|
2012-07-06
|
|
sflog! 1.00 - Multiple Vulnerabilities
|
2 |
WEB
|
dun
|
|
2012-07-05
|
|
CLscript CMS 3.0 - Multiple Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-07-05
|
|
Freeside SelfService CGI/API 2.3.3 - Multiple Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-07-05
|
|
Guestbook Scripts PHP 1.5 - Multiple Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-07-04
|
|
Webify Link Directory - SQL Injection
|
2 |
WEB
|
Daniel Godoy
|
|
2012-07-04
|
|
Tiki Wiki CMS Groupware 8.3 - 'Unserialize()' PHP Code Execution
|
2 |
WEB
|
EgiX
|
|
2012-07-04
|
|
WordPress Plugin MoodThingy Widget 0.8.7 - Blind SQL Injection
|
2 |
WEB
|
Chris Kellum
|
|
2012-07-03
|
|
phpMyBackupPro 2.2 - Local File Inclusion
|
2 |
WEB
|
dun
|
|
2012-07-03
|
|
CLscript Classified Script 3.0 - SQL Injection
|
2 |
WEB
|
Daniel Godoy
|
|
2012-07-03
|
|
gpEasy CMS Minishop 1.5 Plugin - Persistent Cross-Site Scripting
|
2 |
WEB
|
Carlos Mario Penagos Hollmann
|
|
2012-07-02
|
|
WANGKONGBAO CNS-1000 UTM IPS-FW - Directory Traversal (Metasploit)
|
2 |
WEB
|
Dillon Beresford
|
|
2012-07-02
|
|
Microsoft IIS - Short File/Folder Name Disclosure
|
1 |
WEB
|
Soroush Dalili
|
|
2012-07-02
|
|
WordPress Plugin Backup 2.0.1 - Information Disclosure
|
2 |
WEB
|
Stephan Knauss
|
|
2012-06-30
|
|
WordPress Plugin Paid Business Listings 1.0.2 - Blind SQL Injection
|
2 |
WEB
|
Chris Kellum
|
|
2012-06-29
|
|
specview 2.5 build 853 - Directory Traversal
|
1 |
WEB
|
Luigi Auriemma
|
|
2012-06-29
|
|
phpmoneybooks 1.03 - Persistent Cross-Site Scripting
|
2 |
WEB
|
chap0
|
|
2012-06-28
|
|
Openfire Server 3.6.0a - Admin Console Authentication Bypass (Metasploit)
|
2 |
WEB
|
Metasploit
|
|
2012-06-28
|
|
webERP 4.08.1 - Local/Remote File Inclusion
|
1 |
WEB
|
dun
|
|
2012-06-27
|
|
Zend Framework < 2.0.0 beta4 < 1.12 RC1 < 1.11.11 - Local File Disclosure
|
2 |
WEB
|
SEC Consult
|
|
2012-06-27
|
|
symantec Web gateway 5.0.2.8 - Multiple Vulnerabilities
|
2 |
WEB
|
S2 Crew
|
|
2012-06-26
|
|
SugarCRM CE 6.3.1 - 'Unserialize()' PHP Code Execution (Metasploit)
|
2 |
WEB
|
Metasploit
|
|
2012-06-26
|
|
WordPress Plugin Website FAQ 1.0 - SQL Injection
|
1 |
WEB
|
Chris Kellum
|
|
2012-06-25
|
|
WordPress Plugin Fancy Gallery 1.2.4 - Arbitrary File Upload
|
2 |
WEB
|
Sammy FORGIT
|
|
2012-06-25
|
|
Parodia 6.8 - 'employer-profile.asp' SQL Injection
|
0 |
WEB
|
Carlos Mario Penagos Hollmann
|
|
2012-06-24
|
|
UCCASS 1.8.1 - Blind SQL Injection
|
1 |
WEB
|
dun
|
|
2012-06-23
|
|
SugarCRM CE 6.3.1 - 'Unserialize()' PHP Code Execution
|
1 |
WEB
|
EgiX
|
|
2012-06-22
|
|
SoftPerfect Bandwidth Manager 2.9.10 - Authentication Bypass
|
2 |
WEB
|
Gitsnik
|
|
2012-06-22
|
|
LimeSurvey 1.92+ build120620 - Multiple Vulnerabilities
|
2 |
WEB
|
dun
|
|
2012-06-22
|
|
agora project 2.13.1 - Multiple Vulnerabilities
|
2 |
WEB
|
Chris Russell
|
|
2012-06-21
|
|
Commentics 2.0 - Multiple Vulnerabilities
|
1 |
WEB
|
Jean Pascal Pereira
|
|
2012-06-21
|
|
traq 2.3.5 - Multiple Vulnerabilities
|
2 |
WEB
|
AkaStep
|
|
2012-06-21
|
|
IBM System Storage DS Storage Manager Profiler - Multiple Vulnerabilities
|
2 |
WEB
|
LiquidWorm
|
|
2012-06-20
|
|
WordPress Plugin Schreikasten 0.14.13 - Cross-Site Scripting
|
2 |
WEB
|
Henry Hoggard
|
|
2012-06-19
|
|
iBoutique eCommerce 4.0 - Multiple Web Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-06-18
|
|
MyTickets 1.x < 2.0.8 - Blind SQL Injection
|
1 |
WEB
|
al-swisre
|
|
2012-06-18
|
|
QNAP Turbo NAS 3.6.1 Build 0302T - Multiple Vulnerabilities
|
1 |
WEB
|
Sense of Security
|
|
2012-06-16
|
|
iScripts EasyCreate 2.0 - Multiple Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-06-16
|
|
Nuked Klan SP CMS 4.5 - SQL Injection
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-06-16
|
|
WordPress Plugin Automatic 2.0.3 - SQL Injection
|
2 |
WEB
|
nick58
|
|
2012-06-16
|
|
Huawei HG866 - Authentication Bypass
|
1 |
WEB
|
hkm
|
|
2012-06-16
|
|
News Script PHP 1.2 - Multiple Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-06-16
|
|
PHP Decoda 3.3.1 - Local File Inclusion
|
2 |
WEB
|
Number 7
|
|
2012-06-16
|
|
webo site speedup 1.6.1 - Multiple Vulnerabilities
|
2 |
WEB
|
dun
|
|
2012-06-15
|
|
Useresponse 1.0.2 - Privilege Escalation / Remote Code Execution
|
1 |
WEB
|
mr_me
|
|
2012-06-14
|
|
qdPM 7 - Arbitrary File upload
|
2 |
WEB
|
loneferret
|
|
2012-06-14
|
|
Squirrelcart Cart Shop 3.3.4 - Multiple Web Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-06-14
|
|
Swoopo Gold Shop CMS 8.4.56 - Multiple Web Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-06-14
|
|
Cells Blog CMS 1.1 - Multiple Web Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-06-14
|
|
Myre Real Estate Mobile 2012 - Multiple Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-06-13
|
|
WordPress Plugin Foxypress - 'Uploadify.php' Arbitrary Code Execution (Metasploit)
|
2 |
WEB
|
Metasploit
|
|
2012-06-13
|
|
WordPress Plugin Foxypress - 'Uploadify.php' Arbitrary Code Execution (Metasploit)
|
2 |
WEB
|
Metasploit
|
|
2012-06-12
|
|
Symantec Web Gateway 5.0.2.8 - 'ipchange.php' Command Injection (Metasploit)
|
2 |
WEB
|
Metasploit
|
|
2012-06-11
|
|
TheBlog 2.0 - Multiple Vulnerabilities
|
2 |
WEB
|
WhiteCollarGroup
|
|
2012-06-11
|
|
Agora-Project 2.12.11 - Arbitrary File Upload
|
2 |
WEB
|
Misa3l
|
|
2012-06-11
|
|
WordPress Plugin Custom Content Type Manager 0.9.5.13-pl - Arbitrary File Upload
|
2 |
WEB
|
Adrien Thierry
|
|
2012-06-11
|
|
WordPress Plugin drag and drop file upload 0.1 - Arbitrary File Upload
|
2 |
WEB
|
Adrien Thierry
|
|
2012-06-11
|
|
WordPress Plugin Mac Photo Gallery 2.7 - Arbitrary File Upload
|
2 |
WEB
|
Adrien Thierry
|
|
2012-06-11
|
|
WordPress Plugin Pica Photo Gallery 1.0 - Arbitrary File Upload
|
1 |
WEB
|
Adrien Thierry
|
|
2012-06-11
|
|
WordPress Plugin SfBrowser 1.4.5 - Arbitrary File Upload
|
2 |
WEB
|
Adrien Thierry
|
|
2012-06-11
|
|
WordPress Plugin Top Quark Architecture 2.10 - Arbitrary File Upload
|
2 |
WEB
|
Adrien Thierry
|
|
2012-06-11
|
|
WordPress Plugin User Meta 1.1.1 - Arbitrary File Upload
|
2 |
WEB
|
Adrien Thierry
|
|
2012-06-11
|
|
ClanSuite 2.9 - Arbitrary File Upload
|
2 |
WEB
|
Adrien Thierry
|
|
2012-06-11
|
|
WordPress Plugin wp-gpx-map 1.1.21 - Arbitrary File Upload
|
2 |
WEB
|
Adrien Thierry
|
|
2012-06-10
|
|
Symantec Web Gateway 5.0.2.8 - Arbitrary '.PHP' File Upload (Metasploit)
|
2 |
WEB
|
Metasploit
|
|
2012-06-10
|
|
WordPress Plugin Content Flow 3D 1.0.0 - Arbitrary File Upload
|
2 |
WEB
|
g11tch
|
|
2012-06-10
|
|
freepost 0.1 r1 - Multiple Vulnerabilities
|
2 |
WEB
|
ThE g0bL!N
|
|
2012-06-10
|
|
Webspell dailyinput Movie Addon 4.2.x - SQL Injection
|
2 |
WEB
|
Easy Laster
|
|
2012-06-08
|
|
phpAcounts 0.5.3 - SQL Injection
|
2 |
WEB
|
loneferret
|
|
2012-06-08
|
|
WordPress Plugin wpStoreCart 2.5.27-2.5.29 - Arbitrary File Upload
|
2 |
WEB
|
Sammy FORGIT
|
|
2012-06-08
|
|
WordPress Plugin TinyMCE Thumbnail Gallery 1.0.7 - Remote File Disclosure
|
2 |
WEB
|
Sammy FORGIT
|
|
2012-06-08
|
|
WordPress Plugin Thinkun Remind 1.1.3 - Remote File Disclosure
|
2 |
WEB
|
Sammy FORGIT
|
|
2012-06-08
|
|
WordPress Plugin Simple Download Button ShortCode 1.0 - Remote File Disclosure
|
1 |
WEB
|
Sammy FORGIT
|
|
2012-06-08
|
|
WordPress Plugin RBX Gallery 2.1 - Arbitrary File Upload
|
2 |
WEB
|
Sammy FORGIT
|
|
2012-06-08
|
|
WordPress Plugin NewsLetter 1.5 - Remote File Disclosure
|
2 |
WEB
|
Sammy FORGIT
|
|
2012-06-08
|
|
WordPress Plugin PICA Photo Gallery 1.0 - Remote File Disclosure
|
2 |
WEB
|
Sammy FORGIT
|
|
2012-06-08
|
|
WordPress Plugin Easy Contact Forms Export 1.1.0 - Information Disclosure
|
2 |
WEB
|
Sammy FORGIT
|
|
2012-06-08
|
|
WordPress Plugin Front File Manager 0.1 - Arbitrary File Upload
|
2 |
WEB
|
Adrien Thierry
|
|
2012-06-08
|
|
Webspell FIRSTBORN Movie-Addon - Blind SQL Injection
|
2 |
WEB
|
Easy Laster
|
|
2012-06-07
|
|
WordPress Plugin Omni Secure Files 0.1.13 - Arbitrary File Upload
|
2 |
WEB
|
Adrien Thierry
|
|
2012-06-07
|
|
WordPress Plugin Front End Upload 0.5.3 - Arbitrary File Upload
|
1 |
WEB
|
Adrien Thierry
|
|
2012-06-07
|
|
PHPNet 1.8 - 'ler.php' SQL Injection
|
2 |
WEB
|
WhiteCollarGroup
|
|
2012-06-07
|
|
SN News 1.2 - '/admin/loger.php' Authentication Bypass
|
2 |
WEB
|
Yakir Wizman
|
|
2012-06-06
|
|
vanilla kpoll plugin 1.2 - Persistent Cross-Site Scripting
|
2 |
WEB
|
Henry Hoggard
|
|
2012-06-06
|
|
SN News 1.2 - 'visualiza.php' SQL Injection
|
2 |
WEB
|
WhiteCollarGroup
|
|
2012-06-06
|
|
WordPress Plugin Gallery 3.06 - Arbitrary File Upload
|
2 |
WEB
|
Sammy FORGIT
|
|
2012-06-06
|
|
WordPress Plugin MM Forms Community 2.2.6 - Arbitrary File Upload
|
2 |
WEB
|
Sammy FORGIT
|
|
2012-06-06
|
|
WordPress Plugin Font Uploader 1.2.4 - Arbitrary File Upload
|
2 |
WEB
|
Sammy FORGIT
|
|
2012-06-05
|
|
WordPress Plugin Asset Manager 0.2 - Arbitrary File Upload
|
2 |
WEB
|
Sammy FORGIT
|
|
2012-06-05
|
|
WordPress Plugin Foxypress 0.4.1.1 < 0.4.2.1 - Arbitrary File Upload
|
2 |
WEB
|
Sammy FORGIT
|
|
2012-06-05
|
|
WordPress Plugin HTML5 AV Manager 0.2.7 - Arbitrary File Upload
|
2 |
WEB
|
Sammy FORGIT
|
|
2012-06-05
|
|
WordPress Plugin Google Maps via Store Locator 2.7.1 < 3.0.1 - Multiple Vulnerabilities
|
2 |
WEB
|
Sammy FORGIT
|
|
2012-06-05
|
|
WordPress Plugin Marketplace Plugin 1.5.0 < 1.6.1 - Arbitrary File Upload
|
1 |
WEB
|
Sammy FORGIT
|
|
2012-06-05
|
|
WordPress Plugin WP-Property 1.35.0 - Arbitrary File Upload
|
2 |
WEB
|
Sammy FORGIT
|
|
2012-06-05
|
|
pyrocms 2.1.1 - Multiple Vulnerabilities
|
2 |
WEB
|
LiquidWorm
|
|
2012-06-04
|
|
Mnews 1.1 - 'view.php' SQL Injection
|
1 |
WEB
|
WhiteCollarGroup
|
|
2012-06-04
|
|
Hexamail Server 4.4.5 - Persistent Cross-Site Scripting
|
2 |
WEB
|
modpr0be
|
|
2012-06-03
|
|
Vanilla Forums 2.0.18.4 - Tagging Persistent Cross-Site Scripting
|
1 |
WEB
|
Henry Hoggard
|
|
2012-06-03
|
|
vanilla forums poll plugin 0.9 - Persistent Cross-Site Scripting
|
2 |
WEB
|
Henry Hoggard
|
|
2012-06-03
|
|
Log1 CMS - 'writeInfo()' PHP Code Injection (Metasploit)
|
2 |
WEB
|
Metasploit
|
|
2012-06-02
|
|
Vanilla Forum Tagging Plugin Enchanced 1.0.1 - Persistent Cross-Site Scripting
|
2 |
WEB
|
Henry Hoggard
|
|
2012-06-01
|
|
Membris 2.0.1 - Multiple Vulnerabilities
|
2 |
WEB
|
Dr.abolalh
|
|
2012-06-01
|
|
4PSA VoIPNow Professional 2.5.3 - Multiple Vulnerabilities
|
2 |
WEB
|
Aboud-el
|
|
2012-05-31
|
|
Supernews 2.6.1 - 'noticias.php?cat' SQL Injection
|
2 |
WEB
|
Yakir Wizman
|
|
2012-05-31
|
|
NewsAdd 1.0 - 'lerNoticia.php?id' SQL Injection
|
2 |
WEB
|
Yakir Wizman
|
|
2012-05-31
|
|
PHP Volunteer Management System 1.0.2 - Arbitrary File Upload (Metasploit)
|
2 |
WEB
|
Metasploit
|
|
2012-05-30
|
|
Simple Web Content Management System 1.1 < 1.3 - Multiple SQL Injections
|
2 |
WEB
|
loneferret
|
|
2012-05-30
|
|
Ganesha Digital Library 4.0 - Multiple Vulnerabilities
|
2 |
WEB
|
X-Cisadane
|
|
2012-05-30
|
|
NewsAdd 1.0 - Multiple SQL Injections
|
2 |
WEB
|
WhiteCollarGroup
|
|
2012-05-29
|
|
PBBoard 2.1.4 - Multiple SQL Injections
|
1 |
WEB
|
loneferret
|
|
2012-05-28
|
|
PHP Volunteer Management System 1.0.2 - Multiple SQL Injections
|
2 |
WEB
|
loneferret
|
|
2012-05-28
|
|
PHP Volunteer Management System 1.0.2 - Multiple Vulnerabilities
|
1 |
WEB
|
Ashoo
|
|
2012-05-28
|
|
PBBoard 2.1.4 - Local File Inclusion
|
2 |
WEB
|
n4ss1m
|
|
2012-05-27
|
|
b2ePms 1.0 - Multiple SQL Injection Vulnerabilities
|
2 |
WEB
|
loneferret
|
|
2012-05-27
|
|
WeBid - 'converter.php' Remote PHP Code Injection (Metasploit)
|
2 |
WEB
|
Metasploit
|
|
2012-05-26
|
|
Symantec Web Gateway 5.0.2 - Local/Remote File Inclusion / Remote Code Execution
|
2 |
WEB
|
muts
|
|
2012-05-25
|
|
SocialEngine 4.2.2 - Multiple Vulnerabilities
|
2 |
WEB
|
i4k
|
|
2012-05-25
|
|
appRain CMF - Arbitrary '.PHP' File Upload (Metasploit)
|
1 |
WEB
|
Metasploit
|
|
2012-05-24
|
|
Jaow 2.4.5 - Blind SQL Injection
|
2 |
WEB
|
kallimero
|
|
2012-05-21
|
|
Supernews 2.6.1 - SQL Injection
|
2 |
WEB
|
WhiteCollarGroup
|
|
2012-05-21
|
|
Vanilla FirstLastNames 1.3.2 Plugin - Persistent Cross-Site Scripting
|
2 |
WEB
|
Henry Hoggard
|
|
2012-05-21
|
|
Vanilla Forums About Me Plugin - Persistent Cross-Site Scripting
|
2 |
WEB
|
Henry Hoggard
|
|
2012-05-18
|
|
Vanilla Forums LatestComment 1.1 Plugin - Persistent Cross-Site Scripting
|
2 |
WEB
|
Henry Hoggard
|
|
2012-05-19
|
|
FreeNAC 3.02 - SQL Injection / Cross-Site Scripting
|
1 |
WEB
|
blake
|
|
2012-05-19
|
|
PHP Address Book 7.0.0 - Multiple Vulnerabilities
|
1 |
WEB
|
Stefan Schurtz
|
|
2012-05-16
|
|
Artiphp CMS 5.5.0 - Database Backup Disclosure
|
2 |
WEB
|
LiquidWorm
|
