Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2006-04-24   BK Forum 4.0 - 'member.asp' SQL Injection 5 WEB n0m3rcy
2006-04-24   FlexBB 0.5.5 - '/function/showprofile.php' SQL Injection 5 WEB Devil-00
2006-04-23   Built2Go PHP Movie Review 2B - Remote File Inclusion 5 WEB Camille Myers
2006-04-23   Clansys 1.1 - 'index.php' PHP Code Insertion 4 WEB nukedx
2006-04-22   My Gaming Ladder Combo System 7.0 - Remote Code Execution 5 WEB nukedx
2006-04-21   dForum 1.5 - 'DFORUM_PATH' Multiple Remote File Inclusions 5 WEB nukedx
2006-04-21   Simplog 0.9.3 - 'tid' SQL Injection 4 WEB nukedx
2006-04-21   CoreNews 2.0.1 - 'userid' SQL Injection 4 WEB nukedx
2006-04-20   PHPSurveyor 0.995 - 'surveyid' Remote Command Execution 5 WEB rgod
2006-04-19   ASPSitem 1.83 - 'Haberler.asp' SQL Injection 4 WEB nukedx
2006-04-19   RechnungsZentrale V2 < 1.1.3 - Remote File Inclusion 4 WEB GroundZero Security
2006-04-19   Joomla! 1.0.7 / Mambo 4.5.3 - 'feed' Full Path Disclosure / Denial of Service 5 WEB trueend5
2006-04-19   PCPIN Chat 5.0.4 - 'login/language' Remote Code Execution 5 WEB rgod
2006-04-18   PHP Net Tools 2.7.1 - Remote Code Execution 5 WEB FOX_MULDER
2006-04-18   Internet PhotoShow 1.3 - 'page' Remote File Inclusion 4 WEB Hessam-x
2006-04-17   MyEvent 1.3 - 'event.php' Remote File Inclusion 5 WEB botan
2006-04-17   FlexBB 0.5.5 - '/inc/start.php?_COOKIE' SQL Bypass 4 WEB Devil-00
2006-04-16   Blackorpheus ClanMemberSkript 1.0 - SQL Injection 4 WEB snatcher
2006-04-16   Fuju News 1.0 - Authentication Bypass / SQL Injection 5 WEB snatcher
2006-04-15   Symantec Sygate Management Server - 'LOGIN' SQL Injection (Metasploit) 5 WEB Nicob
2006-04-15   PHP Album 0.3.2.3 - Remote Command Execution 5 WEB rgod
2006-04-14   SysInfo 1.21 - 'sysinfo.cgi' Remote Command Execution 4 WEB rgod
2006-04-14   osCommerce 2.2 - 'extras' Source Code Disclosure 4 WEB rgod
2006-04-14   phpWebSite 0.10.2 - 'hub_dir' Remote Command Execution 5 WEB rgod
2006-04-13   PAJAX 0.5.1 - Remote Code Execution 5 WEB Stoney
2006-04-13   quizz 1.01 - 'quizz.pl' Remote Command Execution 5 WEB FOX_MULDER
2006-04-13   Censtore 7.3.x - 'censtore.cgi' Remote Command Execution 5 WEB FOX_MULDER
2006-04-13   vBulletin ImpEx 1.74 - Remote Command Execution 5 WEB ReZEN
2006-04-12   PHP121 Instant Messenger 1.4 - Remote Code Execution 5 WEB rgod
2006-04-12   Sphider 1.3 - 'configset.php' Remote File Inclusion 4 WEB rgod
2006-04-11   Simplog 0.9.2 - 's' Remote Command Execution 5 WEB rgod
2006-04-10   Clansys 1.1 (showid) - SQL Injection 5 WEB snatcher
2006-04-10   phpBB 2.0.19 - 'user_sig_bbcode_uid' Remote Code Execution 5 WEB RusH
2006-04-10   Horde 3.0.9/3.1.0 - Help Viewer Remote Code Execution (Metasploit) 5 WEB Inkubus
2006-04-10   phpList 2.10.2 - 'GLOBALS[]' Remote Code Execution 5 WEB rgod
2006-04-09   Sire 2.0 - '/lire.php' Remote File Inclusion / Arbitrary File Upload 5 WEB simo64
2006-04-09   XBrite Members 1.1 - 'id' SQL Injection 5 WEB snatcher
2006-04-09   autonomous lan party 0.98.1.0 - Remote File Inclusion 5 WEB Codexploder
2006-04-09   dnGuestbook 2.0 - SQL Injection 5 WEB snatcher
2006-04-09   ADODB < 4.70 (PHPOpenChat 3.0.x) - 'Server.php' SQL Injection 5 WEB rgod
2006-04-07   Horde Help Viewer 3.1 - Remote Command Execution 5 WEB deese
2006-04-06   phpMyChat 0.15.0dev - SYS enter Remote Code Execution 6 WEB rgod
2006-04-05   phpMyChat 0.14.5 - SYS enter Remote Code Execution 4 WEB rgod
2006-04-04   Crafty Syntax Image Gallery 3.1g - Remote Code Execution 4 WEB undefined1_
2006-04-04   INDEXU 5.0.1 - 'base_path' Remote File Inclusion 4 WEB K-159
2006-04-04   AngelineCMS 0.8.1 - 'installpath' Remote File Inclusion 4 WEB K-159
2006-04-02   VWar 1.5.0 R12 - Remote File Inclusion 5 WEB uid0
2006-04-02   ReloadCMS 1.2.5 - Cross-Site Scripting / Remote Code Execution 4 WEB rgod
2006-04-01   PHPNuke-Clan 3.0.1 - 'vwar_root2' Remote File Inclusion 4 WEB uid0
2006-04-01   SQuery 4.5 - 'libpath' Remote File Inclusion 5 WEB uid0
2006-03-30   Claroline 1.7.4 - 'scormExport.inc.php' Remote Code Execution 4 WEB rgod
2006-03-29   EzASPSite 2.0 RC3 - 'Scheme' SQL Injection 4 WEB nukedx
2006-03-28   Plogger Beta 2.1 - Administrative Credentials Disclosure 4 WEB rgod
2006-03-28   GreyMatter WebLog 1.21d - Remote Command Execution (2) 5 WEB Hessam-x
2006-03-28   GreyMatter WebLog 1.21d - Remote Command Execution (1) 5 WEB No_Face_King
2006-03-28   PHPCollab 2.x / NetOffice 2.x - 'sendpassword.php' SQL Injection 5 WEB rgod
2006-03-26   Aztek Forum 4.0 - 'myadmin.php' User Privilege Escalation 5 WEB Sparah
2006-03-26   CuteNews 1.4.1 - 'function.php' Local File Inclusion 5 WEB Hamid Ebadi
2006-03-25   TFT Gallery 0.10 - Password Disclosure 5 WEB undefined1_
2006-03-25   phpBookingCalendar 1.0c - 'details_view.php' SQL Injection 6 WEB undefined1_
2006-03-25   PHP Ticket 0.71 - 'search.php' SQL Injection 5 WEB undefined1_
2006-03-25   WebAlbum 2.02pl - COOKIE[skin2] Remote Code Execution 7 WEB rgod
2006-03-22   XHP CMS 0.5 - 'upload' Remote Command Execution 4 WEB rgod
2006-03-21   FreeWPS 2.11 - 'images.php' Remote Code Execution 4 WEB x128
2006-03-20   ASPPortal 3.1.1 - 'downloadid' SQL Injection 5 WEB nukedx
2006-03-20   gCards 1.45 - Multiple Vulnerabilities 5 WEB rgod
2006-03-19   SoftBB 0.1 - 'mail' Blind SQL Injection 4 WEB LOTFREE
2006-03-18   ShoutLIVE 1.1.0 - 'savesettings.php' Remote Code Execution 5 WEB DarkFig
2006-03-18   BetaParticle Blog 6.0 - 'fldGalleryID' SQL Injection 5 WEB nukedx
2006-03-18   nodez 4.6.1.1 mercury - Multiple Vulnerabilities 5 WEB rgod
2006-03-15   KnowledgebasePublisher 1.2 - 'Include' Remote Code Execution 5 WEB uid0
2006-03-15   PHP iCalendar 2.21 - 'publish.ical.php' Remote Code Execution 5 WEB rgod
2006-03-15   PHP iCalendar 2.21 - 'cookie' Remote Code Execution 4 WEB rgod
2006-03-13   Simple PHP Blog 0.4.7.1 - Remote Command Execution 5 WEB rgod
2006-03-11   Jupiter CMS 1.1.5 - Multiple Cross-Site Scripting Vulnerabilities 6 WEB Nomenumbra
2006-03-11   Guestbook Script 1.7 - 'include_files' Remote Code Execution 5 WEB rgod
2006-03-09   JiRos Banner Experience 1.0 - Unauthorized Create Admin 6 WEB nukedx
2006-03-09   Light Weight Calendar 1.x - 'date' Remote Code Execution 5 WEB Hessam-x
2006-03-09   d2kBlog 1.0.3 - 'memName' SQL Injection 5 WEB DevilBox
2006-03-08   RedBLoG 0.5 - 'cat_id' SQL Injection 5 WEB x128
2006-03-08   Gallery 2.0.3 - 'stepOrder[]' Remote Command Execution 5 WEB rgod
2006-03-07   Limbo CMS 1.0.4.2 - 'itemID' Remote Code Execution (Metasploit) 5 WEB sirh0t
2006-03-07   CilemNews System 1.1 - 'yazdir.asp' haber_id SQL Injection 6 WEB nukedx
2006-03-07   OWL Intranet Engine 0.82 - 'xrms_file_root' Code Execution 4 WEB rgod
2006-03-06   D2-Shoutbox 4.2 IPB Mod - 'load' SQL Injection 4 WEB SkOd
2006-03-04   Fantastic News 2.1.2 - 'script_path' Remote Code Execution 5 WEB uid0
2006-03-04   TotalECommerce 1.0 - 'index.asp?id' SQL Injection 5 WEB nukedx
2006-03-04   PHP-Stats 0.1.9.1 - Remote Commans Execution 5 WEB rgod
2006-03-03   MyBulletinBoard (MyBB) 1.04 - 'misc.php' SQL Injection (2) 5 WEB Devil-00
2006-03-02   Aztek Forum 4.00 - Cross-Site Scripting / SQL Injection 5 WEB lorenzo
2006-03-02   phpRPC Library 0.7 - XML Data Decoding Remote Code Execution (2) 5 WEB cijfer
2006-03-01   Woltlab Burning Board 2.x - Datenbank MOD 'fileid' SQL Injection 6 WEB nukedx
2006-03-01   vuBB 0.2 Final - 'cookie' SQL Injection 5 WEB KingOfSka
2006-03-01   phpRPC Library 0.7 - XML Data Decoding Remote Code Execution (1) 4 WEB LorD
2006-03-01   Limbo CMS 1.0.4.2 - 'itemID' Remote Code Execution 5 WEB str0ke
2006-02-28   MyBulletinBoard (MyBB) 1.03 - 'misc.php' SQL Injection 5 WEB Devil-00
2006-02-28   Farsinews 2.5 - Directory Traversal Arbitrary 'users.db' Access 5 WEB Hessam-x
2006-02-26   4Images 1.7.1 - Local File Inclusion / Remote Code Execution 5 WEB rgod
2006-02-25   PwsPHP 1.2.3 - 'index.php' SQL Injection 4 WEB papipsycho
2006-02-25   saPHP Lesson 2.0 - 'forumid' SQL Injection 4 WEB SnIpEr_SA
2006-02-25   Pentacle In-Out Board 6.03 - 'login.asp' Remote Authentication Bypass 4 WEB nukedx
2006-02-25   Pentacle In-Out Board 6.03 - 'newsdetailsview' SQL Injection 5 WEB nukedx
2006-02-25   iGENUS WebMail 2.0.2 - 'config_inc.php' Remote Code Execution 5 WEB rgod
2006-02-24   Lansuite 2.1.0 Beta - 'fid' SQL Injection 4 WEB x128
2006-02-24   phpWebSite 0.10.0-full - 'topics.php' SQL Injection 5 WEB SnIpEr_SA
2006-02-23   VHCS 2.4.7.1 - Add User Authentication Bypass 4 WEB RoMaNSoFt
2006-02-23   PHP-Nuke 7.5 < 7.8 - 'Search' SQL Injection 4 WEB unitedbr
2006-02-23   NOCC Webmail 1.0 - Local File Inclusion / Remote Code Execution 5 WEB rgod
2006-02-22   Noahs Classifieds 1.3 - 'lowerTemplate' Remote Code Execution 5 WEB trueend5
2006-02-20   ilchClan 1.05g - 'tid' SQL Injection 6 WEB x128
2006-02-20   GeekLog 1.x - 'error.log' Remote Command Execution 5 WEB rgod
2006-02-19   MiniNuke 1.8.2b - 'pages.asp' SQL Injection 4 WEB nukedx
2006-02-19   BXCP 0.2.9.9 - 'tid' SQL Injection 4 WEB x128
2006-02-19   Admbook 1.2.2 - 'x-forwarded-for' Remote Command Execution 5 WEB rgod
2006-02-17   Coppermine Photo Gallery 1.4.3 - Remote Command Execution 5 WEB rgod
2006-02-17   Gravity Board X 1.1 - 'csscontent' Remote Code Execution 4 WEB RusH
2006-02-17   Zorum Forum 3.5 - 'rollid' SQL Injection 4 WEB RusH
2006-02-17   AWStats < 6.4 - 'referer' Remote Command Execution 4 WEB RusH
2006-02-16   YapBB 1.2 - 'cfgIncludeDirectory' Remote Command Execution 6 WEB cijfer
2006-02-16   PHPKIT 1.6.1R2 - 'filecheck' Remote Command Execution 4 WEB rgod
2006-02-15   MyBulletinBoard (MyBB) 1.03 - Multiple SQL Injections 5 WEB HACKERS PAL
2006-02-14   webSPELL 4.01 - 'title_op' SQL Injection 4 WEB x128
2006-02-13   FlySpray 0.9.7 - 'install-0.9.7.php' Remote Command Execution 6 WEB rgod
2006-02-13   EnterpriseGS 1.0 rc4 - Remote Command Execution 5 WEB rgod
2006-02-13   Invision Power Board Army System Mod 2.1 - SQL Injection 5 WEB fRoGGz