2005-08-01
|
|
AderSoftware CFBB 1.1 - 'index.cfm' Cross-Site Scripting
|
2 |
WEB
|
rUnViRuS
|
2005-08-01
|
|
PHPFreeNews 1.x - Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
rgod
|
2005-08-01
|
|
MySQL AB Eventum 1.x - 'get_jsrs_data.php?F' Cross-Site Scripting
|
2 |
WEB
|
GulfTech Security
|
2005-08-01
|
|
MySQL AB Eventum 1.x - 'list.php?release' Cross-Site Scripting
|
1 |
WEB
|
GulfTech Security
|
2005-08-01
|
|
MySQL AB Eventum 1.x - 'view.php?id' Cross-Site Scripting
|
2 |
WEB
|
GulfTech Security
|
2005-07-30
|
|
Ragnarok Online Control Panel 4.3.4 a - Authentication Bypass
|
3 |
WEB
|
VaLiuS
|
2005-09-30
|
|
PluggedOut CMS 0.4.8 - 'admin.php' Cross-Site Scripting
|
2 |
WEB
|
FalconDeOro
|
2005-09-30
|
|
PluggedOut CMS 0.4.8 - 'contenttypeid' SQL Injection
|
2 |
WEB
|
FalconDeOro
|
2005-07-30
|
|
Kayako Live Response 2.0 - 'index.php' Calendar Feature Multiple SQL Injections
|
2 |
WEB
|
GulfTech Security
|
2005-07-30
|
|
Kayako Live Response 2.0 - 'index.php?Username' Cross-Site Scripting
|
2 |
WEB
|
GulfTech Security
|
2005-07-29
|
|
VBZoom 1.0/1.11 - 'login.php?UserID' Cross-Site Scripting
|
2 |
WEB
|
almaster
|
2005-07-29
|
|
VBZoom 1.0/1.11 - 'profile.php?Username' Cross-Site Scripting
|
2 |
WEB
|
almaster
|
2005-07-29
|
|
Easypx41 - Multiple Variable Injection Vulnerabilities
|
2 |
WEB
|
FalconDeOro
|
2005-07-29
|
|
Easypx41 - Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
FalconDeOro
|
2005-07-28
|
|
@Mail 4.0/4.13 - Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
Lostmon
|
2005-07-28
|
|
phpList 2.8.12 - Admin Page SQL Injection
|
3 |
WEB
|
tgo
|
2005-07-27
|
|
Clever Copy 2.0 - Private Message Unauthorized Access
|
3 |
WEB
|
Lostmon
|
2005-07-27
|
|
BMForum 3.0 - 'announcesys.php' Cross-Site Scripting
|
2 |
WEB
|
Lostmon
|
2005-07-27
|
|
BMForum 3.0 - 'post.php' Cross-Site Scripting
|
2 |
WEB
|
Lostmon
|
2005-07-27
|
|
BMForum 3.0 - 'forums.php' Cross-Site Scripting
|
3 |
WEB
|
Lostmon
|
2005-07-27
|
|
BMForum 3.0 - 'topic.php' Cross-Site Scripting
|
3 |
WEB
|
Lostmon
|
2005-07-27
|
|
Clever Copy 2.0 - 'categorysearch.php' Cross-Site Scripting
|
3 |
WEB
|
Lostmon
|
2005-07-27
|
|
Clever Copy 2.0 - 'results.php' Cross-Site Scripting
|
3 |
WEB
|
Lostmon
|
2005-07-26
|
|
PNG Counter 1.0 - 'Demo.php' Cross-Site Scripting
|
3 |
WEB
|
ArCaX-ATH
|
2005-07-26
|
|
NETonE PHPBook 1.4.6 - 'Guestbook.php' Cross-Site Scripting
|
3 |
WEB
|
rgod
|
2005-07-26
|
|
CartWIZ 1.10/1.20 - 'viewcart.asp' Cross-Site Scripting
|
3 |
WEB
|
Zinho
|
2005-07-26
|
|
VBZoom Forum 1.11 - 'show.php' SQL Injection
|
3 |
WEB
|
abducter_minds@yahoo.com
|
2005-07-25
|
|
Netquery 3.1 - 'portlist.php?portnum' Cross-Site Scripting
|
3 |
WEB
|
rgod
|
2005-07-25
|
|
Netquery 3.1 - 'nqports2.php' Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
rgod
|
2005-07-25
|
|
Netquery 3.1 - 'nqports.php?step' Cross-Site Scripting
|
3 |
WEB
|
rgod
|
2005-07-25
|
|
Netquery 3.1 - 'nqgeoip.php?step' Cross-Site Scripting
|
3 |
WEB
|
rgod
|
2005-07-25
|
|
Netquery 3.1 - 'nqgeoip2.php' Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
rgod
|
2005-07-25
|
|
Netquery 3.1 - 'submit.php?portnum' Cross-Site Scripting
|
3 |
WEB
|
rgod
|
2005-07-25
|
|
Atomic Photo Album 0.x/1.0 - 'Apa_PHPInclude.INC.php' Remote File Inclusion
|
3 |
WEB
|
lwdz
|
2005-07-22
|
|
Asn Guestbook 1.5 - 'footer.php?version' Cross-Site Scripting
|
3 |
WEB
|
rgod
|
2005-07-22
|
|
Asn Guestbook 1.5 - 'header.php?version' Cross-Site Scripting
|
3 |
WEB
|
rgod
|
2005-07-22
|
|
Contrexx 1.0.4 - Multiple Input Validation Vulnerabilities
|
3 |
WEB
|
Christopher Kunz
|
2005-07-21
|
|
Pyrox Search 1.0.5 - 'Newsearch.php' Whatdoreplace Cross-Site Scripting
|
3 |
WEB
|
rgod
|
2005-07-20
|
|
Greasemonkey 0.3.3 - Multiple Remote Information Disclosure Vulnerabilities
|
3 |
WEB
|
Mark Pilgrim
|
2005-07-20
|
|
PHPNews 1.2.x - 'auth.php' SQL Injection
|
3 |
WEB
|
GHC
|
2005-07-19
|
|
Form Sender 1.0 - 'Processform.php3?Failed' Cross-Site Scripting
|
3 |
WEB
|
rgod
|
2005-07-19
|
|
FForm Sender 1.0 - 'Processform.php3?Name' Cross-Site Scripting
|
3 |
WEB
|
rgod
|
2013-06-07
|
|
Novell ZENworks Mobile Device Managment 2.6.1/2.7.0 - Local File Inclusion (Metasploit)
|
3 |
WEB
|
Metasploit
|
2013-06-07
|
|
AfterLogic WebMail Lite PHP 7.0.1 - Cross-Site Request Forgery
|
2 |
WEB
|
Pablo Ribeiro
|
2013-06-07
|
|
PHP Ticket System Beta 1 - Cross-Site Request Forgery
|
3 |
WEB
|
Pablo Ribeiro
|
2005-07-15
|
|
Novell Groupwise 6.5 Webaccess - HTML Injection
|
3 |
WEB
|
Francisco Amato
|
2013-06-07
|
|
Asus RT56U 3.0.0.4.360 - Remote Command Injection
|
3 |
WEB
|
drone
|
2005-07-18
|
|
tForum b0.9 - 'member.php' Cross-Site Scripting
|
3 |
WEB
|
wannacut
|
2013-06-07
|
|
Ruubikcms 1.1.1 - Persistent Cross-Site Scripting
|
3 |
WEB
|
expl0i13r
|
2005-07-18
|
|
e107 Website System 0.6 - Nested BBCode URL Tag Script Injection
|
3 |
WEB
|
Nick Griffin
|
2005-07-18
|
|
osCommerce 2.2 - 'update.php' Information Disclosure
|
3 |
WEB
|
Andrew Hunter
|
2005-07-15
|
|
Clever Copy 2.0 - 'calendar.php' Cross-Site Scripting
|
3 |
WEB
|
Lostmon
|
2005-07-14
|
|
Simple Message Board 2.0 beta1 - 'Search.cfm' Cross-Site Scripting
|
3 |
WEB
|
rUnViRuS
|
2005-07-14
|
|
Simple Message Board 2.0 beta1 - 'Thread.cfm' Cross-Site Scripting
|
3 |
WEB
|
rUnViRuS
|
2005-07-14
|
|
Simple Message Board 2.0 beta1 - 'User.cfm' Cross-Site Scripting
|
3 |
WEB
|
rUnViRuS
|
2005-07-14
|
|
Simple Message Board 2.0 beta1 - 'Forum.cfm' Cross-Site Scripting
|
3 |
WEB
|
rUnViRuS
|
2005-07-13
|
|
Hosting Controller 6.1 - Multiple SQL Injections
|
3 |
WEB
|
Soroush Dalili
|
2013-06-05
|
|
Netgear DGN1000 / DGN2200 - Multiple Vulnerabilities
|
3 |
WEB
|
Roberto Paleari
|
2013-06-05
|
|
Imperva SecureSphere Operations Manager 9.0.0.5 - Multiple Vulnerabilities
|
3 |
WEB
|
Pedro Andujar
|
2013-06-05
|
|
DS3 Authentication Server - Multiple Vulnerabilities
|
3 |
WEB
|
Pedro Andujar
|
2013-06-05
|
|
Ruubikcms 1.1.1 - 'tinybrowser.php?folder' Directory Traversal
|
2 |
WEB
|
expl0i13r
|
2013-06-05
|
|
Cuppa CMS - '/alertConfigField.php' Local/Remote File Inclusion
|
3 |
WEB
|
CWH Underground
|
2013-06-05
|
|
Netgear WPN824v3 - Unauthorized Configuration Download
|
3 |
WEB
|
Jens Regel
|
2013-06-05
|
|
Seowonintech Routers fw: 2.3.9 - File Disclosure
|
2 |
WEB
|
Todor Donev
|
2005-07-12
|
|
DVBBS 7.1 - 'ShowErr.asp' Cross-Site Scripting
|
3 |
WEB
|
rUnViRuS
|
2005-07-11
|
|
PHPsFTPd 0.2/0.4 - 'Inc.login.php' Privilege Escalation
|
3 |
WEB
|
Stefan Lochbihler
|
2005-07-12
|
|
Dragonfly Commerce 1.0 - Multiple SQL Injections
|
3 |
WEB
|
Diabolic Crab
|
2005-07-10
|
|
PPA 0.5.6 - 'ppa_root_path' File Inclusion
|
3 |
WEB
|
skdaemon porra
|
2005-07-11
|
|
Spid 1.3 - 'lang_path' File Inclusion
|
3 |
WEB
|
skdaemon porra
|
2005-07-10
|
|
ID Team ID Board 1.1.3 - 'SQL.CLS.php' SQL Injection
|
3 |
WEB
|
Defa
|
2005-07-08
|
|
PunBB 1.x - 'profile.php' User Profile Edit Module SQL Injection
|
3 |
WEB
|
Stefan Esser
|
2005-07-07
|
|
Comersus Open Technologies Comersus Cart 6.0.41 - Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
Diabolic Crab
|
2005-07-07
|
|
PhotoGal 1.0/1.5 - News_File Remote File Inclusion
|
3 |
WEB
|
skdaemon porra
|
2005-07-07
|
|
phpAuction 2.5 - Multiple Vulnerabilities
|
3 |
WEB
|
Dcrab
|
2005-07-07
|
|
Comersus Open Technologies Comersus Cart 6.0.41 - Multiple SQL Injections
|
3 |
WEB
|
Diabolic Crab
|
2005-07-07
|
|
Pngren 2.0.1 - 'Kaiseki.cgi' Remote Command Execution
|
3 |
WEB
|
blahplok
|
2005-07-07
|
|
Elemental Software CartWIZ 1.20 - Multiple SQL Injections
|
3 |
WEB
|
Diabolic Crab
|
2005-07-06
|
|
eRoom 6.0 PlugIn - Insecure File Download Handling
|
3 |
WEB
|
c0ntex
|
2005-07-06
|
|
McAfee IntruShield Security Management System - Multiple Vulnerabilities
|
3 |
WEB
|
c0ntex
|
2005-07-06
|
|
phpWebSite 0.7.3/0.8.x/0.9.x - 'index.php' Directory Traversal
|
3 |
WEB
|
Diabolic Crab
|
2005-07-06
|
|
Jaws 0.x - Remote File Inclusion
|
3 |
WEB
|
Stefan Esser
|
2005-07-05
|
|
MyGuestbook 0.6.1 - 'Form.Inc.php3' Remote File Inclusion
|
3 |
WEB
|
SoulBlack Group
|
2005-07-05
|
|
AutoIndex PHP Script 1.5.2 - 'index.php' Cross-Site Scripting
|
3 |
WEB
|
mozako
|
2005-07-05
|
|
GlobalNoteScript 4.20 - 'Read.cgi' Remote Command Execution
|
3 |
WEB
|
AcidCrash
|
2005-07-05
|
|
phpPgAdmin 3.x - Login Form Directory Traversal
|
2 |
WEB
|
rznvynqqe@hushmail.com
|
2005-07-04
|
|
Plague News System 0.7 - 'delete.php' Access Restriction Bypass
|
3 |
WEB
|
Easyex
|
2005-07-04
|
|
Plague News System 0.7 - 'CID' Cross-Site Scripting
|
3 |
WEB
|
Easyex
|
2005-07-04
|
|
Plague News System 0.7 - 'CID' SQL Injection
|
3 |
WEB
|
Easyex
|
2005-07-04
|
|
EasyPHPCalendar 6.1.5/6.2.x - 'setupSQL.php?serverPath' Remote File Inclusion
|
3 |
WEB
|
Albania Security Clan
|
2005-07-04
|
|
EasyPHPCalendar 6.1.5/6.2.x - 'datePicker.php?serverPath' Remote File Inclusion
|
3 |
WEB
|
Albania Security Clan
|
2005-07-04
|
|
EasyPHPCalendar 6.1.5/6.2.x - 'header.inc.php?serverPath' Remote File Inclusion
|
3 |
WEB
|
Albania Security Clan
|
2005-07-04
|
|
EasyPHPCalendar 6.1.5/6.2.x - 'popup.php?serverPath' Remote File Inclusion
|
3 |
WEB
|
Albania Security Clan
|
2005-07-04
|
|
EasyPHPCalendar 6.1.5/6.2.x - 'calendar.php?serverPath' Remote File Inclusion
|
3 |
WEB
|
Albania Security Clan
|
2005-07-01
|
|
RaXnet Cacti 0.5/0.6.x/0.8.x - 'Graph_Image.php' Remote Command Execution Variant
|
3 |
WEB
|
Alberto Trivero
|
2005-06-30
|
|
osTicket 1.2/1.3 - 'view.php?inc' Arbitrary Local File Inclusion
|
3 |
WEB
|
edisan & foster
|
2005-06-30
|
|
CyberStrong EShop 4.2 - '10browse.asp' SQL Injection
|
3 |
WEB
|
aresu@bosen.net
|
2005-06-30
|
|
fsboard 2.0 - Directory Traversal
|
3 |
WEB
|
ActualMInd
|
2005-06-30
|
|
CyberStrong eShop 4.2 - '10expand.asp' SQL Injection
|
4 |
WEB
|
aresu@bosen.net
|
2005-06-30
|
|
CyberStrong EShop 4.2 - '20review.asp' SQL Injection
|
3 |
WEB
|
aresu@bosen.net
|
2005-06-29
|
|
Community Link Pro - 'login.cgi?File' Remote Command Execution
|
3 |
WEB
|
spher3
|
2004-10-24
|
|
Phorum 5.0.11 - 'Read.php' SQL Injection
|
3 |
WEB
|
Positive Technologies
|
2005-06-29
|
|
CGI-Club imTRBBS 1.0 - Remote Command Execution
|
2 |
WEB
|
blahplok
|
2013-06-03
|
|
PHD Help Desk 2.12 - SQL Injection
|
2 |
WEB
|
drone
|
2005-06-28
|
|
Dynamic Biz Website Builder (QuickWeb) 1.0 - 'login.asp' SQL Injection
|
3 |
WEB
|
basher13
|
2005-06-28
|
|
Hosting Controller 6.1 - 'error.asp' Cross-Site Scripting
|
3 |
WEB
|
Ashiyane Digital Security Team
|
2005-06-28
|
|
Community Server Forums - 'SearchResults.aspx' Cross-Site Scripting
|
2 |
WEB
|
abducter_minds@yahoo.com
|
2005-06-27
|
|
Mensajeitor 1.8.9 - 'IP' HTML Injection
|
2 |
WEB
|
Megabyte
|
2005-06-27
|
|
ASPPlayGround.NET 3.2 SR1 - Arbitrary File Upload
|
2 |
WEB
|
Psycho
|
2005-06-27
|
|
ASPNuke 0.80 - 'Language_Select.asp' HTTP Response Splitting
|
2 |
WEB
|
Alberto Trivero
|
2005-06-27
|
|
ASPNuke 0.80 - 'register.asp' Multiple Cross-Site Scripting Vulnerabilities
|
1 |
WEB
|
Alberto Trivero
|
2005-06-27
|
|
ASPNuke 0.80 - 'forgot_password.asp?email' Cross-Site Scripting
|
2 |
WEB
|
Alberto Trivero
|
2005-06-24
|
|
K-COLLECT CSV_DB.CGI 1.0/i_DB.CGI 1.0 - Remote Command Execution
|
2 |
WEB
|
blahplok
|
2005-06-24
|
|
UBBCentral UBB.Threads 5.5.1/6.x - 'grabnext.php?posted' SQL Injection
|
2 |
WEB
|
GulfTech Security
|
2005-06-24
|
|
UBBCentral UBB.Threads 5.5.1/6.x - 'notifymod.php?Number' SQL Injection
|
2 |
WEB
|
GulfTech Security
|
2005-06-24
|
|
UBBCentral UBB.Threads 5.5.1/6.x - 'addfav.php?main' SQL Injection
|
3 |
WEB
|
GulfTech Security
|
2005-06-24
|
|
UBBCentral UBB.Threads 5.5.1/6.x - 'viewmessage.php?message' SQL Injection
|
2 |
WEB
|
GulfTech Security
|
2005-06-24
|
|
UBBCentral UBB.Threads 5.5.1/6.x - 'modifypost.php?Number' SQL Injection
|
2 |
WEB
|
GulfTech Security
|
2005-06-24
|
|
UBBCentral UBB.Threads 5.5.1/6.x - 'calendar.php' Multiple SQL Injections
|
3 |
WEB
|
GulfTech Security
|
2005-06-24
|
|
UBBCentral UBB.Threads 5.5.1/6.x - 'download.php?Number' SQL Injection
|
2 |
WEB
|
GulfTech Security
|
2005-06-23
|
|
CarLine Forum Russian Board 4.2 - 'enter.php' Multiple SQL Injections
|
3 |
WEB
|
1dt.w0lf
|
2005-06-23
|
|
CarLine Forum Russian Board 4.2 - 'in.php' Multiple SQL Injections
|
2 |
WEB
|
1dt.w0lf
|
2005-06-23
|
|
CarLine Forum Russian Board 4.2 - 'line.php' Multiple SQL Injections
|
2 |
WEB
|
1dt.w0lf
|
2005-06-23
|
|
CarLine Forum Russian Board 4.2 - 'memory.php' Multiple SQL Injections
|
2 |
WEB
|
1dt.w0lf
|
2005-06-23
|
|
CarLine Forum Russian Board 4.2 - 'edit_msg.php?name_ig_array1[1]' SQL Injection
|
2 |
WEB
|
1dt.w0lf
|
2005-06-23
|
|
CarLine Forum Russian Board 4.2 - 'new.php?name_ig_array1[1]' SQL Injection
|
2 |
WEB
|
1dt.w0lf
|