Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2008-09-27   Joovili 3.0 - Multiple SQL Injections 7 WEB ~!Dok_tOR!~
2008-09-27   Camera Life 2.6.2b4 - Arbitrary File Upload 7 WEB Mi4night
2008-09-27   Vbgooglemap Hotspot Edition 1.0.3 - SQL Injection 8 WEB elusiven
2008-09-27   X7 Chat 2.0.1A1 - 'mini.php' Local File Inclusion 8 WEB NoGe
2008-09-27   RPG.Board 0.0.8Beta2 - Insecure Cookie Handling 8 WEB Stack
2008-09-27   ASPapp Knowledge Base - 'CatId' SQL Injection (2) 8 WEB Crackers_Child
2008-09-26   RPG.Board 0.0.8Beta2 - 'showtopic' SQL Injection 8 WEB 0x90
2008-09-26   The Gemini Portal 4.7 - 'lang' Remote File Inclusion 8 WEB ZoRLu
2008-09-26   Crux Gallery 1.32 - Insecure Cookie Handling 8 WEB Pepelux
2008-09-26   openEngine 2.0 beta2 - Remote File Inclusion 8 WEB Crackers_Child
2008-09-26   The Gemini Portal 4.7 - Insecure Cookie Handling 8 WEB Pepelux
2008-09-26   Esqlanelapse Software Project 2.6.2 - Insecure Cookie Handling 8 WEB ZoRLu
2008-09-26   Atomic Photo Album 1.1.0pre4 - Insecure Cookie Handling 8 WEB Stack
2008-09-26   Libra PHP File Manager 1.18 - Insecure Cookie Handling 8 WEB Stack
2008-09-26   212Cafe Board 0.07 - 'qID' SQL Injection 8 WEB CWH Underground
2008-09-26   PromoteWeb MySQL - 'id' SQL Injection 7 WEB CWH Underground
2008-09-26   Ultimate WebBoard 3.00 - 'Category' SQL Injection 7 WEB CWH Underground
2008-09-26   barcodegen 2.0.0 - 'class_dir' Remote File Inclusion 7 WEB Br0k3n H34rT
2008-09-26   Atomic Photo Album 1.1.0pre4 - Blind SQL Injection 7 WEB Stack
2008-09-25   LanSuite 3.3.2 - 'FCKeditor' Arbitrary File Upload 8 WEB Stack
2008-09-25   Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting / SQL Injection 6 WEB d3v1l
2008-09-25   openEngine 2.0 beta4 - Remote File Inclusion 8 WEB dun
2008-09-25   Vikingboard 0.2 Beta - SQL Column Truncation 7 WEB StAkeR
2008-09-25   PHP infoBoard 7 - Plus Insecure Cookie Handling 7 WEB Stack
2008-09-25   Libra PHP File Manager 1.18/2.0 - Local File Inclusion 8 WEB Pepelux
2008-09-25   PHP infoboard 7 plus - Multiple Vulnerabilities 8 WEB CWH Underground
2008-09-25   Vikingboard 0.2 Beta - 'task' Local File Inclusion 8 WEB dun
2008-09-25   PHPOCS 0.1-beta3 - 'act' Local File Inclusion 8 WEB dun
2008-09-25   LanSuite 3.3.2 - 'design' Local File Inclusion 8 WEB dun
2008-09-25   AJ Auction Pro Platinum - 'seller_id' SQL Injection 8 WEB InjEctOr5
2008-09-24   Observer 0.3.2.1 - Multiple Remote Command Execution Vulnerabilities 8 WEB dun
2008-09-24   barcodegen 2.0.0 - Local File Inclusion 8 WEB dun
2008-09-24   ADN Forum 1.0b - Insecure Cookie Handling 8 WEB Pepelux
2008-09-24   webcp 0.5.7 - 'filelocation' Remote File Disclosure 8 WEB GoLd_M
2008-09-24   Jadu CMS for Government - 'recruit_details.php' SQL Injection 8 WEB r45c4l
2008-09-24   PHPcounter 1.3.2 - 'defs.php' Local File Inclusion 8 WEB dun
2008-09-24   mailwatch 1.0.4 - 'doc' Local File Inclusion 7 WEB dun
2008-09-24   emergecolab 1.0 - 'sitecode' Local File Inclusion 8 WEB dun
2008-09-24   AJ Auction Pro Platinum Skin - 'item_id' SQL Injection 7 WEB GoLd_M
2008-09-24   Jetik Emlak ESA 2.0 - Multiple SQL Injections 7 WEB ZoRLu
2008-09-24   Ol BookMarks Manager 0.7.5 - Local File Inclusion / Remote File Inclusion / SQL Injection 7 WEB GoLd_M
2008-09-24   Rianxosencabos CMS 0.9 - Remote Add Admin 7 WEB ka0x
2008-09-24   HotScripts Clone - 'cid' SQL Injection 7 WEB Hussin X
2008-09-23   WebPortal CMS 0.7.4 - 'code' Remote Code Execution 9 WEB GoLd_M
2008-09-23   Ol BookMarks Manager 0.7.5 - Local File Inclusion 7 WEB dun
2008-09-23   JETIK-WEB Software - 'kat' SQL Injection 9 WEB d3v1l
2008-09-23   Galmeta Post CMS 0.2 - Remote Code Execution / Arbitrary File Upload 7 WEB GoLd_M
2008-09-23   iGaming CMS 1.5 - Multiple SQL Injections 9 WEB StAkeR
2008-09-23   Sofi WebGui 0.6.3 PRE - 'mod_dir' Remote File Inclusion 7 WEB dun
2008-09-23   OpenRat 0.8-beta4 - 'tpl_dir' Remote File Inclusion 7 WEB dun
2008-09-22   CJ Ultra Plus 1.0.4 - Cookie SQL Injection 7 WEB -SmoG-
2008-09-22   Fez 1.3/2.0 RC1 - 'list.php' SQL Injection 7 WEB d3v1l
2008-09-22   basebuilder 2.0.1 - 'main.inc.php' Remote File Inclusion 7 WEB dun
2008-09-22   MyBlog 0.9.8 - Insecure Cookie Handling 7 WEB Pepelux
2008-09-22   OpenElec 3.01 - 'obj' Local File Inclusion 7 WEB dun
2008-09-22   WSN Links Free 4.0.34P - 'comments.php' Blind SQL Injection 7 WEB Stack
2008-09-22   WCMS 1.0b - 'news_detail.asp' SQL Injection 6 WEB CWH Underground
2008-09-22   BuzzyWall 1.3.1 - 'search' SQL Injection 7 WEB ~!Dok_tOR!~
2008-09-22   PHP iCalendar 2.24 - Insecure Cookie Handling 7 WEB Stack
2008-09-22   WSN Links 2.20 - 'comments.php' SQL Injection 7 WEB d3v1l
2008-09-22   WSN Links 2.22/2.23 - 'vote.php' SQL Injection 7 WEB d3v1l
2008-09-22   WCMS 1.0b - Arbitrary Add Admin 7 WEB CWH Underground
2008-09-21   AvailScript Article Script - 'view.php' SQL Injection 6 WEB Hussin X
2008-09-21   Rianxosencabos CMS 0.9 - Insecure Cookie Handling 7 WEB Stack
2008-09-21   6rbScript 3.3 - 'section.php' Local File Inclusion 7 WEB Stack
2008-09-21   PHP iCalendar 2.24 - 'cookie_language' Local File Inclusion / Arbitrary File Upload 7 WEB EgiX
2008-09-21   Netartmedia Real Estate Portal 1.2 - SQL Injection 8 WEB Encrypt3d.M!nd
2008-09-21   Netartmedia Jobs Portal 1.3 - Multiple SQL Injections 8 WEB Encrypt3d.M!nd
2008-09-21   e107 Plugin Image Gallery 0.9.6.2 - SQL Injection 8 WEB boom3rang
2008-09-21   AvailScript Jobs Portal Script - (Authenticated) Arbitrary File Upload 8 WEB InjEctOr5
2008-09-21   Rianxosencabos CMS 0.9 - Arbitrary Add Admin 8 WEB CWH Underground
2008-09-21   Diesel Job Site - 'job_id' Blind SQL Injection 8 WEB Stack
2008-09-21   6rbScript 3.3 - 'singerid' SQL Injection 8 WEB Hussin X
2008-09-21   PHPKB 1.5 Professional - Multiple SQL Injections 8 WEB d3v1l
2008-09-21   TWiki 4.2.2 - 'action' Remote Code Execution 7 WEB webDEViL
2008-09-21   Basic PHP Events Lister 1.0 - SQL Injection 7 WEB 0x90
2008-09-21   Invision Power Board 2.3.5 - SQL Injection 7 WEB waraxe
2008-09-20   jPORTAL 2 - 'humor.php' SQL Injection 7 WEB r45c4l
2008-09-20   Oceandir 2.9 - 'show_vote.php' SQL Injection 7 WEB JEEN HACKER TEAM
2008-09-20   Plaincart 1.1.2 - 'p' SQL Injection 8 WEB r45c4l
2008-09-20   Diesel Pay Script - 'area' SQL Injection 8 WEB ZoRLu
2008-09-20   MyFWB 1.0 - 'index.php' SQL Injection 8 WEB 0x90
2008-09-20   Explay CMS 2.1 - Insecure Cookie Handling 8 WEB Stack
2008-09-20   Advanced Electron Forum 1.0.6 - Remote Code Execution 8 WEB GulfTech Security
2008-09-19   Explay CMS 2.1 - Persistent Cross-Site Scripting / Cross-Site Request Forgery 8 WEB hodik
2008-09-19   easyLink 1.1.0 - 'detail.php' SQL Injection 8 WEB Egypt Coder
2008-09-19   Pluck CMS 4.5.3 - 'update.php' Remote File Corruption 8 WEB Nine:Situations:Group
2008-09-18   AssetMan 2.5-b - SQL Injection using Session Fixation 8 WEB Neo Anderson
2008-09-18   ProActive CMS - 'template' Local File Inclusion 8 WEB r45c4l
2008-09-18   Diesel Joke Site - 'picture_category.php' SQL Injection 8 WEB SarBoT511
2008-09-18   CYASK 3.x - 'neturl' Local File Disclosure 9 WEB xy7
2008-09-18   ProArcadeScript 1.3 - 'random' SQL Injection 8 WEB SuNHouSe2
2008-09-18   addalink 4 - 'category_id' SQL Injection 8 WEB ka0x
2008-09-18   E-PHP CMS - 'article.php' SQL Injection 8 WEB HaCkeR_EgY
2008-09-17   addalink 4 Beta - Write Approved Links 9 WEB Pepelux
2008-09-17   X10media Mp3 Search Engine 1.5.5 - Remote File Inclusion 8 WEB THUNDER
2008-09-17   Technote 7 - 'shop_this_skin_path' Remote File Inclusion 8 WEB webDEViL
2008-09-17   PHP Crawler 0.8 - Remote File Inclusion 8 WEB Piker
2008-09-17   phpRealty 0.3 - 'INC' Remote File Inclusion 8 WEB ka0x
2008-09-16   Hotel Reservation System - 'city.asp' Blind SQL Injection 8 WEB JosS
2008-09-16   Gonafish LinksCaffePRO 4.5 - 'index.php' SQL Injection 8 WEB sl4xUz
2008-09-16   Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities 8 WEB K-159
2008-09-16   iScripts EasyIndex - 'produid' SQL Injection 8 WEB SirGod
2008-09-15   Link Bid Script 1.5 - Multiple SQL Injections 8 WEB SirGod
2008-09-15   Pre Real Estate Listings - 'search.php' SQL Injection 8 WEB JosS
2008-09-15   CzarNews 1.20 - Account Hijacking SQL Injection 8 WEB 0ut0fbound
2008-09-15   CzarNews 1.20 - 'cookie' SQL Injection 8 WEB StAkeR
2008-09-14   cPanel 11.x - 'Fantastico' Local File Inclusion 8 WEB joker_1
2008-09-14   Kasseler CMS 1.1.0/1.2.0 Lite - SQL Injection 8 WEB ~!Dok_tOR!~
2008-09-14   Free PHP VX Guestbook 1.06 - Insecure Cookie Handling 8 WEB Stack
2008-09-13   Free PHP VX Guestbook 1.06 - Arbitrary Database Backup 8 WEB SirGod
2008-09-13   Linkarity - 'link.php' SQL Injection 8 WEB Egypt Coder
2008-09-13   FoT Video scripti 1.1b - 'oyun' SQL Injection 7 WEB Crackers_Child
2008-09-13   phpsmartcom 0.2 - Local File Inclusion / SQL Injection 8 WEB r3dm0v3
2008-09-13   Talkback 2.3.6 - Multiple Local File Inclusion / PHPInfo Disclosure Vulnerabilities 8 WEB SirGod
2008-09-13   Sports Clubs Web Panel 0.0.1 - Remote Game Delete 8 WEB ka0x
2008-09-13   pLink 2.07 - 'linkto.php' Blind SQL Injection 7 WEB Stack
2008-09-12   WebPortal CMS 0.7.4 - 'FCKeditor' Arbitrary File Upload 6 WEB S.W.A.T.
2008-09-12   pNews 2.03 - 'newsid' SQL Injection 6 WEB r45c4l
2008-09-12   vbLOGIX Tutorial Script 1.0 - 'cat_id' SQL Injection 7 WEB FIREH4CK3R
2008-09-12   SkaLinks 1.5 - 'register.php' Arbitrary Add Editor 7 WEB mr.al7rbi
2008-09-12   iBoutique 4.0 - 'cat' SQL Injection 6 WEB r45c4l
2008-09-12   WebPortal CMS 0.7.4 - 'download.php' SQL Injection 8 WEB StAkeR
2008-09-12   pForum 1.30 - 'showprofil.php' SQL Injection 8 WEB tmh
2008-09-12   PHPWebGallery 1.3.4 - Blind SQL Injection (2) 8 WEB ka0x