|
2012-07-04
|
|
gp easy CMS Minishop 1.5 Plugin Persistent XSS
|
102 |
WEB
|
Carlos Mario Penagos Hollmann
|
|
2012-07-03
|
|
WordPress yet-another-photoblog plugin Full path disclosure Vulnerability
|
154 |
WEB
|
KinG Of PiraTeS
|
|
2012-07-03
|
|
Geswebs - SQL Injection Vulnerability
|
127 |
WEB
|
TheCyberNuxbie
|
|
2012-07-03
|
|
Global Pixel - SQL Injection Vulnerability
|
121 |
WEB
|
TAURUS OMAR
|
|
2012-07-03
|
|
vBulletin 3.x.x full path disclosure Vulnerability
|
131 |
WEB
|
Angel Injection
|
|
2012-07-03
|
|
BoutikOne CSRF Add User Vulnerability
|
130 |
WEB
|
GarA
|
|
2012-07-03
|
|
BoutikOne ByPass & Download Backup Vulnerability
|
118 |
WEB
|
GarA
|
|
2012-07-03
|
|
WANGKONGBAO CNS-1000 UTM IPS-FW Directory Traversal
|
96 |
WEB
|
Dillon Beresford
|
|
2012-07-03
|
|
IIS Short File/Folder Name Disclosure
|
128 |
WEB
|
Soroush Dalili
|
|
2012-06-20
|
|
iBoutique eCommerce v4.0 Multiple Web Vulnerabilites
|
324 |
WEB
|
Vulnerability-Lab
|
|
2012-06-20
|
|
CMS Balitbang - CSRF/XSS Vulnerability
|
116 |
WEB
|
TheCyberNuxbie
|
|
2012-06-19
|
|
e107 Plugins - Image Gallery Remote File Disclosure Vulnerability
|
101 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
e107 Plugins - Hupsi fancybox Arbitrary File Upload Vulnerability
|
97 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
e107 Plugins - Filemanager Arbitrary File Upload Vulnerability
|
87 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
e107 Plugins - Radio Plan Arbitrary File Upload Vulnerability
|
139 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
e107 Plugins - Tap Arbitrary File Upload Vulnerability
|
85 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
e107 Plugins - Hupsis Media Gallery Arbitrary File Upload Vulnerability
|
97 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
e107 Plugins - Hupsi Share Arbitrary File Upload Vulnerability
|
103 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
e107 Plugins - FilleDownload Plugin Multiple Vulnerability
|
126 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
proservice cms Sql Injection Vulnerablity
|
127 |
WEB
|
cheki
|
|
2012-06-19
|
|
MyTickets 1 to 2.0.8 Blind SQL Injection
|
104 |
WEB
|
al-swisre
|
|
2012-06-19
|
|
Nuked Klan SP CMS v4.5 SQL Injection Vulnerability
|
123 |
WEB
|
Vulnerability-Lab
|
|
2012-06-15
|
|
qdPM v.7 Arbitrary File upload
|
138 |
WEB
|
loneferret
|
|
2012-06-14
|
|
Wordpress Plugins - Invit0r Arbitrary File Upload Vulnerability
|
116 |
WEB
|
Sammy FORGIT
|
|
2012-06-14
|
|
Wordpress Plugins - Evarisk Arbitrary File Upload Vulnerability
|
117 |
WEB
|
Sammy FORGIT
|
|
2012-06-14
|
|
RevolutionTechnologies - SQL Injection Vulnerability
|
91 |
WEB
|
TheCyberNuxbie
|
|
2012-06-14
|
|
PHP 5.4.3 (cli) code read vulnerability
|
104 |
WEB
|
cheki
|
|
2012-06-14
|
|
seoPLUSteam SQL Injection Vulnerability
|
90 |
WEB
|
Iranian_Dark_Coders_Team
|
|
2012-06-14
|
|
XAMPP Windows 1.7.7 multiple XSS/Blind SQL Injection Vulnerabilities
|
108 |
WEB
|
Sangteamtham
|
|
2012-06-14
|
|
WordPress plugin Foxypress uploadify.php Arbitrary Code Execution
|
102 |
WEB
|
patrick
|
|
2012-06-13
|
|
Edimax IC-3030iWn Authentication Bypass
|
98 |
WEB
|
y3dips
|
|
2012-06-13
|
|
Wordpress Plugins - Annonces Arbitrary File Upload Vulnerability
|
109 |
WEB
|
Sammy FORGIT
|
|
2012-06-13
|
|
Symantec Web Gateway 5.0.2.8 ipchange.php Command Injection
|
103 |
WEB
|
juan vazquez
|
|
2012-06-12
|
|
[Spanish] Remote Command Execution through Local File Inclusion
|
127 |
WEB
|
JosS
|
|
2012-06-12
|
|
TheBlog <= 2.0 Multiple Vulnerabilities
|
124 |
WEB
|
WhiteCollarGroup
|
|
2012-06-12
|
|
Agora-Project 2.12.11 Arbitrary File Upload Vulnerability
|
112 |
WEB
|
Misa3l
|
|
2012-06-12
|
|
ClanSuite 2.9 Arbitrary File Upload Vulnerability
|
106 |
WEB
|
Adrien Thierry
|
|
2012-06-11
|
|
Symantec Web Gateway 5.0.2.8 Arbitrary PHP File Upload Vulnerability
|
130 |
WEB
|
juan vazquez
|
|
2012-06-11
|
|
phpAcounts v.0.5.3 SQL Injection
|
114 |
WEB
|
loneferret
|
|
2012-06-11
|
|
Wordpress wpStoreCart Plugin 2.5.27-2.5.29 Arbitrary File Upload
|
90 |
WEB
|
Sammy FORGIT
|
|
2012-06-11
|
|
Wordpress RBX Gallery Plugin 2.1 Arbitrary File Upload
|
112 |
WEB
|
Sammy FORGIT
|
|
2012-06-08
|
|
Wordpress Omni Secure Files Plugin 0.1.13 Arbitrary File Upload
|
126 |
WEB
|
Adrien Thierry
|
|
2012-06-08
|
|
Wordpress Front End Upload 0.5.3 Arbitrary File Upload
|
109 |
WEB
|
Adrien Thierry
|
|
2012-06-08
|
|
PHPNet <= 1.8 (ler.php) SQL Injection
|
109 |
WEB
|
WhiteCollarGroup
|
|
2012-06-08
|
|
SN News <= 1.2 (/admin/loger.php) Admin Bypass SQL Injection
|
166 |
WEB
|
Pr0T3cT10n
|
|
2012-06-07
|
|
Vanilla kPoll Plugin 1.2 Stored XSS
|
115 |
WEB
|
Henry Hoggard
|
|
2012-06-07
|
|
SN News (visualiza.php) <= 1.2 SQL Injection
|
135 |
WEB
|
WhiteCollarGroup
|
|
2012-06-07
|
|
Wordpress Gallery Plugin 3.06 Arbitrary File Upload
|
122 |
WEB
|
Sammy FORGIT
|
|
2012-06-07
|
|
Wordpress MM Forms Community Plugin 2.2.6 Arbitrary File Upload
|
122 |
WEB
|
Sammy FORGIT
|
|
2012-06-07
|
|
Wordpress VideoWhisper Video Presentation Plugin 3.17 Arbitrary File Upload
|
113 |
WEB
|
Sammy FORGIT
|
|
2012-06-07
|
|
Wordpress FCChat Widget 2.2.12.4 Arbitrary File Upload
|
122 |
WEB
|
Sammy FORGIT
|
|
2012-06-07
|
|
Wordpress Font Uploader Plugin 1.2.4 Arbitrary File Upload
|
96 |
WEB
|
Sammy FORGIT
|
|
2012-06-07
|
|
Evolutia Design - SQL Injection Vulnerability
|
119 |
WEB
|
D0m12
|
|
2012-06-07
|
|
Bigware Shop SQL Injection Vulnerability
|
123 |
WEB
|
expku
|
|
2012-06-06
|
|
Wordpress Asset Manager Plugin 0.2 Arbitrary File Upload
|
107 |
WEB
|
Sammy FORGIT
|
|
2012-06-06
|
|
Wordpress Foxypress Plugin 0.4.1.1 - 0.4.2.1 Arbitrary File Upload
|
106 |
WEB
|
Sammy FORGIT
|
|
2012-06-06
|
|
Wordpress HTML5 AV Manager Plugin 0.2.7 Arbitrary File Upload
|
121 |
WEB
|
Sammy FORGIT
|
|
2012-06-06
|
|
Wordpress Google Maps via Store Locator Plugin Multiple Vulnerabilities
|
105 |
WEB
|
Sammy FORGIT
|
|
2012-06-06
|
|
Wordpress WP Marketplace Plugin 1.5.0 - 1.6.1 Arbitrary File Upload
|
112 |
WEB
|
Sammy FORGIT
|
|
2012-06-06
|
|
Wordpress WP-Property Plugin 1.35.0 Arbitrary File Upload
|
136 |
WEB
|
Sammy FORGIT
|
|
2012-06-06
|
|
Mnews <= 1.1 (view.php) SQL Injection
|
101 |
WEB
|
WhiteCollarGroup
|
|
2012-06-06
|
|
Hexamail Server <= 4.4.5 Persistent XSS Vulnerability
|
124 |
WEB
|
modpr0be
|
|
2012-06-04
|
|
Log1 CMS writeInfo() PHP Code Injection
|
123 |
WEB
|
sinn3r
|
|
2012-06-01
|
|
Supernews <= 2.6.1 (noticias.php cat) SQL Injection
|
89 |
WEB
|
Pr0T3cT10n
|
|
2012-06-01
|
|
NewsAdd <= 1.0 (lerNoticia.php id) SQL Injection Vulnerability
|
97 |
WEB
|
Pr0T3cT10n
|
|
2012-06-01
|
|
Simple Web Content Management System 1.1 Multiple SQL Injection
|
121 |
WEB
|
loneferret
|
|
2012-06-01
|
|
4PSA VoipNow Professional 2.5.3 Reflected XSS / CSRF (Add Reseller) Vulnerabilities
|
110 |
WEB
|
Aboud-el
|
|
2012-05-31
|
|
PHP Volunteer Management System v1.0.2 Arbitrary File Upload
|
128 |
WEB
|
sinn3r
|
|
2012-05-31
|
|
StyleDesign - Multiple SQL Injection Vulnerability
|
111 |
WEB
|
TheCyberNuxbie
|
|
2012-05-31
|
|
Ibaguenet - SQL Injection Vulnerability
|
106 |
WEB
|
TheCyberNuxbie
|
|
2012-05-31
|
|
Ganesha Digital Library 4.0 Multiple Vulnerabilities
|
92 |
WEB
|
X-Cisadane
|
|
2012-05-31
|
|
NewsAdd <=1.0 Multiple SQL Injection Vulnerabilities
|
133 |
WEB
|
WhiteCollarGroup
|
|
2012-05-31
|
|
WHMCS 5 Multiple CSRF (Add Admin) and XSS Vulnerability
|
127 |
WEB
|
Shadman Tanjim
|
|
2012-05-30
|
|
VAMCart-InternetShop v0.9 (TinyBrowser) File Upload Code Execution
|
166 |
WEB
|
KedAns-Dz
|
|
2012-05-30
|
|
VAMCart-InternetShop v0.9 (XSRF/FileUpload) Vulnerabilities
|
98 |
WEB
|
KedAns-Dz
|
|
2012-05-30
|
|
PBBoard v2.1.4 Multiple SQL Injection Vulnerabilities
|
111 |
WEB
|
loneferret
|
|
2012-05-30
|
|
PBBoard 2.1.4 Local File Inclusion
|
121 |
WEB
|
n4ss1m
|
|
2012-05-30
|
|
Darby Communications - SQL Injection Vulnerability
|
107 |
WEB
|
D0m12
|
|
2012-05-30
|
|
PBBoard v2.1.4 (CSRF) Arbitrary File Upload and Command Execution (MSF)
|
132 |
WEB
|
KedAns-Dz
|
|
2012-05-29
|
|
PHP Volunteer Management System v 1.0.2 multiple SQLi Vuln.
|
107 |
WEB
|
loneferret
|
|
2012-05-29
|
|
PHP Volunteer Management System v 1.0.2 Multiple Vulnerabilities
|
120 |
WEB
|
Ashoo
|
|
2012-05-28
|
|
b2ePMS 1.0 multiple SQLi Vulnerabilities
|
96 |
WEB
|
loneferret
|
|
2012-05-28
|
|
WeBid converter.php Remote PHP Code Injection
|
133 |
WEB
|
EgiX
|
|
2012-05-25
|
|
Jaow <= 2.4.5 Blind SQL Injection
|
110 |
WEB
|
kallimero
|
|
2012-05-25
|
|
Social Engine 4.2.2 Multiples Vulnerabilities
|
163 |
WEB
|
expku
|
|
2012-05-24
|
|
appRain CMF Arbitrary PHP File Upload Vulnerability
|
122 |
WEB
|
EgiX
|
|
2012-05-22
|
|
Supernews <= 2.6.1 SQL Injection Exploit
|
131 |
WEB
|
WhiteCollarGroup
|
|
2012-05-22
|
|
Vanilla FirstLastNames 1.3.2 Plugin Persistant XSS
|
116 |
WEB
|
Henry Hoggard
|
|
2012-05-22
|
|
Vanilla Forums About Me Plugin Persistant XSS
|
117 |
WEB
|
Henry Hoggard
|
|
2012-05-22
|
|
Vanilla Forums LatestComment 1.1 Plugin Persistent XSS
|
77 |
WEB
|
Henry Hoggard
|
|
2012-05-22
|
|
Aholattafun Creative Solutions SQL Injection Vulnerabilities
|
104 |
WEB
|
Becax
|
|
2012-05-18
|
|
Division 6 IT - SQLi/XSS Vulnerability
|
111 |
WEB
|
TheCyberNuxbie
|
|
2012-05-18
|
|
NACElink CS Manager - Persistent Web Vulnerability
|
86 |
WEB
|
expku
|
|
2012-05-18
|
|
Doorsweb SQL Injection Vulnerability
|
113 |
WEB
|
dr.nass3r
|
|
2012-05-18
|
|
Doll shopping store Kr/Jp [SQL injection Vulnerability]
|
122 |
WEB
|
Becax
|
|
2012-05-17
|
|
SMCWBR14-G2 PPPoE Data Disclosure (ADSL Router)
|
156 |
WEB
|
KinG Of PiraTeS
|
|
2012-05-17
|
|
LAN Messenger v1.2.28 - Persistent Software Vulnerability
|
120 |
WEB
|
expku
|
|
2012-05-17
|
|
MobileSpy Android|iPhone|W7P|sOS - Web Vulnerabilities
|
161 |
WEB
|
expku
|
|
2012-05-17
|
|
CLscript CMS v3.0 - Multiple Web Vulnerabilities
|
101 |
WEB
|
expku
|
|
2012-05-17
|
|
Minnesota Premier Publications [SQL injection Vulnerability]
|
115 |
WEB
|
Becax
|
|
2012-05-17
|
|
Artiphp CMS v5.5.0 Multiple XSS POST Injection Vulnerabilities
|
113 |
WEB
|
LiquidWorm
|
|
2012-05-17
|
|
backupDB() v1.2.7a (onlyDB) Remote XSS Vulnerability
|
113 |
WEB
|
LiquidWorm
|
|
2012-05-17
|
|
phpThumb() v1.7.11 (dir & title) Cross-Site Scripting Vulnerability
|
114 |
WEB
|
LiquidWorm
|
|
2012-05-17
|
|
Serendipity 1.6 Backend XSS And SQLi Vulnerability
|
84 |
WEB
|
Stefan Schurtz
|
|
2012-05-17
|
|
Artiphp CMS 5.5.0 Database Backup Disclosure Exploit
|
123 |
WEB
|
LiquidWorm
|
|
2012-05-17
|
|
OpenKM Document Management System 5.1.7 Command Execution
|
241 |
WEB
|
Cyrill Brunschwiler
|
|
2012-05-16
|
|
Axous 1.1.1 Multiple Vulnerabilities (CSRF - Persistent XSS)
|
213 |
WEB
|
Ivano Binetti
|
|
2012-05-16
|
|
HUAWEI SmartAX MT880 CSRF Vulnerability (ADSL Router)
|
147 |
WEB
|
KinG Of PiraTeS
|
|
2012-05-16
|
|
TunInfo - SQL Injection Vulnerability
|
120 |
WEB
|
TheCyberNuxbie
|
|
2012-05-16
|
|
Serendipity 1.6 Backend XSS And SQLi Vulnerability
|
112 |
WEB
|
Stefan Schurtz
|
|
2012-05-16
|
|
b2ePMS 1.0 Authentication Bypass Vulnerability
|
116 |
WEB
|
Jean Pascal Pereira
|
|
2012-05-16
|
|
Liferay Portal 6.1 - 6.0.x Privilege Escalation
|
130 |
WEB
|
Jelmer Kuperus
|
|
2012-05-15
|
|
Web ellasan Design [SQL injection Vulnerability]
|
99 |
WEB
|
Becax
|
|
2012-05-15
|
|
NTDS - SQL Injection Vulnerability
|
118 |
WEB
|
TheCyberNuxbie
|
|
2012-05-15
|
|
Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities
|
127 |
WEB
|
expku
|
|
2012-05-15
|
|
Vallarta - SQL Injection Vulnerability
|
117 |
WEB
|
TheCyberNuxbie
|
|
2012-05-15
|
|
Topics viewer v 2.3 csrf (Add Admin) / XSS Vulnerabilites
|
110 |
WEB
|
Cyber-Crystal
|
|
2012-05-14
|
|
WikkaWiki 1.3.2 Spam Logging PHP Injection
|
232 |
WEB
|
sinn3r
|
|
2012-05-14
|
|
Belkin N150 Wireless Router Password Disclosure
|
97 |
WEB
|
Avinash Tangirala
|
|
2012-05-11
|
|
Access Bank PLC SQL injection Vulnerability
|
98 |
WEB
|
Mr.ExiT
|
|
2012-05-11
|
|
lucid design Blind sql Injection Vulnerability
|
116 |
WEB
|
Angel Injection
|
|
2012-05-11
|
|
eLearning Server 4G Multiple Remote Vulnerabilities
|
112 |
WEB
|
Andrey Komarov
|
|
2012-05-11
|
|
Kerio WinRoute Firewall Web Server < 6 Source Code Disclosure
|
116 |
WEB
|
Andrey Komarov
|
|
2012-05-10
|
|
Idea 7 - SQL Injection Vulnerability
|
97 |
WEB
|
D0m12
|
|
2012-05-10
|
|
BaglerCMS- SQLi/XSS Vulnerability
|
117 |
WEB
|
TheCyberNuxbie
|
