|
2012-01-03
|
|
OpenKM Document Management System 5.1.7 - Command Execution
|
2 |
WEB
|
Cyrill Brunschwiler
|
|
2012-05-16
|
|
Axous 1.1.1 - Cross-Site Request Forgery / Persistent Cross-Site Scripting
|
2 |
WEB
|
Ivano Binetti
|
|
2012-05-08
|
|
S9Y Serendipity 1.6 - 'Backend' Cross-Site Scripting / SQL Injection
|
2 |
WEB
|
Stefan Schurtz
|
|
2012-05-15
|
|
b2ePms 1.0 - Authentication Bypass
|
2 |
WEB
|
Jean Pascal Pereira
|
|
2012-05-13
|
|
Liferay Portal 6.0.x < 6.1 - Privilege Escalation
|
2 |
WEB
|
Jelmer Kuperus
|
|
2012-05-13
|
|
Galette - 'picture.php' SQL Injection
|
2 |
WEB
|
sbz
|
|
2012-05-13
|
|
Free Realty 3.1-0.6 - Multiple Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-05-13
|
|
Viscacha Forum CMS 0.8.1.1 - Multiple Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-05-13
|
|
Proman Xpress 5.0.1 - Multiple Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-05-13
|
|
Travelon Express CMS 6.2.2 - Multiple Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-05-12
|
|
Sockso 1.51 - Persistent Cross-Site Scripting
|
1 |
WEB
|
Ciaran McNally
|
|
2012-05-12
|
|
WikkaWiki 1.3.2 - Spam Logging PHP Injection (Metasploit)
|
2 |
WEB
|
Metasploit
|
|
2012-05-11
|
|
Belkin N150 Wireless Router - Password Disclosure
|
2 |
WEB
|
Avinash Tangirala
|
|
2012-05-10
|
|
eLearning server 4g - Multiple Vulnerabilities
|
2 |
WEB
|
Andrey Komarov
|
|
2012-05-10
|
|
Kerio WinRoute Firewall Web Server < 6 - Source Code Disclosure
|
2 |
WEB
|
Andrey Komarov
|
|
2012-05-09
|
|
X7 Chat 2.0.5.1 - Cross-Site Request Forgery (Add Admin)
|
1 |
WEB
|
DennSpec
|
|
2012-05-07
|
|
PHP Agenda 2.2.8 - SQL Injection
|
1 |
WEB
|
loneferret
|
|
2012-05-07
|
|
myCare2x CMS - Multiple Vulnerabilities
|
1 |
WEB
|
Vulnerability-Lab
|
|
2012-05-07
|
|
Myre Real Estate Mobile 2012/2 - Multiple Vulnerabilities
|
1 |
WEB
|
Vulnerability-Lab
|
|
2012-05-07
|
|
Genium CMS 2012/Q2 - Multiple Vulnerabilities
|
1 |
WEB
|
Vulnerability-Lab
|
|
2012-05-07
|
|
Lynx Message Server - Multiple Vulnerabilities
|
0 |
WEB
|
Mark Lachniet
|
|
2012-05-07
|
|
Fortinet FortiWeb Web Application Firewall - Policy Bypass
|
0 |
WEB
|
Geffrey Velasquez
|
|
2012-05-04
|
|
Symantec Web Gateway - Cross-Site Scripting
|
1 |
WEB
|
B00y@
|
|
2012-05-03
|
|
PluXml 5.1.5 - Local File Inclusion
|
1 |
WEB
|
High-Tech Bridge SA
|
|
2012-05-03
|
|
Baby Gekko CMS 1.1.5c - Multiple Persistent Cross-Site Scripting Vulnerabilities
|
1 |
WEB
|
LiquidWorm
|
|
2012-05-02
|
|
Websense Triton - Multiple Vulnerabilities
|
1 |
WEB
|
Ben Williams
|
|
2012-05-02
|
|
PHP-decoda - 'Video Tag' Cross-Site Scripting
|
1 |
WEB
|
RedTeam Pentesting
|
|
2012-05-02
|
|
OpenConf 4.11 - '/author/edit.php' Blind SQL Injection
|
2 |
WEB
|
EgiX
|
|
2012-05-01
|
|
STRATO NewsLetter Manager - Directory Traversal
|
2 |
WEB
|
Zero X
|
|
2012-05-01
|
|
MyClientBase 0.12 - Multiple Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-05-01
|
|
opencart 1.5.2.1 - Multiple Vulnerabilities
|
2 |
WEB
|
waraxe
|
|
2012-05-01
|
|
GENU CMS 2012.3 - Multiple SQL Injections
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-05-01
|
|
WordPress Plugin Zingiri Web Shop 2.4.2 - Persistent Cross-Site Scripting
|
2 |
WEB
|
Mehmet Ince
|
|
2012-04-30
|
|
DIY CMS 1.0 Poll - Multiple Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-04-30
|
|
Opial CMS 2.0 - Multiple Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-04-30
|
|
C4B XPhone UC Web 4.1.890S R1 - Cross-Site Scripting
|
1 |
WEB
|
Vulnerability-Lab
|
|
2012-04-30
|
|
Car Portal CMS 3.0 - Multiple Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-04-29
|
|
Alienvault Open Source SIEM (OSSIM) 3.1 - Multiple Vulnerabilities
|
2 |
WEB
|
Stefan Schurtz
|
|
2012-04-29
|
|
Soco CMS - Local File Inclusion
|
2 |
WEB
|
BHG Security Center
|
|
2012-04-29
|
|
WebCalendar 1.2.4 - Remote Code Injection (Metasploit)
|
2 |
WEB
|
Metasploit
|
|
2012-04-27
|
|
Axous 1.1.0 - SQL Injection
|
2 |
WEB
|
H4ckCity Secuirty TeaM
|
|
2012-04-27
|
|
WordPress Core 3.3.1 - Multiple Cross-Site Request Forgery Vulnerabilities
|
2 |
WEB
|
Ivano Binetti
|
|
2012-04-26
|
|
PHP Volunteer management 1.0.2 - Multiple Vulnerabilities
|
2 |
WEB
|
G13
|
|
2012-04-26
|
|
WordPress Plugin Zingiri Web Shop 2.4.0 - Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
Mehmet Ince
|
|
2012-04-25
|
|
piwigo 2.3.3 - Multiple Vulnerabilities
|
1 |
WEB
|
High-Tech Bridge SA
|
|
2012-04-24
|
|
PHP Ticket System Beta 1 - 'index.php?p' SQL Injection
|
2 |
WEB
|
G13
|
|
2012-04-23
|
|
WebCalendar 1.2.4 - Remote Code Execution
|
1 |
WEB
|
EgiX
|
|
2012-04-23
|
|
exponentcms 2.0.5 - Multiple Vulnerabilities
|
2 |
WEB
|
Onur Yılmaz
|
|
2012-04-23
|
|
Havalite CMS 1.0.4 - Multiple Vulnerabilities
|
2 |
WEB
|
Vulnerability-Lab
|
|
2012-04-22
|
|
vTiger CRM 5.1.0 - Local File Inclusion
|
2 |
WEB
|
Pi3rrot
|
|
2012-04-22
|
|
Mega File Manager - File Download
|
2 |
WEB
|
i2sec-Min Gi Jo
|
|
2012-04-22
|
|
Oracle GlassFish Server - REST Cross-Site Request Forgery
|
2 |
WEB
|
Roberto Suggi Liverani
|
|
2012-04-22
|
|
Oracle GlassFish Server 3.1.1 (build 12) - Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
Roberto Suggi Liverani
|
|
2012-04-19
|
|
XOOPS 2.5.4 - Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
High-Tech Bridge SA
|
|
2012-04-19
|
|
newscoop 3.5.3 - Multiple Vulnerabilities
|
2 |
WEB
|
High-Tech Bridge SA
|
|
2012-04-19
|
|
Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities
|
2 |
WEB
|
Trustwave's SpiderLabs
|
|
2012-04-15
|
|
ManageEngine Support Center Plus 7903 - Multiple Vulnerabilities
|
2 |
WEB
|
xistence
|
|
2012-04-15
|
|
MediaXxx Adult Video / Media Script - SQL Injection
|
2 |
WEB
|
Daniel Godoy
|
|
2012-04-15
|
|
NetworX CMS - Cross-Site Request Forgery (Add Admin)
|
2 |
WEB
|
N3t.Crack3r
|
|
2012-04-15
|
|
Joomla! Component com_ponygallery - SQL Injection
|
2 |
WEB
|
xDarkSton3x
|
|
2012-04-13
|
|
Ushahidi 2.2 - Multiple Vulnerabilities
|
2 |
WEB
|
shpendk
|
|
2012-04-13
|
|
Invision Power Board 3.3.0 - Local File Inclusion
|
2 |
WEB
|
waraxe
|
|
2012-04-12
|
|
SoftwareDEP Classified Script 2.5 - SQL Injection (2)
|
2 |
WEB
|
hordcode security
|
|
2012-04-10
|
|
Joomla! Component com_bearleague - SQL Injection
|
2 |
WEB
|
xDarkSton3x
|
|
2012-04-10
|
|
Joomla! Component Estate Agent - SQL Injection
|
2 |
WEB
|
xDarkSton3x
|
|
2012-04-09
|
|
Dolibarr ERP/CRM < 3.2.0 / < 3.1.1 - OS Command Injection
|
2 |
WEB
|
Nahuel Grisolia
|
|
2012-04-09
|
|
Dolibarr ERP/CRM 3 - (Authenticated) OS Command Injection (Metasploit)
|
2 |
WEB
|
Metasploit
|
|
2012-04-08
|
|
ZTE - Change Admin Password
|
2 |
WEB
|
Nuevo Asesino
|
|
2012-04-08
|
|
Utopia News Pro 1.4.0 - Cross-Site Request Forgery (Add Admin)
|
2 |
WEB
|
Dr.NaNo
|
|
2012-04-08
|
|
Liferay XSL - Command Execution (Metasploit)
|
2 |
WEB
|
Spencer McIntyre
|
|
2012-04-06
|
|
w-CMS 2.0.1 - Multiple Vulnerabilities
|
2 |
WEB
|
Black-ID
|
|
2012-04-05
|
|
GENU CMS - SQL Injection
|
2 |
WEB
|
hordcode security
|
|
2012-04-04
|
|
Hotel Booking Portal - SQL Injection
|
2 |
WEB
|
Mark Stanislav
|
|
2012-04-04
|
|
phpPaleo - Local File Inclusion
|
1 |
WEB
|
Mark Stanislav
|
|
2012-04-04
|
|
e-ticketing - SQL Injection
|
2 |
WEB
|
Mark Stanislav
|
|
2012-04-04
|
|
Plume CMS 1.2.4 - Multiple Persistent Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
Ivano Binetti
|
|
2012-04-03
|
|
Simple PHP Agenda 2.2.8 - Cross-Site Request Forgery (Add Admin / Add Event)
|
2 |
WEB
|
Ivano Binetti
|
|
2012-03-31
|
|
WordPress Plugin BuddyPress Plugin 1.5.x < 1.5.5 - SQL Injection
|
2 |
WEB
|
Ivan Terkin
|
|
2012-03-31
|
|
Woltlab Burning Board 2.2/2.3 [WN]KT KickTipp 3.1 - SQL Injection
|
2 |
WEB
|
Easy Laster
|
|
2012-03-31
|
|
Landshop 0.9.2 - Multiple Web Vulnerabilities
|
1 |
WEB
|
Vulnerability-Lab
|
|
2012-03-30
|
|
SyndeoCMS 3.0.01 - Persistent Cross-Site Scripting
|
2 |
WEB
|
Ivano Binetti
|
|
2012-03-30
|
|
dalbum 144 build 174 - Cross-Site Request Forgery
|
1 |
WEB
|
Ahmed Elhady Mohamed
|
|
2012-03-30
|
|
ArticleSetup - Multiple Persistence Cross-Site Scripting / SQL Injections
|
2 |
WEB
|
SecPod Research
|
|
2012-03-30
|
|
coppermine 1.5.18 - Multiple Vulnerabilities
|
1 |
WEB
|
waraxe
|
|
2012-03-28
|
|
BoastMachine 3.1 - Cross-Site Request Forgery (Add Admin)
|
1 |
WEB
|
Dr.NaNo
|
|
2012-03-28
|
|
PicoPublisher 2.0 - SQL Injection
|
2 |
WEB
|
ZeTH
|
|
2012-03-26
|
|
vBshop - Multiple Persistent Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
ToiL
|
|
2012-03-26
|
|
Family CMS 2.9 - Multiple Vulnerabilities
|
2 |
WEB
|
Ahmed Elhady Mohamed
|
|
2012-03-24
|
|
RIPS 0.53 - Multiple Local File Inclusions
|
2 |
WEB
|
localh0t
|
|
2012-03-24
|
|
FreePBX 2.9.0/2.10.0 - 'callmenum' Remote Code Execution (Metasploit)
|
2 |
WEB
|
Metasploit
|
|
2012-03-23
|
|
PHPFox 3.0.1 - 'ajax.php' Remote Command Execution
|
2 |
WEB
|
EgiX
|
|
2012-03-23
|
|
Wolfcms 0.75 - Cross-Site Request Forgery / Cross-Site Scripting
|
1 |
WEB
|
Ivano Binetti
|
|
2012-03-23
|
|
Sitecom WLM-2501 - Multiple Cross-Site Request Forgery Vulnerabilities
|
2 |
WEB
|
Ivano Binetti
|
|
2012-03-23
|
|
FreePBX 2.10.0 / Elastix 2.2.0 - Remote Code Execution
|
2 |
WEB
|
muts
|
|
2012-03-22
|
|
FreePBX 2.9.0/2.10.0 - Multiple Vulnerabilities
|
2 |
WEB
|
Martin Tschirsich
|
|
2012-03-22
|
|
phpMoneyBooks 1.0.2 - Local File Inclusion
|
2 |
WEB
|
Mark Stanislav
|
|
2012-03-22
|
|
PHP Grade Book 1.9.4 - SQL Database Export
|
1 |
WEB
|
Mark Stanislav
|
|
2012-03-22
|
|
Cyberoam UTM - Multiple Vulnerabilities
|
2 |
WEB
|
Saurabh Harit
|
|
2012-03-22
|
|
vBShout - Persistent Cross-Site Scripting
|
2 |
WEB
|
ToiL
|
|
2012-03-21
|
|
phpList 2.10.17 - SQL Injection / Cross-Site Scripting
|
1 |
WEB
|
LiquidWorm
|
|
2012-03-21
|
|
D-Link DIR-605 - Cross-Site Request Forgery
|
2 |
WEB
|
iqzer0
|
|
2012-03-20
|
|
OneFileCMS - Failure to Restrict URL Access
|
0 |
WEB
|
Abhi M Balakrishnan
|
|
2012-03-20
|
|
OneForum - 'topic.php' SQL Injection
|
1 |
WEB
|
Red Security TEAM
|
|
2012-03-19
|
|
ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet - Directory Traversal
|
1 |
WEB
|
rgod
|
|
2012-03-19
|
|
Joomla! 2.5.0 < 2.5.1 - Blind SQL Injection
|
1 |
WEB
|
A. Ramos
|
|
2012-03-18
|
|
Pre Printing Press - 'product_desc.php?pid' SQL Injection
|
1 |
WEB
|
Easy Laster
|
|
2012-03-17
|
|
PRE PRINTING STUDIO - SQL Injection
|
1 |
WEB
|
r45c4l
|
|
2012-03-17
|
|
ASP Classifieds - SQL Injection
|
2 |
WEB
|
r45c4l
|
|
2012-03-16
|
|
FlexCMS 3.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities
|
1 |
WEB
|
Ivano Binetti
|
|
2012-03-16
|
|
FlexCMS 3.2.1 - Persistent Cross-Site Scripting
|
1 |
WEB
|
storm
|
|
2012-03-16
|
|
OneFileCMS 1.1.5 - Local File Inclusion
|
2 |
WEB
|
mr.pr0n
|
|
2012-03-15
|
|
sockso 1.5 - Directory Traversal
|
2 |
WEB
|
Luigi Auriemma
|
|
2012-03-14
|
|
TVersity 1.9.7 - Arbitrary File Download
|
2 |
WEB
|
Luigi Auriemma
|
|
2012-03-14
|
|
asaanCart - Cross-Site Scripting / Local File Inclusion
|
2 |
WEB
|
Number 7
|
|
2012-03-14
|
|
Encaps PHP Gallery - SQL Injection
|
1 |
WEB
|
Daniel Godoy
|
|
2012-03-14
|
|
Sitecom WLM-2501 - Cross-Site Request Forgery
|
1 |
WEB
|
Ivano Binetti
|
|
2012-03-14
|
|
Max Guestbook 1.0 - Multiple Vulnerabilities
|
2 |
WEB
|
n0tch
|
|
2012-03-14
|
|
Simple Posting System - Multiple Vulnerabilities
|
1 |
WEB
|
n0tch
|
|
2012-03-14
|
|
ModX 2.2.0 - Multiple Vulnerabilities
|
2 |
WEB
|
n0tch
|
|
2012-03-13
|
|
4Images Image Gallery Management System - Cross-Site Request Forgery
|
2 |
WEB
|
Dmar al3noOoz
|
|
2012-03-13
|
|
Cycade Gallery - SQL Injection
|
2 |
WEB
|
-DownFall
|
|
2012-03-13
|
|
PBLang Bulletin Board System - Local File Inclusion
|
2 |
WEB
|
Number 7
|
|
2012-03-12
|
|
Acal Calendar 2.2.6 - Cross-Site Request Forgery
|
2 |
WEB
|
Number 7
|
|
2012-03-12
|
|
Saman Portal - Local File Inclusion
|
2 |
WEB
|
TMT
|
|
2012-03-12
|
|
Zend Server 5.6.0 - Multiple Remote Script Insertion Vulnerabilities
|
2 |
WEB
|
LiquidWorm
|
