|
2004-08-21
|
|
Mantis Bug Tracker 0.x - New Account Signup Mass Emailing
|
3 |
WEB
|
Jose Antonio
|
|
2004-08-21
|
|
Mantis Bug Tracker 0.x - Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
Jose Antonio
|
|
2004-08-21
|
|
Mantis Bug Tracker 0.19 - Remote Server-Side Script Execution
|
2 |
WEB
|
Jose Antonio
|
|
2004-08-21
|
|
Sympa 4.x - New List HTML Injection
|
3 |
WEB
|
Jose Antonio
|
|
2004-07-19
|
|
Zixforum - ZixForum.mdb Database Disclosure
|
3 |
WEB
|
Security .Net Information
|
|
2004-07-18
|
|
PHP-Fusion Database Backup - Information Disclosure
|
3 |
WEB
|
Ahmad Muammar
|
|
2004-07-17
|
|
Gallery 1.4.4 - Remote Server-Side Script Execution
|
3 |
WEB
|
aCiDBiTS
|
|
2004-07-17
|
|
Merak Mail Server 7.4.5 - 'calendar.html?schedule' SQL Injection
|
3 |
WEB
|
Criolabs
|
|
2004-07-17
|
|
Merak Mail Server 7.4.5 - address.html Full Path Disclosure
|
3 |
WEB
|
Criolabs
|
|
2004-07-17
|
|
Merak Mail Server 7.4.5 - HTML Message Body Cross-Site Scripting
|
3 |
WEB
|
Criolabs
|
|
2004-07-17
|
|
Merak Mail Server 7.4.5 - 'attachment.html?attachmentpage_text_error' Cross-Site Scripting
|
3 |
WEB
|
Criolabs
|
|
2004-07-17
|
|
Merak Mail Server 7.4.5 - 'settings.html' Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
Criolabs
|
|
2004-07-17
|
|
Merak Mail Server 7.4.5 - 'address.html' Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
Criolabs
|
|
2004-07-16
|
|
RaXnet Cacti 0.6.x/0.8.x - 'Auth_Login.php' SQL Injection
|
3 |
WEB
|
Fernando Quintero
|
|
2004-07-16
|
|
PScript PForum 1.24/1.25 - User Profile HTML Injection
|
3 |
WEB
|
Christoph Jeschke
|
|
2004-07-16
|
|
CuteNews 1.3.1 - 'show_archives.php' Cross-Site Scripting
|
3 |
WEB
|
Debasis Mohanty
|
|
2004-07-15
|
|
MapInfo Discovery 1.0/1.1 - Administrative Authentication Bypass
|
3 |
WEB
|
anonymous
|
|
2004-07-15
|
|
MapInfo Discovery 1.0/1.1 - Cleartext Transmission Credential Disclosure
|
3 |
WEB
|
anonymous
|
|
2004-07-15
|
|
MapInfo Discovery 1.0/1.1 - 'MapFrame.asp?mapname' Cross-Site Scripting
|
3 |
WEB
|
anonymous
|
|
2004-07-15
|
|
MapInfo Discovery 1.0/1.1 - Remote Log File Access Information Disclosure
|
2 |
WEB
|
anonymous
|
|
2004-08-11
|
|
IceWarp Web Mail 3.3.2/5.2.7 - Multiple Remote Input Validation Vulnerabilities
|
2 |
WEB
|
ShineShadow
|
|
2013-01-25
|
|
ImageCMS 4.0.0b - Multiple Vulnerabilities
|
3 |
WEB
|
High-Tech Bridge SA
|
|
2013-01-25
|
|
WordPress Plugin SolveMedia 1.1.0 - Cross-Site Request Forgery
|
3 |
WEB
|
Junaid Hussain
|
|
2004-07-07
|
|
YaPiG 0.92 - Remote Server-Side Script Execution
|
3 |
WEB
|
aCiDBiTS
|
|
2004-08-07
|
|
PluggedOut Blog 1.51/1.60 - 'Blog_Exec.php' Cross-Site Scripting
|
2 |
WEB
|
befcake beefy
|
|
2004-08-16
|
|
Moodle 1.x - 'post.php' Cross-Site Scripting
|
2 |
WEB
|
Javier Ubilla
|
|
2004-08-04
|
|
PHP-Nuke 0-7 - Delete God Admin Access Control Bypass
|
3 |
WEB
|
Ahmad Muammar
|
|
2004-08-04
|
|
eNdonesia 8.3 - Search Form Cross-Site Scripting
|
3 |
WEB
|
Ahmad Muammar
|
|
2004-08-04
|
|
Pete Stein GoScript 2.0 - Remote Command Execution
|
3 |
WEB
|
Francisco Alisson
|
|
2004-07-30
|
|
Fusionphp Fusion News 3.3/3.6 - Administrator Command Execution
|
2 |
WEB
|
Joseph Moniz
|
|
2004-07-30
|
|
PowerPortal 1.1/1.3 - Private Message HTML Injection
|
3 |
WEB
|
vampz
|
|
2004-07-29
|
|
Jaws 0.2/0.3/0.4 - 'ControlPanel.php' SQL Injection
|
3 |
WEB
|
Fernando Quintero
|
|
2004-07-29
|
|
Verylost LostBook 1.1 - Message Entry HTML Injection
|
3 |
WEB
|
Joseph Moniz
|
|
2004-07-29
|
|
Comersus Cart 5.0 - SQL Injection
|
3 |
WEB
|
evol@ruiner.halo.nu
|
|
2004-07-28
|
|
Phorum 5.0.7 - Search Script Cross-Site Scripting
|
4 |
WEB
|
vampz
|
|
2004-07-28
|
|
AntiBoard 0.6/0.7 - 'antiboard.php?feedback' Cross-Site Scripting
|
3 |
WEB
|
Josh Gilmour
|
|
2004-07-28
|
|
AntiBoard 0.6/0.7 - 'antiboard.php' Multiple SQL Injections
|
3 |
WEB
|
Josh Gilmour
|
|
2004-07-26
|
|
PostNuke 0.72/0.75 Reviews Module - Cross-Site Scripting
|
3 |
WEB
|
DarkBicho
|
|
2013-01-24
|
|
SQLiteManager 1.2.4 - Remote PHP Code Injection
|
3 |
WEB
|
RealGame
|
|
2004-07-26
|
|
XLineSoft ASPRunner 1.0/2.x - Database Direct Request Information Disclosure
|
3 |
WEB
|
Ferruh Mavituna
|
|
2004-07-26
|
|
XLineSoft ASPRunner 1.0/2.x - 'export.asp?SQL' Cross-Site Scripting
|
3 |
WEB
|
Ferruh Mavituna
|
|
2004-07-26
|
|
XLineSoft ASPRunner 1.0/2.x - '[TABLE]_list.asp?searchFor' Cross-Site Scripting
|
3 |
WEB
|
Ferruh Mavituna
|
|
2004-07-26
|
|
XLineSoft ASPRunner 1.0/2.x - '[TABLE-NAME]_edit.asp?SQL' Cross-Site Scripting
|
3 |
WEB
|
Ferruh Mavituna
|
|
2004-07-26
|
|
XLineSoft ASPRunner 1.0/2.x - '[TABLE-NAME]_search.asp?Typeen' Cross-Site Scripting
|
3 |
WEB
|
Ferruh Mavituna
|
|
2004-07-24
|
|
EasyIns Stadtportal 4.0 - 'Site' Remote File Inclusion
|
3 |
WEB
|
Francisco Alisson
|
|
2004-07-24
|
|
PostNuke 0.7x - Install Script Administrator Password Disclosure
|
3 |
WEB
|
hellsink
|
|
2004-07-23
|
|
EasyWeb 1.0 FileManager Module - Directory Traversal
|
3 |
WEB
|
sullo@cirt.net
|
|
2004-07-21
|
|
Layton Technology HelpBox 3.0.1 - Multiple SQL Injections
|
3 |
WEB
|
Noam Rathaus
|
|
2004-07-21
|
|
Polar Helpdesk 3.0 - Cookie Based Authentication Bypass
|
3 |
WEB
|
Noam Rathaus
|
|
2004-07-21
|
|
Mensajeitor Tag Board 1.x - Authentication Bypass
|
3 |
WEB
|
Jordi Corrales
|
|
2004-07-21
|
|
Leigh Business Enterprises Web HelpDesk 4.0 - SQL Injection
|
3 |
WEB
|
Noam Rathaus
|
|
2004-07-21
|
|
NetSupport DNA HelpDesk 1.0 Problist Script - SQL Injection
|
3 |
WEB
|
Noam Rathaus
|
|
2004-07-21
|
|
Internet Software Sciences Web+Center 4.0.1 - Cookie Object SQL Injection
|
3 |
WEB
|
Noam Rathaus
|
|
2004-07-20
|
|
Nucleus CMS 3.0 / Blog:CMS 3 / PunBB 1.x - 'Common.php' Remote File Inclusion
|
3 |
WEB
|
Radek Hulan
|
|
2013-01-22
|
|
Adult WebMaster Script - Password Disclosure
|
3 |
WEB
|
Dshellnoi Unix
|
|
2013-01-22
|
|
WordPress Plugin Developer Formatter - Cross-Site Request Forgery
|
3 |
WEB
|
Junaid Hussain
|
|
2004-07-19
|
|
Adam Ismay Print Topic Mod 1.0 - SQL Injection
|
3 |
WEB
|
Bartek Nowotarski
|
|
2004-07-19
|
|
Outblaze Webmail - HTML Injection
|
3 |
WEB
|
DarkBicho
|
|
2004-07-19
|
|
CuteNews 1.3 - Comment HTML Injection
|
3 |
WEB
|
DarkBicho
|
|
2004-07-19
|
|
Artmedic Webdesign Kleinanzeigen Script - Remote File Inclusion
|
2 |
WEB
|
Adam Simuntis
|
|
2004-07-15
|
|
BoardPower Forum - 'ICQ.cgi' Cross-Site Scripting
|
3 |
WEB
|
Alexander Antipov
|
|
2004-07-15
|
|
Gattaca Server 2003 - Cross-Site Scripting
|
3 |
WEB
|
dr_insane
|
|
2004-07-15
|
|
Gattaca Server 2003 - 'Language' Path Exposure
|
3 |
WEB
|
dr_insane
|
|
2004-07-15
|
|
Gattaca Server 2003 - Null Byte Full Path Disclosure
|
3 |
WEB
|
dr_insane
|
|
2004-07-13
|
|
Moodle Help Script 1.x - Cross-Site Scripting
|
3 |
WEB
|
morpheus[bd]
|
|
2004-07-12
|
|
phpBB 2.0.x - 'viewtopic.php' PHP Script Injection
|
3 |
WEB
|
sasan hezarkhani
|
|
2013-01-21
|
|
NConf 1.3 - Arbitrary File Creation
|
3 |
WEB
|
haidao
|
|
2013-01-21
|
|
NConf 1.3 - '/detail.php/detail_admin_items.php?id' SQL Injection
|
3 |
WEB
|
haidao
|
|
2004-07-07
|
|
Comersus Open Technologies Comersus 5.0 - 'comersus_message.asp' Cross-Site Scripting
|
3 |
WEB
|
Thomas Ryan
|
|
2004-07-07
|
|
Comersus Open Technologies Comersus 5.0 - 'comersus_gatewayPayPal.asp' Price Manipulation
|
3 |
WEB
|
Thomas Ryan
|
|
2004-07-06
|
|
Jaws 0.2/0.3 - 'action' Cross-Site Scripting
|
4 |
WEB
|
Fernando Quintero
|
|
2004-07-06
|
|
Jaws 0.2/0.3 - Cookie Manipulation Authentication Bypass
|
3 |
WEB
|
Fernando Quintero
|
|
2004-07-06
|
|
Jaws 0.2/0.3 - 'gadget' Traversal Arbitrary File Access
|
3 |
WEB
|
Fernando Quintero
|
|
2004-07-05
|
|
BasiliX Webmail 1.1 - Email Header HTML Injection
|
2 |
WEB
|
Roman Medina-Heigl Hernandez
|
|
2004-07-05
|
|
Fastream NETFile FTP/Web Server 6.5/6.7 - Directory Traversal
|
3 |
WEB
|
Andres Tarasco Acuna
|
|
2004-07-05
|
|
Symantec Brightmail Anti-Spam 6.0 - Unauthorized Message Disclosure
|
3 |
WEB
|
Thomas Springer
|
|
2004-07-01
|
|
Netegrity IdentityMinder Web Edition 5.6 - Management Interface Cross-Site Scripting
|
2 |
WEB
|
vuln@hexview.com
|
|
2004-07-01
|
|
Netegrity IdentityMinder Web Edition 5.6 - Null Byte Cross-Site Scripting
|
2 |
WEB
|
vuln@hexview.com
|
|
2004-06-28
|
|
PowerPortal 1.1/1.3 - 'modules.php' Traversal Arbitrary Directory Listing
|
3 |
WEB
|
DarkBicho
|
|
2004-06-28
|
|
CuteNews 0.88/1.3 - 'show_archives.php' Cross-Site Scripting
|
3 |
WEB
|
DarkBicho
|
|
2004-06-28
|
|
CuteNews 0.88/1.3 - 'example2.php' Cross-Site Scripting
|
3 |
WEB
|
DarkBicho
|
|
2004-06-28
|
|
CuteNews 0.88/1.3 - 'example1.php' Cross-Site Scripting
|
3 |
WEB
|
DarkBicho
|
|
2004-06-28
|
|
CGIScript.net CSFAQ 1.0 Script - Full Path Disclosure
|
3 |
WEB
|
DarkBicho
|
|
2004-06-28
|
|
McMurtrey/Whitaker & Associates Cart32 2-5 GetLatestBuilds Script - Cross-Site Scripting
|
3 |
WEB
|
Dr.Ponidi Haryanto
|
|
2004-06-24
|
|
ZaireWeb Solutions NewsLetter ZWS - Administrative Interface Authentication Bypass
|
3 |
WEB
|
GaMeS
|
|
2004-06-24
|
|
vBulletin 3.0.1 - 'newreply.php?WYSIWYG_HTML' Cross-Site Scripting
|
3 |
WEB
|
Cheng Peng Su
|
|
2004-06-23
|
|
PHP-Nuke 1.0/2.5/3.0/4.x/5.x/6.x/7.x - Multiple Vulnerabilities
|
3 |
WEB
|
Janek Vind
|
|
2004-06-22
|
|
ArbitroWeb PHP Proxy 0.5/0.6 - Cross-Site Scripting
|
3 |
WEB
|
Josh Gilmour
|
|
2013-01-19
|
|
WordPress Plugin Ripe HD FLV Player - SQL Injection
|
3 |
WEB
|
Zikou-16
|
|
2013-01-19
|
|
Joomla! Component com_collector - Arbitrary File Upload
|
3 |
WEB
|
Red Dragon_al
|
|
2004-06-21
|
|
SqWebMail 4.0.4.20040524 - Email Header HTML Injection
|
3 |
WEB
|
Luca Legato
|
|
2004-06-21
|
|
osTicket STS 1.2 - Attachment Remote Command Execution
|
3 |
WEB
|
Guy Pearce
|
|
2004-06-15
|
|
phpHeaven phpMyChat 0.14.5 - 'admin.php3' Arbitrary File Access
|
3 |
WEB
|
HEX
|
|
2004-06-15
|
|
phpHeaven phpMyChat 0.14.5 - 'edituser.php3?do_not_login' Authentication Bypass
|
3 |
WEB
|
HEX
|
|
2004-06-15
|
|
phpHeaven phpMyChat 0.14.5 - 'usersL.php3' Multiple SQL Injections
|
3 |
WEB
|
HEX
|
|
2004-06-15
|
|
Web Wiz Forums 7.x - 'Registration_Rules.asp' Cross-Site Scripting
|
2 |
WEB
|
Ferruh Mavituna
|
|
2004-06-15
|
|
Pivot 1.0 - 'module_db.php' Remote File Inclusion
|
3 |
WEB
|
loofus
|
|
2013-01-18
|
|
SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x - Remote Command Execution
|
3 |
WEB
|
Nikolas Sotiriu
|
|
2013-01-18
|
|
SonicWALL GMS/Viewpoint/Analyzer - Authentication Bypass
|
3 |
WEB
|
Nikolas Sotiriu
|
|
2013-01-18
|
|
Linksys WRT54GL Firmware 4.30.15 build 2 - Multiple Vulnerabilities
|
3 |
WEB
|
m-1-k-3
|
|
2013-01-18
|
|
PHP-Charts - Arbitrary PHP Code Execution
|
2 |
WEB
|
AkaStep
|
|
2004-06-14
|
|
Invision Power Board (IP.Board) 1.3 - 'SSI.php' Cross-Site Scripting
|
3 |
WEB
|
IMAN Sharafoddin
|
|
2004-06-14
|
|
Virtual Programming VP-ASP Shoperror Script 4/5 - Cross-Site Scripting
|
3 |
WEB
|
Thomas Ryan
|
|
2004-06-14
|
|
Linksys Web Camera Software 2.10 - 'Next_file' Cross-Site Scripting
|
3 |
WEB
|
scriptX
|
|
2004-06-11
|
|
PHP-Nuke 6.x/7.x Reviews Module - Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
Janek Vind
|
|
2004-06-11
|
|
PHP-Nuke 6.x/7.x - Multiple Input Validation Vulnerabilities
|
3 |
WEB
|
Janek Vind
|
|
2004-06-11
|
|
PHP-Nuke 6.x/7.x Reviews Module - 'order' SQL Injection
|
3 |
WEB
|
Janek Vind
|
|
2004-06-11
|
|
PHP-Nuke 6.x/7.x Encyclopedia Module - Multiple Function Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
Janek Vind
|
|
2004-06-11
|
|
PHP-Nuke 6.x/7.x FAQ Module - 'categories' Cross-Site Scripting
|
3 |
WEB
|
Janek Vind
|
|
2004-06-10
|
|
BlackBoard Learning System 6.0 - Dropbox File Download
|
3 |
WEB
|
Maarten Verbeek
|
|
2004-06-11
|
|
Invision Power Board 1.3 - 'SSI.php' SQL Injection
|
3 |
WEB
|
JvdR
|
|
2004-06-09
|
|
AspDotNetStorefront 3.3 - 'ReturnURL' Cross-Site Scripting
|
3 |
WEB
|
Thomas Ryan
|
|
2004-06-09
|
|
AspDotNetStorefront 3.3 - Access Validation
|
3 |
WEB
|
Thomas Ryan
|
|
2004-06-09
|
|
cPanel 5-9 - Passwd SQL Injection
|
3 |
WEB
|
verb0s@virtualnova.net
|
|
2013-01-17
|
|
Invision Gallery 2.0.5 - SQL Injection
|
3 |
WEB
|
Ashiyane Digital Security Team
|
|
2004-06-07
|
|
NetWin Surgemail 1.8/1.9/2.0 / WebMail 3.1 - Login Form Cross-Site Scripting
|
3 |
WEB
|
Donnie Werner
|
|
2004-06-07
|
|
NetWin Surgemail 1.8/1.9/2.0 / WebMail 3.1 - Error Message Full Path Disclosure
|
3 |
WEB
|
Donnie Werner
|
|
2004-06-07
|
|
Linksys Web Camera Software 2.10 - 'Next_file' File Disclosure
|
3 |
WEB
|
John Doe
|
|
2004-06-05
|
|
cPanel 5-9 - Killacct Script Customer Account DNS Information Deletion
|
3 |
WEB
|
qbann targ
|
|
2004-06-04
|
|
Crafty Syntax Live Help 2.7.3 - Multiple HTML Injection Vulnerabilities
|
3 |
WEB
|
HNK Technology Solutions
|
|
2004-06-03
|
|
Mail Manage EX 3.1.8 MMEX - 'Settings' PHP Remote File Inclusion
|
2 |
WEB
|
The Warlock [BhQ]
|
|
2004-06-03
|
|
SquirrelMail 1.2.x - From Email Header HTML Injection
|
3 |
WEB
|
anonymous
|
|
2004-06-01
|
|
PHP-Nuke 5.x/6.x/7.x - Direct Script Access Security Bypass
|
3 |
WEB
|
Squid
|
|
2004-06-01
|
|
Rit Research Labs TinyWeb 1.9.2 - Unauthorized Script Disclosure
|
3 |
WEB
|
Ziv Kamir
|
|
2013-01-16
|
|
Oracle Application Framework - Diagnostic Mode Bypass
|
3 |
WEB
|
Trustwave's SpiderLabs
|
