Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2005-05-26   BookReview 1.0 - 'suggest_category.htm?node' Cross-Site Scripting 3 WEB Lostmon
2005-05-26   BookReview 1.0 - 'add_contents.htm' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Lostmon
2005-05-26   BookReview 1.0 - 'add_review.htm' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Lostmon
2013-05-26   RadioCMS 2.2 - 'menager.php?playlist_id' SQL Injection 3 WEB Rooster(XEKA)
2013-05-26   WordPress Plugin Spider Catalog 1.4.6 - Multiple Vulnerabilities 3 WEB waraxe
2013-05-26   WordPress Plugin Spider Event Calendar 1.3.0 - Multiple Vulnerabilities 3 WEB waraxe
2013-05-26   WordPress Plugin User Role Editor 3.12 - Cross-Site Request Forgery 3 WEB Henry Hoggard
2013-05-26   Vanilla Forums 2.0.18.8 - Multiple Vulnerabilities 3 WEB Henry Hoggard
2013-05-26   AVE.CMS 2.09 - 'index.php?module' Blind SQL Injection 3 WEB mr.pr0n
2013-05-26   HP LaserJet Pro P1606dn - Webadmin Password Reset 3 WEB m3tamantra
2005-05-25   FunkyASP AD Systems 1.1 - 'login.asp' SQL Injection 3 WEB Romty
2005-05-25   PHP Poll Creator 1.0.1 - 'Poll_Vote.php' Remote File Inclusion 3 WEB rash ilusion
2005-05-24   Sun JavaMail 1.x - Multiple Information Disclosure Vulnerabilities 3 WEB Ricky Latt
2005-05-24   Spread The Word - Multiple SQL Injections 3 WEB Lostmon
2005-05-24   Spread The Word - Multiple Cross-Site Scripting Vulnerabilities 2 WEB Lostmon
2005-05-24   GForge 3.x - Arbitrary Command Execution 3 WEB Filippo Spike Morelli
2005-05-23   PortailPHP 1.3 - 'ID' SQL Injection 2 WEB CENSORED Search Vulnerabilities
2003-05-20   EJ3 TOPo 2.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Lostmon
2005-05-19   PHP Advanced Transfer Manager 1.21 - Arbitrary File Inclusion 3 WEB Ingvar Gilbert
2005-05-19   Sun JavaMail 1.3 - API MimeMessage Infromation Disclosure 3 WEB Ricky Latt
2005-05-24   HelpCenter Live! 1.0/1.2.x - Multiple Input Validation Vulnerabilities 3 WEB GulfTech Security
2005-05-17   WordPress Core 1.5 - 'post.php' Cross-Site Scripting 3 WEB Thomas Waldegger
2005-05-24   Fusionphp Fusion News 3.3/3.6 - X-Forworded-For PHP Script Code Injection 3 WEB Network security team
2005-05-16   JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_sponsor.php?id' SQL Injection 2 WEB deluxe@security-project.org
2005-05-16   JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_mitgraf.php?year' SQL Injection 3 WEB deluxe@security-project.org
2005-05-16   JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_themengraf.php?year' SQL Injection 3 WEB deluxe@security-project.org
2005-05-16   JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_viewsgraf.php?tag' SQL Injection 3 WEB deluxe@security-project.org
2005-05-16   JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_beitraggraf.php?year' SQL Injection 3 WEB deluxe@security-project.org
2005-05-16   JGS-Portal 3.0.1/3.0.2 - 'jgs_portal.php?anzahl_beitraege' SQL Injection 2 WEB deluxe@security-project.org
2005-05-16   JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_statistik.php?year' SQL Injection 3 WEB deluxe@security-project.org
2005-05-16   NPDS 4.8/5.0 - 'pollcomments.php?thold' SQL Injection 2 WEB NoSP
2005-05-16   NPDS 4.8/5.0 - 'comments.php?thold' SQL Injection 3 WEB NoSP
2005-05-16   Sigma ISP Manager 6.6 - 'Sigmaweb.dll' SQL Injection 3 WEB mehran gashtasebi
2005-05-16   MetaCart E-Shop - 'ProductsByCategory.asp' Cross-Site Scripting 3 WEB Dedi Dwianto
2005-05-16   PServ 3.2 - Source Code Disclosure 3 WEB Claus R. F. Overbeck
2005-05-16   PostNuke 0.75/0.76 Blocks Module - Directory Traversal 3 WEB pokley
2005-05-16   Shop-Script - ProductID SQL Injection 3 WEB CENSORED Search Vulnerabilities
2005-05-16   Shop-Script - categoryId SQL Injection 3 WEB CENSORED Search Vulnerabilities
2005-05-14   Skull-Splitter Guestbook 1.0/2.0/2.2 - Multiple HTML Injection Vulnerabilities 3 WEB Morinex Eneco
2005-05-01   Keyvan1 ImageGallery - Database Disclosure 3 WEB g0rellazz G0r
2005-05-13   PHPHeaven PHPMyChat 0.14.5 - 'Style.CSS.php3' Cross-Site Scripting 3 WEB Megasky
2005-05-13   PHPHeaven PHPMyChat 0.14.5 - 'Start-Page.CSS.php3' Cross-Site Scripting 2 WEB Megasky
2005-05-13   OpenBB 1.0.8 - 'member.php' Cross-Site Scripting 3 WEB Megasky
2005-05-13   OpenBB 1.0.8 - 'Read.php' SQL Injection 3 WEB Megasky
2005-05-13   Ultimate PHP Board 1.8/1.9 - 'viewforum.php' SQL Injection 3 WEB Morinex Eneco
2005-05-13   Ultimate PHP Board 1.8/1.9 - 'viewforum.php' Cross-Site Scripting 3 WEB Morinex Eneco
2005-05-12   DirectTopics 2 - 'topic.php' SQL Injection 3 WEB Morinex Eneco
2005-05-11   Maxwebportal 1.3x - 'post.asp' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Zinho
2005-05-11   Open Solution Quick.Cart 0.3 - 'index.php' Cross-Site Scripting 3 WEB Lostmon
2011-05-11   showoff! digital media software 1.5.4 - Multiple Vulnerabilities 3 WEB dr_insane
2005-05-10   e107 Website System 0.617 - 'Forum_viewforum.php' SQL Injection 3 WEB Heintz
2005-05-10   e107 Website System 0.617 - 'Request.php' Directory Traversal 3 WEB Heintz
2005-05-10   NukeET 3.0/3.1 - Base64 Codigo Variable Cross-Site Scripting 3 WEB Suko & Lostmon
2005-05-10   WowBB 1.6 - 'View_User.php' SQL Injection 3 WEB Megasky
2005-05-09   PWSPHP 1.1/1.2 - 'Profil.php' SQL Injection 3 WEB SecuBox fRoGGz
2005-05-09   PWSPHP 1.2 - Multiple Cross-Site Scripting Vulnerabilities 3 WEB SecuBox fRoGGz
2005-05-09   CodeThatShoppingCart 1.3.1 - 'catalog.php?id' SQL Injection 3 WEB Lostmon
2005-05-09   CodeThatShoppingCart 1.3.1 - 'catalog.php?id' Cross-Site Scripting 3 WEB Lostmon
2005-05-09   PHP-Nuke 0-7 - Double Hex Encoded Input Validation 3 WEB fistfuxxer@gmx.de
2005-05-09   Easy Message Board - Remote Command Execution 3 WEB SoulBlack Group
2005-05-09   Easy Message Board - Directory Traversal 3 WEB SoulBlack Group
2005-05-09   Advanced Guestbook 2.3.1/2.4 - 'index.php?Entry' SQL Injection 3 WEB Spy Hat
2005-05-09   phpBB 2.0.x - 'BBCode.php' URL Tag 3 WEB Papados
2005-05-06   CJ Ultra Plus 1.0.3/1.0.4 - 'OUT.php' SQL Injection 3 WEB Kold
2005-05-05   MegaBook 2.0/2.1 - 'Admin.cgi?EntryID' Cross-Site Scripting 3 WEB Spy Hat
2005-05-05   MidiCart PHP - 'Item_List.php?MainGroup' Cross-Site Scripting 2 WEB Exoduks
2005-05-05   MidiCart PHP - 'Item_List.php?SecondGroup' Cross-Site Scripting 2 WEB Exoduks
2005-05-05   MidiCart PHP - 'Search_List.php?SearchString' Cross-Site Scripting 3 WEB Exoduks
2005-05-05   MidiCart PHP - 'Item_Show.php?Code_No' SQL Injection 3 WEB Exoduks
2005-05-05   MidiCart PHP - 'Item_List.php?SecondGroup' SQL Injection 3 WEB Exoduks
2005-05-05   MidiCart PHP - 'Item_List.php?MainGroup' SQL Injection 3 WEB Exoduks
2005-05-05   MidiCart PHP - 'Search_List.php?SearchString' SQL Injection 3 WEB Exoduks
2005-05-05   MyBloggie 2.1 - 'index.php' Cross-Site Scripting 3 WEB Alberto Trivero
2013-05-21   Kimai 0.9.2.1306-3 - SQL Injection 3 WEB drone
2013-05-21   WordPress Plugin ProPlayer 4.7.9.1 - SQL Injection 3 WEB Ashiyane Digital Security Team
2005-05-04   FishCart 3.1 - 'upstnt.php?cartid' SQL Injection 3 WEB Dcrab
2005-05-04   FishCart 3.1 - 'display.php?psku' SQL Injection 3 WEB Dcrab
2005-05-04   FishCart 3.1 - 'upstracking.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Dcrab
2005-05-04   FishCart 3.1 - 'display.php?nlst' Cross-Site Scripting 3 WEB Dcrab
2005-05-04   Interspire articlelive 2005 - Multiple Vulnerabilities 3 WEB Dcrab
2005-05-04   ASP Inline Corporate Calendar 3.6.3 - 'Details.asp' SQL Injection 3 WEB Zinho
2005-05-04   ASP Inline Corporate Calendar 3.6.3 - 'Defer.asp' SQL Injection 3 WEB Zinho
2005-05-04   Gossamer Threads Links 2.x - 'User.cgi' Cross-Site Scripting 3 WEB Nathan House
2005-05-03   Invision Power Board (IP.Board) 2.0.3/2.1 - 'Act' Cross-Site Scripting 3 WEB arron ward
2005-05-03   WebCrossing WebX 5.0 - Cross-Site Scripting 3 WEB dr_insane
2005-05-03   SitePanel2 2.6.1 - Multiple Input Validation Vulnerabilities 3 WEB GulfTech Security
2005-05-03   osTicket 1.2/1.3 - Multiple Input Validation / Remote Code Injection Vulnerabilities 3 WEB GulfTech Security
2005-05-02   Maxwebportal 1.3 - 'custom_link.asp' Multiple SQL Injections 2 WEB s-dalili
2005-05-02   Maxwebportal 1.3 - 'dl_toprated.asp' SQL Injection 3 WEB s-dalili
2005-05-02   Maxwebportal 1.3 - 'pic_popular.asp' SQL Injection 3 WEB s-dalili
2005-05-02   Maxwebportal 1.3 - 'links_popular.asp' SQL Injection 3 WEB s-dalili
2005-05-02   Maxwebportal 1.3 - 'dl_popular.asp' SQL Injection 3 WEB s-dalili
2005-05-02   CodetoSell ViArt Shop Enterprise 2.1.6 - 'news_view.php' Multiple Cross-Site Scripting Vulnerabiliti 3 WEB Lostmon
2005-05-02   CodetoSell ViArt Shop Enterprise 2.1.6 - 'products.php' Multiple Cross-Site Scripting Vulnerabilitie 3 WEB Lostmon
2005-05-02   CodetoSell ViArt Shop Enterprise 2.1.6 - 'product_details.php?category_id' Cross-Site Scripting 3 WEB Lostmon
2005-05-02   CodetoSell ViArt Shop Enterprise 2.1.6 - 'reviews.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Lostmon
2005-05-02   CodetoSell ViArt Shop Enterprise 2.1.6 - 'page.php?page' Cross-Site Scripting 3 WEB Lostmon
2005-05-02   CodetoSell ViArt Shop Enterprise 2.1.6 - 'basket.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Lostmon
2005-04-30   JGS-Portal 3.0.1 - 'ID' SQL Injection 3 WEB admin@batznet.com
2005-04-28   phpCOIN 1.2 Pages Module - Multiple SQL Injections 3 WEB Dcrab
2005-04-28   phpCOIN 1.2 - 'login.php?PHPcoinsessid' SQL Injection 3 WEB Dcrab
2005-04-28   Just William's Amazon Webstore - HTTP Response Splitting 3 WEB Lostmon
2005-04-28   Just William's Amazon Webstore - 'CurrentNumber' Cross-Site Scripting 3 WEB Lostmon
2005-04-28   Just William's Amazon Webstore - 'searchFor' Cross-Site Scripting 3 WEB Lostmon
2005-04-28   Just William's Amazon Webstore - 'CurrentIsExpanded' Cross-Site Scripting 3 WEB Lostmon
2005-04-28   Just William's Amazon Webstore - 'Closeup.php?Image' Cross-Site Scripting 3 WEB Lostmon
2005-04-28   phpBB Notes Module - SQL Injection 3 WEB GulfTech Security
2005-04-27   Dream4 Koobi CMS 4.2.3 - 'index.php?Q' SQL Injection 3 WEB CENSORED Search Vulnerabilities
2005-04-27   Dream4 Koobi CMS 4.2.3 - 'index.php?P' SQL Injection 3 WEB CENSORED Search Vulnerabilities
2005-04-27   Claroline E-Learning 1.5/1.6 - 'exercises_details.php?exo_id' SQL Injection 3 WEB Sieg Fried
2005-04-27   Claroline E-Learning 1.5/1.6 - 'userInfo.php' Multiple SQL Injections 3 WEB Sieg Fried
2005-04-27   Claroline 1.5/1.6 - 'myagenda.php?coursePath' Cross-Site Scripting 3 WEB Sieg Fried
2005-04-27   Claroline 1.5/1.6 - 'user_access_details.php?data' Cross-Site Scripting 3 WEB Sieg Fried
2005-04-27   Claroline 1.5/1.6 - 'toolaccess_details.php?tool' Cross-Site Scripting 3 WEB Sieg Fried
2005-04-27   PHPCart - Input Validation 3 WEB Lostmon
2004-04-26   BBlog 0.7.4 - 'PostID' SQL Injection 2 WEB jericho+bblog@attrition.org
2005-04-26   MetaBid Auctions - 'intAuctionID' SQL Injection 3 WEB Dcrab
2005-04-26   MetaCart2 - 'SearchAction.asp' Multiple SQL Injections 3 WEB Dcrab
2005-04-26   MetaCart2 - 'strSubCatalog_NAME' SQL Injection 3 WEB Dcrab
2005-04-26   MetaCart2 - 'CurCatalogID' SQL Injection 3 WEB Dcrab
2005-04-26   MetaCart2 - 'StrSubCatalogID' SQL Injection 3 WEB Dcrab
2005-04-26   MetaCart2 - 'IntCatalogID' SQL Injection 3 WEB Dcrab
2005-04-26   GrayCMS 1.1 - 'error.php' Remote File Inclusion 3 WEB Kold
2005-04-26   MetaCart E-Shop V-8 - 'StrCatalog_NAME' SQL Injection 2 WEB Dcrab
2005-04-26   MetaCart E-Shop V-8 - 'IntProdID' SQL Injection 2 WEB Dcrab