Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2008-12-29   eDContainer 2.22 - Local File Inclusion 1 WEB GoLd_M
2008-12-29   eDNews 2.0 - Local File Inclusion 1 WEB GoLd_M
2008-12-29   webClassifieds 2005 - Authentication Bypass 1 WEB AnGeL25dZ
2008-12-28   Silentum LoginSys 1.0.0 - Insecure Cookie Handling 1 WEB Osirys
2008-12-28   Flexphplink Pro - Arbitrary File Upload 1 WEB Osirys
2008-12-28   ForumApp 3.3 - Remote Database Disclosure 1 WEB Cyber.Zer0
2008-12-28   PHP-Fusion Mod TI - 'id' SQL Injection 1 WEB Khashayar Fereidani
2008-12-28   OwenPoll 1.0 - Insecure Cookie Handling 2 WEB Osirys
2008-12-28   Alstrasoft Web Email Script Enterprise - 'id' SQL Injection 1 WEB Bgh7
2008-12-28   FubarForum 1.6 - Arbitrary Authentication Bypass 2 WEB k3yv4n
2008-12-28   DeluxeBB 1.2 - Blind SQL Injection 1 WEB StAkeR
2008-12-28   Joomla! Component PAX Gallery 0.1 - Blind SQL Injection 2 WEB XaDoS
2008-12-28   Miniweb 2.0 - Authentication Bypass 1 WEB bizzit
2008-12-24   BloofoxCMS 0.3.4 - 'lang' Local File Inclusion 2 WEB fuzion
2008-12-24   ClaSS 0.8.60 - 'export.php' Local File Inclusion 1 WEB fuzion
2008-12-24   PHP-Fusion 7.0.2 - Blind SQL Injection 1 WEB StAkeR
2008-12-24   Joomla! Component 5starhotels - SQL Injection 1 WEB EcHoLL
2008-12-24   Joomla! Component mDigg 2.2.8 - 'category' SQL Injection 1 WEB boom3rang
2008-12-24   Joomla! Component Live Ticker 1.0 - Blind SQL Injection 1 WEB boom3rang
2008-12-24   Joomla! Component Ice Gallery 0.5b2 - 'catid' Blind SQL Injection 1 WEB boom3rang
2008-12-24   ILIAS 3.7.4 - 'ref_id' Blind SQL Injection 1 WEB Lidloses_Auge
2008-12-24   doop CMS 1.4.0b - Cross-Site Request Forgery / Arbitrary File Upload 1 WEB x0r
2008-12-23   Joomla! Component com_allhotels - Blind SQL Injection 1 WEB Hussin X
2008-12-23   Joomla! Component com_lowcosthotels - Blind SQL Injection 1 WEB Hussin X
2008-12-23   StormBoard 1.0.1 - SQL Injection 1 WEB Samir-M
2008-12-23   phpEmployment - 'PHP Upload' Arbitrary File Upload 1 WEB ahmadbady
2008-12-23   PHPAdBoard - PHP uploads Arbitrary File Upload 1 WEB ahmadbady
2008-12-23   phpGreetCards - Cross-Site Scripting / Arbitrary File Upload 0 WEB ahmadbady
2008-12-23   CMS NetCat 3.12 - Multiple Vulnerabilities 2 WEB s4avrd0w
2008-12-23   CMS NetCat 3.12 - 'password_recovery.php' Blind SQL Injection 2 WEB s4avrd0w
2008-12-23   PHPLD 3.3 - Blind SQL Injection 2 WEB fuzion
2008-12-23   PHPmotion 2.1 - Cross-Site Request Forgery 2 WEB Ausome1
2008-12-22   Roundcube Webmail 0.2b - Remote Code Execution 2 WEB Hunger
2008-12-22   REDPEACH CMS - SQL Injection 2 WEB Lidloses_Auge
2008-12-22   Calendar Script 1.1 - Authentication Bypass 2 WEB StAkeR
2008-12-22   Roundcube Webmail 0.2-3 Beta - Code Execution 1 WEB Jacobo Avariento
2008-12-22   SolarCMS 0.53.8 - 'Forum' Remote Cookies Disclosure 1 WEB StAkeR
2008-12-22   Joomla! Component Volunteer 2.0 - SQL Injection 1 WEB boom3rang
2008-12-22   yourplace 1.0.2 - Multiple Vulnerabilities / Remote Code Execution 1 WEB Osirys
2008-12-22   Pligg 9.9.5b - Arbitrary File Upload / SQL Injection 1 WEB Ams
2008-12-22   WordPress Plugin Page Flip Image Gallery 0.2.2 - Remote File Disclosure 1 WEB GoLd_M
2008-12-22   Text Lines Rearrange Script - 'Filename' File Disclosure 1 WEB SirGod
2008-12-22   RSS Simple News - SQL Injection 1 WEB Piker
2008-12-21   phpg 1.6 - Cross-Site Scripting / Full Path Disclosure / Denial of Service 1 WEB Anarchy Angel
2008-12-21   Joomla! Component com_tophotelmodule 1.0 - Blind SQL Injection 1 WEB boom3rang
2008-12-21   Joomla! Component com_hbssearch 1.0 - Blind SQL Injection 2 WEB boom3rang
2008-12-21   BLOG 1.55B - 'image_upload.php' Arbitrary File Upload 1 WEB Piker
2008-12-21   Emefa Guestbook 3.0 - Remote Database Disclosure 2 WEB Cyber.Zer0
2008-12-21   Chicomas 2.0.4 - Database Backup / File Disclosure / Cross-Site Scripting 2 WEB BugReport.IR
2008-12-21   ReVou Twitter Clone - Arbitrary File Upload 1 WEB S.W.A.T.
2008-12-21   Userlocator 3.0 - Blind SQL Injection 1 WEB katharsis
2008-12-19   Constructr CMS 3.02.5 stable - Multiple Vulnerabilities 1 WEB fuzion
2008-12-19   OneOrZero helpdesk 1.6.x. - Arbitrary File Upload 1 WEB Ams
2008-12-19   FreeLyrics 1.0 - Remote File Disclosure 1 WEB Piker
2008-12-19   myPHPscripts Login Session 2.0 - Cross-Site Scripting / Database Disclosure 1 WEB Osirys
2008-12-19   Extract Website - 'Filename' File Disclosure 1 WEB Cold Zero
2008-12-19   Online Keyword Research Tool - 'download.php' File Disclosure 1 WEB Cold Zero
2008-12-19   ReVou Twitter Clone - Admin Password Change 1 WEB G4N0K
2008-12-19   MyPBS - 'seasonID' SQL Injection 1 WEB Piker
2008-12-18   MyPHPsite - Local File Inclusion 2 WEB Piker
2008-12-18   Gobbl CMS 1.0 - Insecure Cookie Handling 2 WEB x0r
2008-12-18   Injader CMS 2.1.1 - 'id' SQL Injection 1 WEB fuzion
2008-12-18   phpclanwebsite 1.23.3 fix pack #5 - Multiple Vulnerabilities 1 WEB s4avrd0w
2008-12-18   I-Rater Basic - SQL Injection 1 WEB boom3rang
2008-12-18   Calendar Script 1.1 - Insecure Cookie Handling 1 WEB Osirys
2008-12-18   2532/Gigs 1.2.2 Stable - Remote Command Execution 1 WEB StAkeR
2008-12-18   2532/Gigs 1.2.2 Stable - Remote Authentication Bypass 1 WEB StAkeR
2008-12-18   2532/Gigs 1.2.2 Stable - Multiple Vulnerabilities 1 WEB Osirys
2008-12-18   Mini File Host 1.x - Arbitrary '.PHP' File Upload 1 WEB Pouya_Server
2008-12-17   QuickerSite Easy CMS - Database Disclosure 2 WEB AlpHaNiX
2008-12-17   Lizardware CMS 0.6.0 - Blind SQL Injection 2 WEB StAkeR
2008-12-17   TinyMCE 2.0.1 - 'menuID' SQL Injection 2 WEB AnGeL25dZ
2008-12-17   Joomla! Component Tech Article 1.x - SQL Injection 2 WEB InjEctOr5
2008-12-17   r.cms 2.0 - Multiple SQL Injections 2 WEB Lidloses_Auge
2008-12-17   K&S Shopsysteme - Arbitrary File Upload 1 WEB mNt
2008-12-17   BP Blog 6.0/7.0/8.0/9.0 - Remote Database Disclosure 2 WEB Dxil
2008-12-17   RSMScript 1.21 - Cross-Site Scripting / Insecure Cookie Handling 2 WEB Osirys
2008-12-16   Gnews Publisher .NET - SQL Injection 2 WEB AlpHaNiX
2008-12-16   Zelta E Store - Arbitrary File Upload / Bypass / SQL Injection / Blind SQL Injection 2 WEB ZoRLu
2008-12-16   Liberum Help Desk 0.97.3 - SQL Injection / File Disclosure 2 WEB Cold Zero
2008-12-16   Nukedit 4.9.8 - Remote Database Disclosure 1 WEB Cyber.Zer0
2008-12-16   Aiyoota! CMS - Blind SQL Injection 1 WEB Lidloses_Auge
2008-12-16   FLDS 1.2a - 'report.php' SQL Injection 1 WEB ka0x
2008-12-16   Web Wiz Guestbook 8.21 - Database Disclosure 1 WEB Cold Zero
2008-12-16   FaScript FaUpload - SQL Injection 1 WEB Aria-Security Team
2008-12-15   Click&Rank - SQL Injection / Cross-Site Scripting 1 WEB AlpHaNiX
2008-12-15   clickandemail - SQL Injection / Cross-Site Scripting 1 WEB AlpHaNiX
2008-12-15   Click&BaneX - Multiple SQL Injections 0 WEB AlpHaNiX
2008-12-15   CFAGCMS 1 - SQL Injection 0 WEB ZoRLu
2008-12-15   Aperto Blog 0.1.1 - Local File Inclusion / SQL Injection 0 WEB NoGe
2008-12-15   WorkSimple 1.2.1 - Remote File Inclusion / Sensitive Data Disclosure 0 WEB Osirys
2008-12-15   CadeNix - SQL Injection 1 WEB HaCkeR_EgY
2008-12-15   XOOPS Module Amevents - SQL Injection 1 WEB nétRoot
2008-12-15   The Rat CMS Alpha 2 - Authentication Bypass 1 WEB x0r
2008-12-15   Mediatheka 4.2 - Blind SQL Injection 1 WEB StAkeR
2008-12-15   BabbleBoard 1.1.6 - Cross-Site Request Forgery/Cookie Grabber 1 WEB SirGod
2008-12-15   FLDS 1.2a - 'lpro.php' SQL Injection 0 WEB nuclear
2008-12-15   EZ Publish < 3.9.5/3.10.1/4.0.1 - 'token' Privilege Escalation 0 WEB s4avrd0w
2008-12-15   CodeAvalanche RateMySite - Database Disclosure 0 WEB Pouya_Server
2008-12-15   CodeAvalanche Articles - Database Disclosure 1 WEB Pouya_Server
2008-12-15   CodeAvalanche FreeWallpaper - Remote Database Disclosure 1 WEB Pouya_Server
2008-12-15   CodeAvalanche FreeForAll - Database Disclosure 1 WEB Pouya_Server
2008-12-15   CodeAvalanche Directory - Database Disclosure 1 WEB Pouya_Server
2008-12-15   Forest Blog 1.3.2 - Remote Database Disclosure 1 WEB Cold Zero
2008-12-14   isweb CMS 3.0 - SQL Injection / Cross-Site Scripting 1 WEB XaDoS
2008-12-14   ASPSiteWare RealtyListing 1.0/2.0 - SQL Injection 1 WEB AlpHaNiX
2008-12-14   ASPSiteWare Automotive Dealer 1.0/2.0 - SQL Injection 1 WEB AlpHaNiX
2008-12-14   ASPSiteWare Home Builder 1.0/2.0 - SQL Injection 1 WEB AlpHaNiX
2008-12-14   Flatnux - html/JavaScript Injection Cookie Grabber 1 WEB gmda
2008-12-14   CFAGCMS 1 - Remote File Inclusion 1 WEB BeyazKurt
2008-12-14   Mediatheka 4.2 - 'lang' Local File Inclusion 1 WEB Osirys
2008-12-14   AvailScript Classmate Script - Arbitrary File Upload 1 WEB S.W.A.T.
2008-12-14   AvailScript Article Script - Arbitrary File Upload 1 WEB S.W.A.T.
2008-12-14   The Rat CMS Alpha 2 - 'download.php' Priviledge Escalation 1 WEB x0r
2008-12-14   FLDS 1.2a - 'redir.php' SQL Injection 1 WEB nuclear
2008-12-14   PHP weather 2.2.2 - Local File Inclusion / Cross-Site Scripting 1 WEB ahmadbady
2008-12-14   CodeAvalanche FreeForum - Database Disclosure 1 WEB Ghost Hacker
2008-12-14   iyzi Forum 1.0b3 - Database Disclosure 1 WEB Ghost Hacker
2008-12-14   autositephp 2.0.3 - Local File Inclusion / Cross-Site Request Forgery / Edit File 0 WEB SirGod
2008-12-14   ASP-DEV Internal E-Mail System - Authentication Bypass 0 WEB Pouya_Server
2008-12-14   ASPired2Quote - Remote Database Disclosure 0 WEB Pouya_Server
2008-12-14   Discussion Web 4 - Remote Database Disclosure 0 WEB Pouya_Server
2008-12-14   Simple Text-File Login script (SiTeFiLo) 1.0.6 - File Disclosure / Remote File Inclusion 1 WEB Osirys
2008-12-14   FlexPHPNews 0.0.6 / PRO - Authentication Bypass 1 WEB Osirys
2008-12-12   Joomla! Component live chat - SQL Injection / Open Proxy 1 WEB jdc