Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2012-02-03   Sphinix Mobile Web Server 3.1.2.47 Multiple Persistent XSS Vulnerabilities 115 WEB SecPod Research
2012-02-02   MailEnable Webmail Cross-Site Scripting Vulnerability 118 WEB Sajjad Pourali
2012-02-02   Webkit normalize bug for android 2.2 (CVE-2010-1759) 122 WEB MJ Keith
2012-02-02   SiT! Support Incident Tracker 3.64 Multiple Vulnerabilities 103 WEB High-Tech Bridge SA
2012-02-02   swDesk Multiple Vulnerabilities 117 WEB Red Security TEAM
2011-12-13   Squiz Matrix - User Account Enumeration 102 WEB Troy Rose
2011-12-12   Docebo LMS <= v4.0.4 (messages) Remote Code Execution 127 WEB mr_me
2011-12-09   QContacts 1.0.6 (Joomla component) SQL injection 110 WEB Don
2011-12-09   SantriaCMS SQL Injection Vulnerability 130 WEB Troy
2011-12-09   QContacts 1.0.6 (Joomla component) SQL injection 120 WEB Don
2011-12-08   SourceBans <= 1.4.8 SQL/LFI Injection 130 WEB Havok
2011-12-08   SMF <= 2.0.1 SQL Injection, Privilege Escalation 131 WEB The:Paradox
2011-12-08   Traq <= 2.3 Authentication Bypass / Remote Code Execution Exploit 113 WEB EgiX
2011-12-08   phpBB MyPage Plugin SQL Injection 123 WEB CrazyMouse
2011-12-08   Family Connections less.php Remote Command Execution 113 WEB mr_me
2011-12-08   Php City Portal Script Software SQL Injection 151 WEB Don
2011-12-07   AlstraSoft EPay Enterprise v4.0 Blind SQL Injection 213 WEB Don
2011-12-07   PEC php calendars script SQL Injection 113 WEB Mr.MLL
2011-12-07   Five Star Review Remote SQL Injection (recommend.php) 122 WEB EthicalPractice
2011-12-07   Meditate Web Content Editor 'username_input' SQL-Injection vulnerability 104 WEB Stefan Schurtz
2011-12-06   Apache MyFaces information disclosure vulnerability 239 WEB expku
2011-12-06   Meditate Web Content Editor 'username_input' SQL-Injection vulnerability 111 WEB Stefan Schurtz
2011-12-06   majalty (category.php) Blind SQL Injection Vulnerability 287 WEB TH3.ONE
2011-12-05   Family Connections CMS v2.5.0-v2.7.1 (less.php) Remote Command Execution 114 WEB mr_me
2011-12-05   WSN Classifieds v.6.2.12 and 6.2.18 Multiple Vulnerabilities 136 WEB d3v1l
2011-12-05   Joomla Jobprofile Component (com_jobprofile) SQL Injection 124 WEB kaMtiEz
2011-12-05   CLEVAR CMS Multiple Vulnerabilities 146 WEB Mr.XHat
2011-12-05   Con-IMedia SQL inj: vulnerable 239 WEB nGa Sa Lu
2011-12-02   Muster Render Farm Management System Arbitrary File Download 99 WEB Nick Freeman
2011-12-01   WikkaWiki <= 1.3.2 Multiple Security Vulnerabilities 221 WEB EgiX
2011-11-29   Bypass the JQuery-Real-Person captcha plugin 0-day 156 WEB Alberto_García_Illera
2011-11-28   Android 'content://' URI Multiple Information Disclosure Vulnerabilities 117 WEB Thomas Cannon
2011-11-28   php video script SQL Injection Vulnerability 126 WEB longrifle0x
2011-11-25   Zabbix <= 1.8.4 (popup.php) SQL Injection 117 WEB Marcio Almeida
2011-11-25   LibLime Koha <= 4.2 Local File Inclusion Vulnerability 118 WEB Akin Tosunlar
2011-11-25   Log1CMS 2.0 (ajax_create_folder.php) Remote Code Execution 165 WEB Adel SBM
2011-11-25   PmWiki <= 2.2.34 (pagelist) Remote PHP Code Injection Exploit 113 WEB EgiX
2011-11-25   A6-CMS(ACMS) 5.30 (ajax_create_folder.php) Remote Code Execution 171 WEB Adel SBM
2011-11-25   icomex cms sql injection vulnerability 185 WEB XaDaL
2011-11-23   PHP-Nuke <= 8.1.0.3.5b (Downloads) Remote Blind SQL Injection 125 WEB Dante90
2011-11-18   Herberlin Bremsserver 3.0 Directory Traversal 90 WEB AutoSec Tools
2011-11-17   SonicWALL Aventail SSL-VPN SQL Injection Vulnerability 123 WEB Asheesh kumar
2011-11-17   FreeWebshop <= 2.2.9 R2 (ajax_save_name.php) Remote Code Execution 91 WEB EgiX
2011-11-16   QuiXplorer 2.3 <= Bugtraq File Upload Vulnerability 129 WEB PCA
2011-11-15   Pixie CMS 1.01 - 1.04 Blind SQL Injections 120 WEB Piranha
2011-11-15   WordPress AdRotate plugin <= 3.6.6 SQL Injection 129 WEB Miroslav Stampar
2011-11-14   Tamweb CMS SQL Injection Vulnerability 196 WEB Mr.XHat
2011-11-14   Wordpress Zingiri Plugin <= 2.2.3 (ajax_save_name.php) Remote Code Execution 118 WEB EgiX
2011-11-14   CMS 4.x.x Zorder (SQL Injection Vul) 103 WEB KraL BeNiM
2011-11-14   Support Incident Tracker <= 3.65 Remote Command Execution 117 WEB juan vazquez
2011-11-10   LabWiki <= 1.1 Multiple Vulnerabilities 110 WEB muuratsalo
2011-11-10   osCSS2 "_ID" parameter Local file inclusion 104 WEB Stefan Schurtz
2011-11-10   ReadMore Systems, Incorporated (BQLi Injections) 132 WEB KraL BeNiM
2011-11-10   Cover Vision Blind SQL Injection Vulnerbility 118 WEB KraL BeNiM
2011-11-09   11in1 CMS v1.0.1 (do.php) CRLF Injection Vulnerability 119 WEB LiquidWorm
2011-11-08   OrderSys <= 1.6.4 Sql Injection Vulnerabilities 108 WEB muuratsalo
2011-11-08   LabStoRe <= 1.5.4 Sql Injection Vulnerabilities 105 WEB muuratsalo
2011-11-08   WHMCS ( WHMCompleteSolution ) 3.x / 4.x Multiple Vulnerability 137 WEB ZxH-Labs
2011-11-08   Readmore Systems Online Newspaper Publishing Sql Injection Vuln 104 WEB 4tt4ck3r
2011-11-07   Oracle NoSQL Directory Traversal 116 WEB Charter
2011-11-07   OrderSys <= 1.6.4 SQL Injection 110 WEB muuratsalo
2011-11-07   LabStoRe <= 1.5.4 SQL Injection 110 WEB muuratsalo
2011-11-07   aidiCMS v3.55 (ajax_create_folder.php) Remote Code Execution 93 WEB EgiX
2011-11-07   phpMyFAQ <= 2.7.0 (ajax_create_folder.php) Remote Code Execution 122 WEB EgiX
2011-11-07   Zenphoto <= 1.4.1.4 (ajax_create_folder.php) Remote Code Execution 125 WEB EgiX
2011-11-07   WHMCS 3.x.x (clientarea.php) Local File Disclosure 131 WEB red virus
2011-11-07   HP Data Protector Media Operations <= 6.20 Directory Traversal 92 WEB Luigi Auriemma
2011-11-07   Advanced Poll 2.02 SQL Injection Vulnerability 119 WEB Yassin Aboukir
2011-11-07   Ajax File and Image Manager v1.0 Final Remote Code Execution Vulnerability 118 WEB EgiX
2011-11-07   Ajax File Manager File Upload Vulnerability 227 WEB X-Cisadane
2011-11-07   Wateen Isp wimax router login bypass 112 WEB 3xploits
2011-11-07   cmsmadesimple-1.8.2 File Upload Vulnerability 120 WEB ITTIHACK
2011-11-07   LightNEasy 3.4.2 Multiple Vulnerabilities 114 WEB X-Cisadane
2011-11-07   Wordpress plugin FBConnect SQL-Inj 146 WEB cyber-punk
2011-11-07   CaupoShop Pro (2.x/ <= 3.70) Local File Include Vulnerability 97 WEB Rami Salama
2011-11-04   Web File Browser 0.4b14 File Download Vulnerability 137 WEB Sangyun YOO
2011-11-04   Jara v1.6 Multiple Vulnerabilities 104 WEB Or4nG.M4N
2011-11-04   CaupoShop Pro (2.x/ <= 3.70) Classic 3.01 Local File Include Vulnerability 106 WEB Rami Salama
2011-11-03   SetSeed CMS 5.8.20 (loggedInUser) Remote SQL Injection Vulnerability 100 WEB LiquidWorm
2011-11-03   BST - BestShopPro (nowosci.php) Multiple Vulnerabilities 113 WEB CoBRa_21
2011-11-02   ZTE ZXDSL 831IIV7.5.0a_Z29_OV Multiple Vulnerabilities 326 WEB mehdi boukazoula
2011-11-01   BroadWin WebAccess SCADA/HMI Client Remote Code Execution Vulnerability [0day] 336 WEB Snake
2011-11-01   Dow Group Multiple Sql Injection Vulnerability 220 WEB Angel Injection
2011-11-01   Intuitive Websites Sql Injection Vulnerability 123 WEB Angel Injection
2011-11-01   jbShop - e107 v7 CMS plugin - SQL Injection vulnerability 113 WEB Robert Cooper
2011-11-01   WordPress Classipress Theme <= 3.1.4 Stored XSS 88 WEB Paul Loftness
2011-11-01   Joomla Compenent com_hmcommunity Multiple Vulnerabilities 106 WEB 599eme Man
2011-11-01   Joomla Component Alameda (com_alameda) SQL Injection 103 WEB kaMtiEz
2011-10-31   AtraSoft CMS SQL Injection Vulnerability 129 WEB Mr.XHat
2011-10-31   Four Corner CMS SQL Injection Vulnerability 104 WEB Mr.XHat
2011-10-31   HighCMS <= (index.aspx) Buffer Overflow Vulnerability 122 WEB BHG Security Center
2011-10-31   Market Town CMS SQL Injection Vulnerability 120 WEB Mr.XHat
2011-10-31   Joomla mod_adsebse modules SQL Injection Vulnerability 101 WEB longrifle0x
2011-10-31   Vik Real Estate 1.0 Component Joomla Multiple Blind Sql Injection 114 WEB Chris Russell
2011-10-31   JEEMA SMS 3.2 Component Joomla Multiple Vulnerabilities 127 WEB Chris Russell
2011-10-31   Barter Sites 1.3 Component Joomla SQL Injection & Persistent XSS vulnerabilities 132 WEB Chris Russell
2011-10-31   CMS MAXSITE Remote File Upload Vulnerability <= 1.10 160 WEB HashoR
2011-10-31   jbShop - e107 v7 CMS Plugin - SQL Injection 131 WEB Robert Cooper
2011-10-31   WordPress WP Glossary Plugin SQL Injection 121 WEB longrifle0x
2011-10-31   WordPress Classipress Theme <= 3.1.4 Stored XSS 123 WEB Paul Loftness
2011-10-31   BroadWin WebAccess SCADA/HMI Client Remote Code Execution 143 WEB Snake
2011-10-31   Joomla HM-Community (com_hmcommunity) Multiple Vulnerabilities 108 WEB 599eme Man
2011-10-31   Vik Real Estate 1.0 Joomla Component Multiple Vulnerabilities 205 WEB Chris Russell
2011-10-31   JEEMA SMS 3.2 Joomla Component Multiple Vulnerabilities 112 WEB Chris Russell
2011-10-31   Barter Sites 1.3 Joomla Component Multiple Vulnerabilities 129 WEB Chris Russell
2011-10-31   PHP Photo Album <= (0.4.1.16) Multiple Disclosure Vulnerabilities 218 WEB BHG Security Center
2011-10-31   Techfolio 1.0 Joomla Component SQL Injection Vulnerability 123 WEB Chris Russell
2011-10-28   phpScheduleIt PHP reserve.php start_date Parameter Arbitrary Code Injection 119 WEB EgiX
2011-10-28   WordPress wptouch plugin SQL Injection Vulnerability 115 WEB longrifle0x
2011-10-28   eFront <= 3.6.10 (build 11944) Multiple Security Vulnerabilities 118 WEB EgiX
2011-10-27   Web Wiz Rich Text Editor 4.4 Remote File Upload 155 WEB ZxH-Labs
2011-10-27   Online Subtitles Workshop XSS vulnerabilities 126 WEB M.Jock3R
2011-10-26   Joomla YJ Contact us Component Local File Inclusion Vulnerability 145 WEB MeGo
2011-10-26   SAP Management Console OSExecute Payload Execution 121 WEB Chris John Riley
2011-10-26   phpLDAPadmin <= 1.2.1.1 (query_engine) Remote PHP Code Injection 141 WEB TecR0c
2011-10-21   Cyclope Internet Filtering Proxy - Stored XSS Vuln 173 WEB loneferret
2011-10-20   1024 CMS 1.1.0 Beta force_download.php Local File Inclusion 112 WEB Sangyun YOO
2011-10-20   WHMCompleteSolution (cart.php) Local File Disclosure 119 WEB Lagripe-Dz
2011-10-20   Openemr-4.1.0 SQL injection Vulnerability 131 WEB I2sec-dae jin Oh
2011-10-20   Yet Another CMS 1.0 SQL Injection & XSS vulnerabilities 121 WEB Stefan Schurtz
2011-10-20   Intelligent Technology Shop-Script 2.0.5 Remote File Disclosure 121 WEB d3v1l r00t3r
2011-10-19   Dolphin <= 7.0.7 (member_menu_queries.php) Remote PHP Code Injection 122 WEB EgiX
2011-10-19   Tap In Solutions Blind SQL Injection Vulnerability 115 WEB poach3r
2011-10-19   NoNumber Framework Joomla! Plugin Multiple Vulnerabilities 262 WEB jdc
2011-10-18   Gnuboard <= 4.33.02 tp.php PATH_INFO SQL Injection 182 WEB flyh4t