Link TL-SC3171 IP Cameras - Multiple Vulnerabilities 3 WEB Core Security
2013-08-02   Western Digital My Net Wireless Routers - Password Disclosure 3 WEB Kyle Lovett
2013-08-02   Cotonti 0.9.13 - SQL Injection 3 WEB High-Tech Bridge SA
2013-08-02   MiCasaVerde VeraLite 1.5.408 - Multiple Vulnerabilities 3 WEB Trustwave's SpiderLabs
2013-08-02   INSTEON Hub 2242-222 - Lack of Web and API Authentication 3 WEB Trustwave's SpiderLabs
2013-08-02   D-Link DIR-645 1.03B08 - Multiple Vulnerabilities 3 WEB Roberto Paleari
2013-08-02   Telmanik CMS Press 1.01b - 'pages.php?page_name' SQL Injection 3 WEB Anarchy Angel
2013-08-02   vTiger CRM 5.4.0 SOAP - Multiple Vulnerabilities 3 WEB EgiX
2013-08-02   BigACE 2.7.8 - Cross-Site Request Forgery (Add Admin) 3 WEB Yashar shahinzadeh
2013-08-02   FunGamez - Arbitrary File Upload 3 WEB cr4wl3r
2013-08-02   Ginkgo CMS - 'index.php?rang' SQL Injection 3 WEB Raw-x
2013-08-02   SocialEngine Timeline Plugin 4.2.5p9 - Arbitrary File Upload 3 WEB spyk2r
2006-02-22   Dragonfly CMS 9.0.6.1 Coppermine Module - 'album' Cross-Site Scripting 3 WEB Lostmon
2006-02-22   Dragonfly CMS 9.0.6.1 Downloads Module - 'c' Cross-Site Scripting 3 WEB Lostmon
2006-02-22   Dragonfly CMS 9.0.6.1 Surveys Module - Multiple Cross-Site Scripting Vulnerabilities 3 WEB Lostmon
2006-02-22   Dragonfly CMS 9.0.6.1 Web_Links Module - Multiple Cross-Site Scripting Vulnerabilities 3 WEB Lostmon
2006-02-22   Dragonfly CMS 9.0.6.1 Stories_Archive Module - Multiple Cross-Site Scripting Vulnerabilities 3 WEB Lostmon
2006-02-22   Dragonfly CMS 9.0.6 1 News Module - Multiple Cross-Site Scripting Vulnerabilities 3 WEB Lostmon
2006-02-22   Dragonfly CMS 9.0.6 1 Your_Account Module - Multiple Cross-Site Scripting Vulnerabilities 3 WEB Lostmon
2006-02-22   Noah's Classifieds 1.0/1.3 - 'index.php' Remote File Inclusion 2 WEB trueend5
2006-02-22   Noah's Classifieds 1.0/1.3 - Local File Inclusion 2 WEB trueend5
2006-02-22   Noah's Classifieds 1.0/1.3 - Search Page SQL Injection 3 WEB trueend5
2006-02-22   Noah's Classifieds 1.0/1.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 4 WEB trueend5
2006-02-22   RunCMS 1.x - 'Ratefile.php' Cross-Site Scripting 3 WEB Roozbeh Afrasiabi
2006-02-21   PostNuke 0.6x/0.7x NS-Languages Module - 'language' SQL Injection 3 WEB Maksymilian Arciemowicz
2006-02-21   PostNuke 0.6x/0.7x NS-Languages Module - 'language' Cross-Site Scripting 4 WEB Maksymilian Arciemowicz
2006-02-20   CuteNews 1.4.1 - 'show_news.php' Cross-Site Scripting 3 WEB imei
2006-02-20   Magic Calendar Lite 1.02 - 'index.php' SQL Injection 3 WEB Aliaksandr Hartsuyeu
2006-02-20   TTS Software Time Tracking Software 3.0 - 'edituser.php' Access Validation 3 WEB Aliaksandr Hartsuyeu
2006-02-18   PHP-Nuke 7.x - CAPTCHA Bypass 3 WEB waraxe
2006-02-18   Webpagecity WPC easy - SQL Injection 3 WEB murfie
2006-02-18   E107 Website System 0.7.2 Chatbox Plugin - HTML Injection 3 WEB marc & shb
2006-02-17   V-Webmail 1.6.2 - Multiple Cross-Site Scripting Vulnerabilities 3 WEB $um$id
2006-02-16   Siteframe Beaumont 5.0.1/5.0.2 - 'page.php' HTML Injection 3 WEB federico.alice@tiscali.it
2006-02-16   MyBB 1.0.3 - 'Managegroup.php' Cross-Site Scripting 3 WEB imei
2006-02-16   MyBB 1.0.2/1.0.3 - 'Managegroup.php' SQL Injection 3 WEB imei
2006-02-15   BirthSys 3.1 - Multiple SQL Injections 3 WEB Aliaksandr Hartsuyeu
2006-02-16   Dreamcost HostAdmin 3.0 - 'index.php' Remote File Inclusion 3 WEB ReZEN
2006-02-15   HTML::BBCode 1.03/1.04 - HTML Injection 3 WEB Aliaksandr Hartsuyeu
2006-02-15   MyBB 1.0.3 - 'private.php' Multiple SQL Injections 3 WEB imei
2006-02-15   My Blog 1.63 - BBCode HTML Injection 3 WEB Aliaksandr Hartsuyeu
2006-02-15   Mantis Bug Tracker 0.x/1.0 - 'manage_user_page.php?sort' Cross-Site Scripting 3 WEB Thomas Waldegger
2006-02-15   Mantis Bug Tracker 0.x/1.0 - 'view_all_set.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Thomas Waldegger
2006-02-15   WordPress Core 2.0 - Comment Post HTML Injection 3 WEB imei
2006-02-14   RunCMS 1.2/1.3 - 'PMLite.php' SQL Injection 3 WEB Hamid Ebadi
2006-02-14   dotProject 2.0 - '/modules/tasks/gantt.php?baseDir' Remote File Inclusion 3 WEB r.verton
2006-02-14   dotProject 2.0 - '/modules/public/date_format.php?baseDir' Remote File Inclusion 2 WEB r.verton
2006-02-14   dotProject 2.0 - '/modules/public/calendar.php?baseDir' Remote File Inclusion 2 WEB r.verton
2006-02-14   dotProject 2.0 - '/modules/admin/vw_usr_roles.php?baseDir' Remote File Inclusion 3 WEB r.verton
2006-02-14   dotProject 2.0 - '/modules/projects/vw_files.php?dPconfig[root_dir]' Remote File Inclusion 3 WEB r.verton
2006-02-14   dotProject 2.0 - '/modules/projects/gantt2.php?dPconfig[root_dir]' Remote File Inclusion 3 WEB r.verton
2006-02-14   dotProject 2.0 - '/includes/session.php?baseDir' Remote File Inclusion 2 WEB r.verton
2006-02-14   dotProject 2.0 - '/includes/db_connect.php?baseDir' Remote File Inclusion 3 WEB r.verton
2006-02-14   dotProject 2.0 - '/modules/projects/gantt.php?dPconfig[root_dir]' Remote File Inclusion 3 WEB r.verton
2006-02-14   sNews - 'index.php' Multiple SQL Injections 3 WEB joffer
2006-02-14   sNews - Comment Body Cross-Site Scripting 4 WEB joffer
2006-02-14   DELTAScripts PHP Classifieds 6.20 - 'Member_Login.php' SQL Injection 3 WEB Audun Larsen
2006-02-14   QwikiWiki 1.5 - 'search.php' Cross-Site Scripting 3 WEB Citynova
2006-02-13   Gastebuch 1.3.2 - Cross-Site Scripting 3 WEB Micha Borrmann
2006-02-13   PHP-Nuke 6.x/7.x - 'header.php?Pagetitle' Cross-Site Scripting 3 WEB Janek Vind
2006-02-13   Clever Copy 2.0/3.0 - Multiple HTML Injection Vulnerabilities 3 WEB Aliaksandr Hartsuyeu
2006-02-13   XMB Forum 1.8/1.9 - 'u2u.php?Username' Cross-Site Scripting 2 WEB GulfTech Security
2006-02-13   Virtual Hosting Control System 2.2/2.4 - 'login.php?check_login()' Authentication Bypass 3 WEB Roman Medina-Heigl Hernandez
2006-02-13   Virtual Hosting Control System 2.2/2.4 - 'change_password.php' Current Password 3 WEB Roman Medina-Heigl Hernandez
2006-02-13   Lawrence Osiris DB_eSession 1.0.2 - Class SQL Injection 3 WEB GulfTech Security
2006-02-12   Siteframe Beaumont 5.0.1 - 'search.php?Q' Cross-Site Scripting 3 WEB Kiki
2006-02-11   ImageVue 0.16.1 - 'upload.php' Unrestricted Arbitrary File Upload 3 WEB zjieb
2006-02-11   ImageVue 0.16.1 - 'index.php?bgcol' Cross-Site Scripting 3 WEB zjieb
2006-02-11   ImageVue 0.16.1 - 'readfolder.php?path' Arbitrary Directory Listing 3 WEB zjieb
2006-02-11   ImageVue 0.16.1 - 'dir.php' Folder Permission Disclosure 3 WEB zjieb
2006-02-11   LinPHA 0.9.x/1.0 - 'forth_stage_install.php' Local File Inclusion 3 WEB rgod
2006-02-11   LinPHA 0.9.x/1.0 - 'sec_stage_install.php' Local File Inclusion 3 WEB rgod
2006-02-11   LinPHA 0.9.x/1.0 - 'install.php' Local File Inclusion 3 WEB rgod
2006-02-11   LinPHA 0.9.x/1.0 - 'lang' Local File Inclusion 3 WEB rgod