|
2011-06-16
|
|
AMHSHOP 3.7.0 SQL Injection
|
149 |
WEB
|
Yassin Aboukir
|
|
2011-06-15
|
|
Core Security Technologies Advisory 2011.0203
|
234 |
WEB
|
coresecurity
|
|
2011-06-15
|
|
Infopublica Solutions SQL Injection
|
123 |
WEB
|
RoAd_KiLlEr
|
|
2011-06-15
|
|
vBulletin 3.x.x vBTube 1.2.9 Cross Site Scripting
|
136 |
WEB
|
Mr.ThieF
|
|
2011-06-15
|
|
WordPress Wysi Plugin Arbitrary File upload Vulnerability
|
140 |
WEB
|
Net.Edit0r
|
|
2011-06-15
|
|
4mation Technologies => SQL Injection
|
157 |
WEB
|
Ratchet
|
|
2011-06-15
|
|
PlanetComnet Admin Auth Bypass
|
134 |
WEB
|
CriminalCoder
|
|
2011-06-15
|
|
CubeCart 2.0.7 Multiple Vulnerabilities
|
159 |
WEB
|
Shamus
|
|
2011-06-14
|
|
Microsoft Lync 4.0.7577.0 Javascript Injection
|
137 |
WEB
|
Mark Lachniet
|
|
2011-06-14
|
|
PHP Nuke 8.3 MT Arbitrary File Upload Vulnerability
|
250 |
WEB
|
b3hz4d
|
|
2011-06-14
|
|
Mascot Software Solutions.. SQL injection Vulnerability
|
179 |
WEB
|
k's0uR!
|
|
2011-06-14
|
|
Concept Medya Admin Auth ByPass
|
110 |
WEB
|
CriminalCoder
|
|
2011-06-14
|
|
Vitaminedz Blind SQL-i Vulnerability
|
180 |
WEB
|
Kalashinkov3
|
|
2011-06-14
|
|
Technofact(index/detail)=>SQL Injection Vulnerability
|
140 |
WEB
|
eXeSoul
|
|
2011-06-14
|
|
ebusinesslook.. SQL injection Vulnerability
|
147 |
WEB
|
k's0uR!
|
|
2011-06-14
|
|
Web Application SQL Injection Vulnerability
|
123 |
WEB
|
Kalashinkov3
|
|
2011-06-14
|
|
MGF SQL Injection Vulnerability
|
140 |
WEB
|
Kalashinkov3
|
|
2011-06-14
|
|
CyberScribe SQL-I & (admin) Auth ByPass Vulnerability
|
166 |
WEB
|
Kalashinkov3
|
|
2011-06-14
|
|
Athollsweb SQL Injection Vulnerability
|
142 |
WEB
|
Kalashinkov3
|
|
2011-06-14
|
|
WebFileExplorer 3.6 (Auth Bypass) SQL Injection Vulnerability
|
122 |
WEB
|
Cru3l.b0y
|
|
2011-06-14
|
|
Job Board Software<= XSRF/CSRF (Change Admin Password) Vulnerability
|
138 |
WEB
|
Caddy-Dz
|
|
2011-06-14
|
|
SEO Ecommerce(Shopping)<= Multiple XSRF/CSRF Vulnerabilities
|
139 |
WEB
|
Caddy-Dz
|
|
2011-06-14
|
|
VIOCAM (template.php)<= Blind SQL injection Vulnerability
|
144 |
WEB
|
Caddy-Dz
|
|
2011-06-14
|
|
cPanel X / WHM 11.30.0 (build 27) Read Files / Symlinks Bypass
|
246 |
WEB
|
ZxH-Labs
|
|
2011-06-14
|
|
Green Country Interactive.. SQL injection Vulnerability
|
171 |
WEB
|
k's0uR!
|
|
2011-06-14
|
|
ICE Innovation =>SQL injection vulnerability
|
236 |
WEB
|
Sideswipe
|
|
2011-06-14
|
|
Web development by Discover Web Solutions.. SQL injection Vulnerability
|
212 |
WEB
|
k's0uR!
|
|
2011-06-14
|
|
Developed by Inertia Unlimited SQL injection Vulnerability
|
138 |
WEB
|
k's0uR!
|
|
2011-06-14
|
|
Oracle HTTP Server XSS Header Injection
|
182 |
WEB
|
Yasser ABOUKIR
|
|
2011-06-14
|
|
Scriptegrator plugin for Joomla! 1.5 0day File Inclusion Vulnerability
|
164 |
WEB
|
jdc
|
|
2011-06-14
|
|
Tele Data Contact Management Server Directory Traversal
|
121 |
WEB
|
AutoSec Tools
|
|
2011-06-14
|
|
Simple web-server 1.2 Directory Traversal
|
133 |
WEB
|
AutoSec Tools
|
|
2011-06-14
|
|
Angora Guestbook 1.5 Local File Inclusion
|
154 |
WEB
|
AutoSec Tools
|
|
2011-06-13
|
|
TelEduc 3.3.8 SQL Injection
|
183 |
WEB
|
s4r4d0
|
|
2011-06-13
|
|
Joomla Minitek FAQ Book 1.3 SQL Injection
|
194 |
WEB
|
kaMtiEz
|
|
2011-06-13
|
|
Technote 7.2 Blind SQL Injection
|
408 |
WEB
|
BlueH4G
|
|
2011-06-13
|
|
WordPress Events Manager 3.1.2 SQL Injection
|
192 |
WEB
|
LoocK3D
|
|
2011-06-13
|
|
Facebook Session Sidejacking
|
147 |
WEB
|
Madhur
|
|
2011-06-13
|
|
SUBRION CMS Cross Site Scripting / SQL Injection
|
187 |
WEB
|
Karthik R
|
|
2011-06-13
|
|
Pacer Edition CMS 2.1 Local File Inclusion
|
113 |
WEB
|
LiquidWorm
|
|
2011-06-13
|
|
IT Reflect => SQL Injection Vulnerability
|
142 |
WEB
|
eXeSoul
|
|
2011-06-10
|
|
byTolinet Agencia Blind SQL Injection
|
152 |
WEB
|
Andrea Bocchetti
|
|
2011-06-10
|
|
Pacer Edition CMS 2.1 Cross Site Scripting
|
148 |
WEB
|
LiquidWorm
|
|
2011-06-10
|
|
FreePBX 2.9.0.6 Shell Upload
|
154 |
WEB
|
Tiago Ferreira
|
|
2011-06-10
|
|
Booxys Hotel 1.0 Cross Site Scripting
|
152 |
WEB
|
Net.Edit0r
|
|
2011-06-10
|
|
BigDump-SQL Uploader v0.32->0.x Upload File Vulnerability
|
234 |
WEB
|
KedAns-Dz
|
|
2011-06-10
|
|
Pezz Media.. SQL injection Vulnerability
|
141 |
WEB
|
k's0uR!
|
|
2011-06-10
|
|
Innovative Media Group => SQL Injection
|
128 |
WEB
|
Ratchet
|
|
2011-06-10
|
|
WordPress plugin photoracer SQL injection Vulnerability
|
123 |
WEB
|
HaNniBaL KsA
|
|
2011-06-10
|
|
Prefix Technologies (article.php)<= SQL injection Vulnerability
|
140 |
WEB
|
KedAns-Dz
|
|
2011-06-10
|
|
Polycom IP Phone Web Interface Data Diclosure Vulnerability
|
140 |
WEB
|
Pr0T3cT10n
|
|
2011-06-10
|
|
Aastra IP Phone 9480i Web Interface Data disclosure Vulnerability
|
124 |
WEB
|
Pr0T3cT10n
|
|
2011-06-10
|
|
EquiPCS SQL Injection vulnerability exploit
|
147 |
WEB
|
Sideswipe
|
|
2011-06-09
|
|
phpcms v2.4 SQL injection exploit (test vbs_exp)
|
379 |
WEB
|
Fjhgx
|
|
2011-06-09
|
|
WordPress Star Rating SQL Injection
|
118 |
WEB
|
expku
|
|
2011-06-09
|
|
Prefix Technologies (page.php)<= SQL injection Vulnerability
|
116 |
WEB
|
Caddy-Dz
|
|
2011-06-09
|
|
Lifestyles Media Group => SQL Injection
|
133 |
WEB
|
Ratchet
|
|
2011-06-09
|
|
WireMedia => SQL Injection
|
133 |
WEB
|
Sideswipe
|
|
2011-06-08
|
|
BLOG:CMS 4.2.1.f Cross Site Scripting
|
135 |
WEB
|
Stefan Schurtz
|
|
2011-06-08
|
|
Squiz Matrix 4.0.6 / 4.2.2 Cross Site Scripting
|
103 |
WEB
|
osisecurity
|
|
2011-06-08
|
|
AR Infotech SQL injection Vulnerability
|
132 |
WEB
|
xConsoLe
|
|
2011-06-08
|
|
AR Infotech Admin Auth ByPass
|
124 |
WEB
|
xConsoLe
|
|
2011-06-08
|
|
Circus Strategic Communications Inc.. Sql injection
|
132 |
WEB
|
k's0uR!
|
|
2011-06-08
|
|
Mevlana Content Management System SQL-i Vulnerability
|
119 |
WEB
|
RoAd_KiLlEr
|
|
2011-06-08
|
|
Dataface Local File Include
|
127 |
WEB
|
ItSecTeam
|
|
2011-06-07
|
|
Discuz!7.0-7.2和Phpwind7.5后台鸡肋漏洞
|
190 |
WEB
|
expku
|
|
2011-06-07
|
|
Tele Data Contact Management Server Directory Traversal
|
115 |
WEB
|
AutoSec Tools
|
|
2011-06-07
|
|
Simple Web-Server 1.2 Directory Traversal
|
126 |
WEB
|
AutoSec Tools
|
|
2011-06-07
|
|
Nakid CMS 1.0.2 Cross Site Scripting
|
142 |
WEB
|
AutoSec Tools
|
|
2011-06-07
|
|
Angora Guestbook 1.5 Local File Inclusion
|
128 |
WEB
|
AutoSec Tools
|
|
2011-06-07
|
|
Multiple WordPress Themes Cross Site Scripting
|
130 |
WEB
|
Best wishes
|
|
2011-06-07
|
|
vBulletin 3.x vBExperience Cross Site Scripting
|
166 |
WEB
|
Mr.ThieF
|
|
2011-06-07
|
|
vBulletin 4.1.3 Open Redirect
|
185 |
WEB
|
Robert Gilbert
|
|
2011-06-07
|
|
Unu2 multimedia => SQL Injection
|
149 |
WEB
|
Sideswipe
|
|
2011-06-07
|
|
SmartySolution Sql injection
|
193 |
WEB
|
Anas
|
|
2011-06-07
|
|
Kleophatra v0.1.5 'TinyBrowser' File Upload Code Execution (meta)
|
146 |
WEB
|
KedAns-Dz
|
|
2011-06-07
|
|
SpidaNews v1.0 (edit.php) SQL Injection Vulnerability
|
127 |
WEB
|
KedAns-Dz
|
|
2011-06-07
|
|
Joomla Component (com_ccboard) Multiple Vulnerabilities
|
157 |
WEB
|
KedAns-Dz
|
|
2011-06-07
|
|
PopScript Multiple Vulnerabilities
|
140 |
WEB
|
NassRawI
|
|
2011-06-07
|
|
SmartySolution Admin Auth ByPass
|
191 |
WEB
|
xConsoLe
|
|
2011-06-07
|
|
PHP-AddressBook v6.2.12 (view.php) SQL Injection Vulnerability
|
129 |
WEB
|
KedAns-Dz
|
|
2011-06-07
|
|
Radiant Infotech Nepal 2.x.x Multiple Vulnerability
|
160 |
WEB
|
Net.Edit0r
|
|
2011-06-07
|
|
WebSVN 2.3.2 Unproper Metacharacters Escaping exec() Remote Command Injection
|
151 |
WEB
|
rgod
|
|
2011-06-07
|
|
Ushahidi 2.0.1 (range param) SQL Injection Vulnerability (post-auth)
|
149 |
WEB
|
LiquidWorm
|
|
2011-06-03
|
|
discuz! X1.5 Get Shell 叉day[Alibaba后续修改与添加Get Shell代码]
|
260 |
WEB
|
alibaba
|
|
2011-06-03
|
|
9959网店系统 v5.0 Blind SQL injection exploit
|
149 |
WEB
|
闷豆
|
|
2011-06-03
|
|
Vibrant Creations =>SQL Injection Vulnerability
|
132 |
WEB
|
eXeSoul
|
|
2011-06-03
|
|
mWebnet Admin Auth ByPass
|
166 |
WEB
|
xConsoLe
|
|
2011-06-03
|
|
Epop Studio News SQL Injection
|
225 |
WEB
|
Codeine
|
|
2011-06-02
|
|
Discuz! X1-1.5 notify_credit.php Blind SQL injection exploit
|
235 |
WEB
|
toby57
|
|
2011-06-02
|
|
Serendipity 1.5.5 Event Freetag Cross Site Scripting
|
175 |
WEB
|
Stefan Schurtz
|
|
2011-06-02
|
|
Post Revolution 0.8.0c XSS / XSRF / Denial Of Service
|
149 |
WEB
|
Javier Bassi
|
|
2011-06-02
|
|
A Really Simple Chat (ARSC) 3.3-rc2 XSS / SQL Injection
|
115 |
WEB
|
expku
|
|
2011-06-02
|
|
Nagios 3.2.3 Cross Site Scripting
|
153 |
WEB
|
Stefan Schurtz
|
|
2011-06-02
|
|
Netgear WNDAP350 Root Password Disclosure
|
207 |
WEB
|
Juerd Waalboer
|
|
2011-06-02
|
|
MediaCluster (mcCMS) Arbitrary File Upload Vulnerability
|
98 |
WEB
|
RoAd_KiLlEr
|
|
2011-06-02
|
|
Vibrant Creations =>SQL Injection Vulnerability
|
136 |
WEB
|
eXeSoul
|
|
2011-06-02
|
|
Icinga 1.3.0 / 1.4.0 Cross Site Scripting
|
130 |
WEB
|
Stefan Schurtz
|
|
2011-06-02
|
|
byTolinet Agencia <= Remote 'conexion.php' Disclosure Exploit
|
155 |
WEB
|
KnocKout
|
|
2011-06-02
|
|
Innovative Web SQL Injection Vulnerability
|
149 |
WEB
|
Kalashinkov3
|
|
2011-06-02
|
|
ROCKETMEDIA (index.php) Blind SQL-i Vulnerability
|
134 |
WEB
|
Kalashinkov3
|
|
2011-06-02
|
|
World e Mart(news/event/page)=>SQL Injection Vulnerability
|
130 |
WEB
|
eXeSoul
|
|
2011-06-02
|
|
WebC.be <= Remote 'db_login.php' Disclosure Exploit
|
159 |
WEB
|
KnocKout
|
|
2011-06-02
|
|
Pika CMS <= 'showSource.php' Local File Inclusion
|
147 |
WEB
|
KnocKout
|
|
2011-06-02
|
|
Pika CMS <= Remote 'baza_mysql.php' Disclosure Exploit
|
136 |
WEB
|
KnocKout
|
|
2011-06-02
|
|
TEDE Simplificado <= (Versions) SQL Injection Vulnerability
|
132 |
WEB
|
KnocKout
|
|
2011-06-02
|
|
Chiangmai Webdesign (webboardAnswer.php)<= Blind SQL injection Vulnerability
|
132 |
WEB
|
Caddy-Dz
|
|
2011-06-02
|
|
xinha Arbitrary File Upload Vulnerability
|
204 |
WEB
|
xConsoLe
|
|
2011-06-01
|
|
Joomla 1.6.x Administrator PHP Code Execution
|
112 |
WEB
|
James Bercegay
|
|
2011-06-01
|
|
Joomla 1.6.0 SQL Injection
|
127 |
WEB
|
James Bercegay
|
|
2011-06-01
|
|
Kentico CMS 5.5R2.23 Cross Site Scripting
|
136 |
WEB
|
LiquidWorm
|
|
2011-06-01
|
|
Websolutions SQL Injection Vulnerability
|
226 |
WEB
|
Kalashinkov3
|
|
2011-06-01
|
|
GloDerWorks SQL Injection Vulnerability
|
153 |
WEB
|
Kalashinkov3
|
|
2011-06-01
|
|
Mlffat 2.3 SQL Injection Vulnerability
|
179 |
WEB
|
KinG Of PiraTeS
|
|
2011-06-01
|
|
Guru JustAnswer Professional 1.25 Multiple SQL Injection Vulnerabilities
|
133 |
WEB
|
v3n0m
|
|
2011-06-01
|
|
Belkin G Wireless Router Admin Exploit
|
137 |
WEB
|
Aodrulez
|
|
2011-06-01
|
|
eFront Educational <=XSRF (Add admin/change admin passwd)
|
170 |
WEB
|
Caddy-Dz
|
|
2011-06-01
|
|
eFront Community++ <=XSRF (Add admin/change admin passwd)
|
143 |
WEB
|
Caddy-Dz
|
|
2011-06-01
|
|
eFront enterprise <=XSRF (Add admin/change admin passwd)
|
127 |
WEB
|
Caddy-Dz
|
|
2011-05-31
|
|
Callisto 821+ Cross Site Request Forgery / Cross Site Scripting
|
137 |
WEB
|
MustLive
|
|
2011-05-31
|
|
Forticlient SSL VPN Symlink Overwrite
|
341 |
WEB
|
expku
|
|
2011-05-31
|
|
TinyMCE AjaxFileManager Shell Upload
|
214 |
WEB
|
Dr Trojan
|
|
2011-05-31
|
|
Apache Archiva 1.3.4 Cross Site Request Forgery
|
139 |
WEB
|
expku
|
|
2011-05-31
|
|
Apache Archiva 1.3.4 Cross Site Scripting
|
122 |
WEB
|
expku
|
|
2011-05-31
|
|
SQL Injection Vulnerbility in Dreamzsop
|
150 |
WEB
|
lionaneesh
|
