Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2017-12-08   Co-work Space Search Script 1.0 - 'city' SQL Injection 0 WEB Ihsan Sencan
2017-12-08   CMS Auditor Website 1.0 - SQL Injection 0 WEB Ihsan Sencan
2017-12-08   Child Care Script 1.0 - 'city' SQL Injection 0 WEB Ihsan Sencan
2017-12-08   Chartered Accountant Booking Script 1.0 - 'city' SQL Injection 0 WEB Ihsan Sencan
2017-12-08   Cab Booking Script 1.0 - 'city' SQL Injection 0 WEB Ihsan Sencan
2017-12-08   Nearbuy Clone Script 3.2 - 'search' SQL Injection 0 WEB Ihsan Sencan
2017-12-09   Beauty Parlour Booking Script 1.0 - 'gender' / 'city' SQL Injection 0 WEB Ihsan Sencan
2017-12-09   Basic B2B Script 2.0.8 - 'product_details.php?id' SQL Injection 0 WEB Ihsan Sencan
2017-12-09   Affiliate MLM Script 1.0 - 'product-category.php?key' SQL Injection 0 WEB Ihsan Sencan
2017-12-09   Advance Online Learning Management Script 3.1 - 'subcatid' / 'popcourseid' SQL Injection 0 WEB Ihsan Sencan
2017-12-09   Advance B2B Script 2.1.3 - 'show_id' / 'pid' SQL Injection 0 WEB Ihsan Sencan
2017-12-09   FS Foodpanda Clone 1.0 - SQL Injection 1 WEB Ihsan Sencan
2017-12-09   FS Expedia Clone 1.0 - 'fl_orig' / 'fl_dest' / 'id' SQL Injection 1 WEB Ihsan Sencan
2017-12-09   FS Trademe Clone 1.0 - 'search' / 'id' SQL Injection 1 WEB Ihsan Sencan
2017-12-09   FS Amazon Clone 1.0 - SQL Injection 1 WEB Ihsan Sencan
2017-12-09   FS Care Clone 1.0 - 'jobFrequency' / 'jobType' SQL Injection 1 WEB Ihsan Sencan
2017-12-09   FS Crowdfunding Script 1.0 - 'latest_news_details.php?id' SQL Injection 1 WEB Ihsan Sencan
2017-12-09   FS Ebay Clone 1.0 - 'id' / 'sub_category_id' / 'category_id' SQL Injection 1 WEB Ihsan Sencan
2017-12-09   FS Freelancer Clone 1.0 - 'profile.php?u' SQL Injection 1 WEB Ihsan Sencan
2017-12-09   FS Gigs Script 1.0 - 'cat' / 'sc' SQL Injection 2 WEB Ihsan Sencan
2017-12-09   FS Groupon Clone 1.0 - 'id' SQL Injection 1 WEB Ihsan Sencan
2017-12-09   FS Grubhub Clone 1.0 - 'keywords' SQL Injection 2 WEB Ihsan Sencan
2017-12-09   FS IMDB Clone 1.0 - 'f' / 's' / 'id' SQL Injection 2 WEB Ihsan Sencan
2017-12-09   FS Indiamart Clone 1.0 - 'token' / 'id' / 'c' SQL Injection 2 WEB Ihsan Sencan
2017-12-09   FS Linkedin Clone 1.0 - 'grid' / 'fid' / 'id' SQL Injection 2 WEB Ihsan Sencan
2017-12-08   FS Makemytrip Clone 1.0 - 'fl_orig' / 'fl_dest' SQL Injection 2 WEB Ihsan Sencan
2017-12-08   FS Monster Clone 1.0 - 'Employer_Details.php?id' SQL Injection 2 WEB Ihsan Sencan
2017-12-08   FS Olx Clone 1.0 - 'scat' / 'pid' SQL Injection 2 WEB Ihsan Sencan
2017-12-08   FS Quibids Clone 1.0 - SQL Injection 2 WEB Ihsan Sencan
2017-12-08   FS Shutterstock Clone 1.0 - 'keywords' SQL Injection 2 WEB Ihsan Sencan
2017-12-08   FS Stackoverflow Clone 1.0 - 'keywords' SQL Injection 2 WEB Ihsan Sencan
2017-12-08   FS Thumbtack Clone 1.0 - 'cat' / 'sc' SQL Injection 2 WEB Ihsan Sencan
2017-12-08   Realestate Crowdfunding Script 2.7.2 - 'pid' SQL Injection 2 WEB Ihsan Sencan
2017-12-08   Website Auction Marketplace 2.0.5 - 'cat_id' SQL Injection 2 WEB Ihsan Sencan
2017-12-08   Simple Chatting System 1.0.0 - Arbitrary File Upload 2 WEB Ihsan Sencan
2017-12-08   DomainSale PHP Script 1.0 - 'id' SQL Injection 2 WEB Ihsan Sencan
2017-12-07   OpenEMR 5.0.0 - OS Command Injection / Cross-Site Scripting 2 WEB SEC Consult
2017-12-07   OpenEMR 5.0.0 - OS Command Injection / Cross-Site Scripting 2 WEB SEC Consult
2017-12-07   FS Facebook Clone - 'token' SQL Injection 2 WEB Dan°
2017-12-07   FS IMDB Clone - 'id' SQL Injection 2 WEB Dan°
2017-12-06   FS Shaadi Clone - 'token' SQL Injection 2 WEB Dan°
2017-12-06   WinduCMS 3.1 - Local File Disclosure 2 WEB Maciek Krupa
2017-12-06   FS Makemytrip Clone - 'id' SQL Injection 1 WEB Dan°
2017-12-05   Readymade Classifieds Script 1.0 - SQL Injection 2 WEB Ihsan Sencan
2017-12-05   Techno Portfolio Management Panel - 'id' SQL Injection 2 WEB Ihsan Sencan
2017-12-05   Perspective ICM Investigation & Case 5.1.1.16 - Privilege Escalation 2 WEB Konstantinos Alexiou
2017-12-01   Artica Web Proxy 3.06 - Remote Code Execution 2 WEB hyp3rlinx
2017-12-01   MistServer 2.12 - Cross-Site Scripting 2 WEB hyp3rlinx
2017-11-30   Jobs2Careers / Coroflot Clone - SQL Injection 2 WEB 8bitsec
2017-11-28   WordPress Plugin WooCommerce 2.0/3.0 - Directory Traversal 2 WEB Fu2x2000
2017-11-11   osCommerce 2.3.4.1 - Arbitrary File Upload 2 WEB Simon Scannell
2017-11-28   Synology StorageManager 5.2 - Root Remote Command Execution 3 WEB SecuriTeam
2017-11-27   ZTE ZXDSL 831CII - Improper Access Restrictions 3 WEB Ibad Shah
2017-11-15   CommuniGatePro 6.1.16 - Cross-Site Scripting 2 WEB Boumediene KADDOUR
2017-11-17   Icon Time Systems RTC-1000 Firmware 2.5.7458 - Cross-Site Scripting 2 WEB Keith Thome
2017-11-16   Zeta Components Mail 1.8.1 - Remote Code Execution 1 WEB MalwareBenchmark
2017-11-16   Vonage VDV23 - Cross-Site Scripting 1 WEB Nu11By73
2017-11-16   LanSweeper 6.0.100.75 - Cross-Site Scripting 1 WEB Miguel Mendez Z
2017-11-16   TP-Link TL-WR740N - Cross-Site Scripting 3 WEB bl00dy
2017-03-26   D-Link DCS-936L Network Camera - Cross-Site Request Forgery 1 WEB SlidingWindow
2017-11-13   Kirby CMS < 2.5.7 - Cross-Site Scripting 2 WEB Ishaq Mohammed
2017-11-13   Web Viewer 1.0.0.193 (Samsung SRN-1670D) - Unrestricted File Upload 2 WEB 0xFFFFFF
2017-11-11   MyBB 1.8.13 - Cross-Site Scripting 2 WEB Pabstersac
2017-11-11   MyBB 1.8.13 - Remote Code Execution 3 WEB Pabstersac
2017-11-07   ManageEngine Applications Manager 13 - SQL Injection 2 WEB Cody Sixteen
2017-11-07   pfSense 2.3.1_1 - Command Execution 1 WEB s4squatch
2017-11-03   Logitech Media Server 7.9.0 - 'Radio URL' Cross-Site Scripting 2 WEB Dewank Pant
2017-11-03   Logitech Media Server 7.9.0 - 'favorites' Cross-Site Scripting 1 WEB Dewank Pant
2017-11-04   WordPress Plugin Userpro < 4.9.17.1 - Authentication Bypass 2 WEB Colette Chamberland
2017-05-17   Oracle PeopleSoft Enterprise PeopleTools < 8.55 - Remote Code Execution Via Blind XML External Entit 2 WEB Charles Fol
2017-11-03   Ladon Framework for Python 0.9.40 - XML External Entity Expansion 2 WEB RedTeam Pentesting
2017-11-03   WordPress Plugin JTRT Responsive Tables 4.1 - SQL Injection 2 WEB Lenon Leite
2017-11-01   Ingenious School Management System 2.3.0 - 'friend_index' SQL injection 2 WEB Giulio Comi
2017-11-01   OctoberCMS 1.0.426 (Build 426) - Cross-Site Request Forgery 2 WEB Zain Sabahat
2017-10-30   Oracle Java SE - Web Start jnlp XML External Entity Processing Information Disclosure 2 WEB mr_me
2017-10-30   Ingenious 2.3.0 - Arbitrary File Upload 1 WEB Ihsan Sencan
2017-10-30   D-Park Pro 1.0 - SQL Injection 2 WEB Ihsan Sencan
2017-10-30   Adult Script Pro 2.2.4 - SQL Injection 2 WEB Ihsan Sencan
2017-10-30   Article Directory Script 3.0 - 'id' SQL Injection 2 WEB Ihsan Sencan
2017-10-30   iProject Management System 1.0 - 'ID' SQL Injection 2 WEB Ihsan Sencan
2017-10-30   iStock Management System 1.0 - Arbitrary File Upload 3 WEB Ihsan Sencan
2017-10-30   iTech Gigs Script 1.21 - SQL Injection 2 WEB Ihsan Sencan
2017-10-30   Job Board Script - 'nice_theme' SQL Injection 2 WEB Ihsan Sencan
2017-10-30   Joomla! Component NS Download Shop 2.2.6 - 'id' SQL Injection 2 WEB Ihsan Sencan
2017-10-30   Joomla! Component Zh YandexMap 6.1.1.0 - 'placemarklistid' SQL Injection 2 WEB Ihsan Sencan
2017-10-30   Mailing List Manager Pro 3.0 - SQL Injection 2 WEB Ihsan Sencan
2017-10-30   MyBuilder Clone 1.0 - 'subcategory' SQL Injection 2 WEB Ihsan Sencan
2017-10-30   PG All Share Video 1.0 - SQL Injection 2 WEB Ihsan Sencan
2017-10-30   PHP CityPortal 2.0 - SQL Injection 2 WEB Ihsan Sencan
2017-10-30   Same Sex Dating Software Pro 1.0 - SQL Injection 2 WEB Ihsan Sencan
2017-10-30   SoftDatepro Dating Social Network 1.3 - SQL Injection 2 WEB Ihsan Sencan
2017-10-30   Sokial Social Network Script 1.0 - SQL Injection 2 WEB Ihsan Sencan
2017-10-30   tPanel 2009 - Authentication Bypass 2 WEB Ihsan Sencan
2017-10-30   Vastal I-Tech Dating Zone 0.9.9 - 'product_id' SQL Injection 2 WEB Ihsan Sencan
2017-10-30   ZeeBuddy 2x - 'groupid' SQL Injection 2 WEB Ihsan Sencan
2017-10-30   Protected Links - SQL Injection 2 WEB Ihsan Sencan
2017-10-30   AROX School ERP PHP Script - 'id' SQL Injection 1 WEB Ihsan Sencan
2017-10-30   Shareet - 'photo' SQL Injection 2 WEB Ihsan Sencan
2017-10-30   US Zip Codes Database - 'state' SQL Injection 1 WEB Ihsan Sencan
2017-10-30   Newspaper 1.0 - SQL Injection 1 WEB Ihsan Sencan
2017-10-30   News 1.0 - SQL Injection 1 WEB Ihsan Sencan
2017-10-30   MyMagazine 1.0 - 'id' SQL Injection 1 WEB Ihsan Sencan
2017-10-30   CmsLite 1.4 - 'S' SQL Injection 1 WEB Ihsan Sencan
2017-10-30   Basic B2B Script - SQL Injection 1 WEB Ihsan Sencan
2017-10-30   CPA Lead Reward Script - SQL Injection 1 WEB Ihsan Sencan
2017-10-30   Fake Magazine Cover Script - SQL Injection 1 WEB Ihsan Sencan
2017-10-30   Nice PHP FAQ Script - 'nice_theme' SQL Injection 1 WEB Ihsan Sencan
2017-10-30   Online Exam Test Application - 'sort' SQL Injection 0 WEB Ihsan Sencan
2017-10-30   Php Inventory - Arbitrary File Upload 0 WEB Ihsan Sencan
2017-10-30   Vastal I-Tech Agent Zone - 'searchCommercial.php' / 'searchResidential.php' SQL Injection 0 WEB Ihsan Sencan
2017-10-30   Website Broker Script - 'status_id' SQL Injection 0 WEB Ihsan Sencan
2017-10-30   Zomato Clone Script - 'resid' SQL Injection 0 WEB Ihsan Sencan
2017-10-30   WordPress Plugin Ultimate Product Catalog 4.2.24 - PHP Object Injection 0 WEB tomplixsee
2017-10-27   phpMyFAQ 2.9.8 - Cross-Site Request Forgery 0 WEB Nikhil Mittal
2017-10-28   PHPMyFAQ 2.9.8 - Cross-Site Scripting (3) 0 WEB Nikhil Mittal
2017-10-28   PHP Melody 2.6.1 - SQL Injection 0 WEB Venkat Rajgor
2017-10-25   PHPMailer < 5.2.21 - Local File Disclosure 2 WEB Maciek Krupa
2017-10-25   KeystoneJS 4.0.0-beta.5 - Cross-Site Scripting 1 WEB Ishaq Mohammed
2017-10-25   KeystoneJS 4.0.0-beta.5 - CSV Excel Macro Injection 1 WEB Ishaq Mohammed
2017-10-24   FS Realtor Clone - 'id' SQL Injection 2 WEB 8bitsec
2017-10-24   FS Crowdfunding Script - 'id' SQL Injection 2 WEB 8bitsec
2017-10-24   FS Care Clone - 'sitterService' SQL Injection 2 WEB 8bitsec
2017-10-24   FS Monster Clone - 'id' SQL Injection 2 WEB 8bitsec
2017-10-24   FS Trademe Clone - 'id' SQL Injection 3 WEB 8bitsec
2017-10-24   FS Thumbtack Clone - 'ser' SQL Injection 2 WEB 8bitsec