Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2009-03-11   Traidnt up 2.0 - 'cookie' Add Extension Bypass 2 WEB SP4rT
2009-03-10   RoomPHPlanning 1.6 - 'userform.php' Create Admin User 1 WEB Jonathan Salwan
2009-03-10   Joomla! Component Djice Shoutbox 1.0 - Persistent Cross-Site Scripting 1 WEB XaDoS
2009-03-10   WordPress MU < 2.7 - 'HOST' HTTP Header Cross-Site Scripting 2 WEB Juan Galiana Lara
2009-03-10   WeBid 0.7.3 RC9 - Multiple Remote File Inclusions 2 WEB K-159
2009-03-10   PHP-Fusion Mod Book Panel - 'course_id' SQL Injection 2 WEB SuB-ZeRo
2009-03-10   CMS WEBjump! - Multiple SQL Injections 2 WEB M3NW5
2009-03-09   PHP-Fusion Mod Book Panel - 'bookid' SQL Injection 2 WEB elusiven
2009-03-09   phpCommunity 2.1.8 - SQL Injection / Directory Traversal / Cross-Site Scripting 2 WEB Salvatore Fresta
2009-03-09   CS-Cart 2.0.0 Beta 3 - 'Product_ID' SQL Injection 2 WEB netsoul
2009-03-09   woltlab burning board 3.0.x - Multiple Vulnerabilities 2 WEB StAkeR
2009-03-09   PHPRecipeBook 2.24 - 'base_id' SQL Injection 2 WEB d3b4g
2009-03-09   PHP Director 0.21 - SQL Into Outfile 'eval()' Injection 1 WEB StAkeR
2009-03-09   cms s.builder 3.7 - Remote File Inclusion 1 WEB cr0w
2009-03-09   nForum 1.5 - Multiple SQL Injections 1 WEB Salvatore Fresta
2009-03-06   OneOrZero Helpdesk 1.6.5.7 - Local File Inclusion 2 WEB dun
2009-03-06   isiAJAX 1 - 'praises.php?id' SQL Injection 1 WEB dun
2009-03-06   Wili-CMS 0.4.0 - Local File Inclusion / Remote File Inclusion / Authentication Bypass 2 WEB Salvatore Fresta
2009-03-06   Blue Eye CMS 1.0.0 - Remote Cookie SQL Injection 1 WEB ka0x
2009-03-05   Joomla! Component com_iJoomla_archive - Blind SQL Injection 2 WEB Stack
2009-03-05   celerbb 0.0.2 - Multiple Vulnerabilities 2 WEB Salvatore Fresta
2009-03-03   Jogjacamp JProfile Gold - 'id_news' SQL Injection 2 WEB kecemplungkalen
2009-03-03   Novaboard 1.0.1 - Cross-Site Scripting 1 WEB Pepelux
2009-03-03   tghostscripter Amazon Shop - Cross-Site Scripting / Directory Traversal / Remote File Inclusion 2 WEB d3b4g
2009-03-03   blindblog 1.3.1 - SQL Injection / Authentication Bypass / Local File Inclusion 2 WEB Salvatore Fresta
2009-03-03   Zabbix 1.6.2 Frontend - Multiple Vulnerabilities 1 WEB USH
2009-03-02   ritsblog 0.4.2 - Authentication Bypass / Cross-Site Scripting 1 WEB Salvatore Fresta
2009-03-02   Joomla! / Mambo Component eXtplorer - Code Execution 1 WEB Juan Galiana Lara
2009-03-02   Joomla! Component com_digistore - 'pid' Blind SQL Injection 2 WEB InjEctOr5
2009-03-02   Graugon PHP Article Publisher 1.0 - SQL Injection / Cookie Handling 2 WEB x0r
2009-03-02   Access2asp - 'imageLibrar' Arbitrary File Upload 2 WEB mr.al7rbi
2009-03-02   Digital Interchange Calendar 5.7.13 - Contents Change 1 WEB ByALBAYX
2009-03-02   Document Library 1.0.1 - Arbitrary Change Admin 2 WEB ByALBAYX
2009-03-02   EZ-Blog beta1 - Delete All Posts / SQL Injection 2 WEB Salvatore Fresta
2009-03-02   Blogman 0.45 - Multiple Vulnerabilities 2 WEB Salvatore Fresta
2009-02-27   Demium CMS 0.2.1b - Multiple Vulnerabilities 2 WEB Osirys
2009-02-27   irokez blog 0.7.3.2 - Cross-Site Scripting / Remote File Inclusion / Blind SQL Injection 2 WEB Corwin
2009-02-27   SkyPortal Downloads Manager 1.1 - Remote Contents Change 2 WEB ByALBAYX
2009-02-26   BannerManager 0.81 - Authentication Bypass 1 WEB rootzig
2009-02-26   Coppermine Photo Gallery 1.4.20 - 'IMG' Privilege Escalation 1 WEB Inphex
2009-02-26   Coppermine Photo Gallery 1.4.20 - BBCode IMG Privilege Escalation 1 WEB StAkeR
2009-02-26   DesignerfreeSolutions NewsLetter Manager Pro - Authentication Bypass 2 WEB ByALBAYX
2009-02-26   Golabi CMS 1.0 - Remote File Inclusion 1 WEB CrazyAngel
2009-02-25   SkyPortal WebLinks 0.12 - Contents Change 1 WEB ByALBAYX
2009-02-25   SkyPortal Picture Manager 0.11 - Contents Change 2 WEB ByALBAYX
2009-02-25   SkyPortal Classifieds System 0.12 - Contents Change 2 WEB ByALBAYX
2009-02-25   PenPal 2.0 - Authentication Bypass 2 WEB ByALBAYX
2009-02-25   pPIM 1.0 - Multiple Vulnerabilities 2 WEB Justin Keane
2009-02-24   Qwerty CMS - 'id' SQL Injection 2 WEB b3
2009-02-24   XGuestBook 2.0 - Authentication Bypass 1 WEB Fireshot
2009-02-23   MDPro Module My_eGallery - 'pid' SQL Injection 1 WEB StAkeR
2009-02-23   taifajobs 1.0 - 'jobid' SQL Injection 1 WEB K-159
2009-02-23   Pyrophobia 2.1.3.1 - Local File Inclusion Command Execution 1 WEB Osirys
2009-02-23   Free Arcade Script 1.0 - Local File Inclusion Command Execution 1 WEB Osirys
2009-02-23   pPIM 1.01 - 'notes.php' Remote Command Execution 1 WEB JosS
2009-02-23   zFeeder 1.6 - 'admin.php' Admin Bypass 1 WEB ahmadbady
2009-02-20   Graugon Forum 1 - 'id' Command Injection / SQL Injection 1 WEB Osirys
2009-02-20   Osmodia Bulletin Board 1.x - 'admin.txt' File Disclosure 1 WEB Pouya_Server
2009-02-20   i-dreams GB Server - 'admin.dat' File Disclosure 1 WEB Pouya_Server
2009-02-20   i-dreams GB 5.4 Final - 'admin.dat' File Disclosure 1 WEB Pouya_Server
2009-02-20   i-dreams Mailer 1.2 Final - 'admin.dat' File Disclosure 2 WEB Pouya_Server
2009-02-20   phpBB 3 - 'autopost bot mod 0.1.3' Remote File Inclusion 2 WEB Kacper
2009-02-18   smNews 1.0 - Authentication Bypass / Column Truncation 1 WEB x0r
2009-02-18   Firepack - '/admin/ref.php' Remote Code Execution 2 WEB Lidloses_Auge
2009-02-17   pHNews Alpha 1 - 'genbackup.php' Database Disclosure 2 WEB x0r
2009-02-17   pHNews Alpha 1 - 'mod' SQL Injection 2 WEB x0r
2009-02-17   S-CMS 1.1 Stable - Insecure Cookie Handling / Mass Page Delete 0 WEB x0r
2009-02-17   SAS Hotel Management System - Arbitrary File Upload 1 WEB ZoRLu
2009-02-16   Grestul 1.x - Cookie Authentication Bypass 1 WEB x0r
2009-02-16   ravennuke 2.3.0 - Multiple Vulnerabilities 1 WEB waraxe
2009-02-16   YACS CMS 8.11 - 'update_trailer.php' Remote File Inclusion 1 WEB ahmadbady
2009-02-16   SAS Hotel Management System - 'id' SQL Injection 1 WEB Darkb0x
2009-02-16   MemHT Portal 4.0.1 - Delete All Private Messages 1 WEB StAkeR
2009-02-16   Novaboard 1.0.0 - Multiple Vulnerabilities 0 WEB brain[pillow]
2009-02-16   powermovielist 0.14b - SQL Injection / Cross-Site Scripting 2 WEB brain[pillow]
2009-02-16   simplePms CMS 0.1.4 - Local File Inclusion / Remote Command Execution 2 WEB Osirys
2009-02-16   Falt4 CMS RC4 - 'FCKeditor' Arbitrary File Upload 2 WEB Sp3shial
2009-02-16   InselPhoto 1.1 - Cross-Site Scripting 2 WEB rAWjAW
2009-02-13   CmsFaethon 2.2.0 - 'item' SQL Injection 2 WEB Osirys
2009-02-13   BlogWrite 0.91 - Remote File Disclosure / SQL Injection 2 WEB Osirys
2009-02-13   ea-gBook 0.1 - Remote Command Execution / Remote File Inclusion 2 WEB bd0rk
2009-02-13   Vlinks 1.1.6 - 'id' SQL Injection 2 WEB JIKO
2009-02-13   ideacart 0.02 - Local File Inclusion / SQL Injection 2 WEB nuclear
2009-02-12   Baran CMS 1.0 - 'Arbitrary '.ASP' File Upload / File Disclosure / SQL Injection / Cross-Site Scripti 1 WEB Aria-Security Team
2009-02-12   Free Joke Script 1.0 - Authentication Bypass 2 WEB Muhacir
2009-02-12   PHP Krazy Image Host Script 1.01 - 'id' SQL Injection 2 WEB x0r
2009-02-11   InselPhoto 1.1 - 'query' SQL Injection 2 WEB Osirys
2009-02-11   Den Dating 9.01 - 'txtlookgender' SQL Injection 2 WEB nuclear
2009-02-11   Bloggeruniverse 2.0 Beta - 'id' SQL Injection 2 WEB Osirys
2009-02-11   dacio's CMS 1.08 - Cross-Site Scripting / SQL Injection / File Disclosure 2 WEB Mehmet Ince
2009-02-11   Graugon Gallery 1.0 - Cross-Site Scripting / SQL Injection / Cookie Bypass 1 WEB x0r
2009-02-11   SkaDate Online 7 - Arbitrary File Upload 2 WEB ZoRLu
2009-02-10   TYPO3 < 4.0.12/4.1.10/4.2.6 - 'jumpUrl' Remote File Disclosure 1 WEB Lolek
2009-02-10   Fluorine CMS 0.1 rc 1 - File Disclosure / SQL Injection / Command Execution 1 WEB Osirys
2009-02-10   BlueBird Pre-Release - Authentication Bypass 1 WEB x0r
2009-02-10   Mynews 0.10 - Authentication Bypass 1 WEB x0r
2009-02-10   AuthPhp 1.0 - Authentication Bypass 1 WEB x0r
2009-02-10   Potato News 1.0.0 - Local File Inclusion 0 WEB x0r
2009-02-10   Q-News 2.0 - Remote Command Execution 0 WEB Fireshot
2009-02-10   Papoo CMS 3.x - 'pfadhier' Local File Inclusion 0 WEB SirGod
2009-02-10   Thyme 1.3 - 'export_to' Local File Inclusion 0 WEB cheverok
2009-02-09   Hedgehog-CMS 1.21 - Local File Inclusion / Remote Command Execution 0 WEB Osirys
2009-02-09   Gaeste 1.6 - 'gastbuch.php' Remote File Disclosure 0 WEB bd0rk
2009-02-09   WB News 2.1.1 - config[installdir] Remote File Inclusion 1 WEB ahmadbady
2009-02-09   webframe 0.76 - Multiple File Inclusions 1 WEB ahmadbady
2009-02-09   Yet Another NOCC 0.1.0 - Local File Inclusion 1 WEB Kacper
2009-02-09   ZeroBoardXE 1.1.5 (09.01.22) - Cross-Site Scripting 1 WEB make0day
2009-02-09   FlexCMS 2.5 - 'catId' SQL Injection 1 WEB MisterRichard
2009-02-09   SnippetMaster Webpage Editor 2.2.2 - Remote File Inclusion / Cross-Site Scripting 1 WEB RoMaNcYxHaCkEr
2009-02-09   AdaptCMS Lite 1.4 - Cross-Site Scripting / Remote File Inclusion 1 WEB RoMaNcYxHaCkEr
2009-02-09   Hedgehog-CMS 1.21 - Remote Command Execution 1 WEB darkjoker
2009-02-09   PHP Director 0.21 - Remote Command Execution 2 WEB darkjoker
2009-02-09   A Better Member-Based ASP Photo Gallery - 'entry' SQL Injection 2 WEB BackDoor
2009-02-09   BusinessSpace 1.2 - 'id' SQL Injection 2 WEB K-159
2009-02-09   w3bcms 3.5.0 - Multiple Vulnerabilities 1 WEB DNX
2009-02-09   IF-CMS 2.0 - 'id' Blind SQL Injection 1 WEB darkjoker
2009-02-09   Traidnt UP 1.0 - Arbitrary File Upload 1 WEB fantastic
2009-02-06   phpYabs 0.1.2 - 'Azione' Remote File Inclusion 1 WEB Arka69
2009-02-06   SilverNews 2.04 - Authentication Bypass / Local File Inclusion / Remote Code Execution 1 WEB x0r
2009-02-06   1024 CMS 1.4.4 - Remote Command Execution / Remote File Inclusion 1 WEB JosS
2009-02-06   CafeEngine - 'catid' SQL Injection 0 WEB SuNHouSe2
2009-02-06   Mailist 3.0 - Insecure Backup / Local File Inclusion 0 WEB SirGod
2009-02-06   Zeroboard4 pl8 (07.12.17) - Multiple Vulnerabilities 1 WEB make0day
2009-02-06   Simple PHP News 1.0 - Remote Command Execution 1 WEB Osirys
2009-02-06   WikkiTikkiTavi 1.11 - Arbitrary '.PHP' File Upload 1 WEB ByALBAYX