|
2016-01-25
|
|
WordPress Plugin Booking Calendar Contact Form 1.1.23 - SQL Injection
|
33 |
WEB
|
i0akiN SEC-LABORATORY
|
|
2016-01-25
|
|
pfSense Firewall 2.2.5 - Config File Cross-Site Request Forgery
|
35 |
WEB
|
Aatif Shahdad
|
|
2014-09-08
|
|
WordPress Plugin W3 Total Cache - 'admin.php' Cross-Site Request Forgery
|
35 |
WEB
|
Voxel@Night
|
|
2014-09-08
|
|
WordPress Plugin Xhanch My Twitter - Cross-Site Request Forgery
|
35 |
WEB
|
Voxel@Night
|
|
2014-09-08
|
|
WordPress Plugin WP to Twitter - Authentication Bypass
|
31 |
WEB
|
Voxel@Night
|
|
2014-09-08
|
|
WordPress Plugin Ninja Forms 2.7.7 - Authentication Bypass
|
34 |
WEB
|
Voxel@Night
|
|
2014-09-07
|
|
WordPress Plugin Spider Facebook - 'facebook.php' SQL Injection
|
32 |
WEB
|
Claudio Viviani
|
|
2014-09-08
|
|
WordPress Theme Antioch - 'download.php' Arbitrary File Download
|
36 |
WEB
|
Ashiyane Digital Security Team
|
|
2014-09-08
|
|
WordPress Theme Epic - 'download.php' Arbitrary File Download
|
34 |
WEB
|
Ashiyane Digital Security Team
|
|
2014-09-08
|
|
WordPress Theme Authentic - 'download.php' Arbitrary File Download
|
37 |
WEB
|
Ashiyane Digital Security Team
|
|
2014-09-08
|
|
WordPress Theme Urban City - 'download.php' Arbitrary File Download
|
39 |
WEB
|
Ashiyane Digital Security Team
|
|
2014-08-26
|
|
Joomla! Component spidervideoplayer - 'theme' SQL Injection
|
40 |
WEB
|
Claudio Viviani
|
|
2014-08-24
|
|
WordPress Plugin KenBurner Slider - 'admin-ajax.php' Arbitrary File Download
|
36 |
WEB
|
MF0x
|
|
2014-08-22
|
|
MyAwards MyBB Module - Cross-Site Request Forgery
|
34 |
WEB
|
Vagineer
|
|
2014-08-20
|
|
ArticleFR - 'id' SQL Injection
|
32 |
WEB
|
High-Tech Bridge
|
|
2014-08-20
|
|
ManageEngine Password Manager Pro / ManageEngine IT360 - SQL Injection
|
35 |
WEB
|
Pedro Ribeiro
|
|
2014-08-19
|
|
WordPress Plugin WP Content Source Control - 'download.php' Directory Traversal
|
38 |
WEB
|
Henri Salo
|
|
2014-07-28
|
|
WordPress Plugin FB Gorilla - 'game_play.php' SQL Injection
|
38 |
WEB
|
Amirh03in
|
|
2014-08-11
|
|
WordPress Plugin GB Gallery Slideshow - '/wp-admin/admin-ajax.php' SQL Injection
|
34 |
WEB
|
Claudio Viviani
|
|
2014-08-08
|
|
VoipSwitch - 'user.php' Local File Inclusion
|
40 |
WEB
|
0x4148
|
|
2014-05-28
|
|
WordPress Plugin HDW Player - '/wp-admin/admin.php' SQL Injection
|
38 |
WEB
|
Anant Shrivastava
|
|
2014-08-06
|
|
WordPress Plugin wpSS - 'ss_handler.php' SQL Injection
|
42 |
WEB
|
Ashiyane Digital Security Team
|
|
2014-07-28
|
|
CMSimple 4.4.4 - 'color' Remote Code Execution
|
38 |
WEB
|
Govind Singh
|
|
2014-07-28
|
|
CMSimple 4.4.4 - Remote File Inclusion
|
34 |
WEB
|
Govind Singh
|
|
2014-07-28
|
|
CMSimple - Default Administrator Credentials
|
34 |
WEB
|
Govind Singh
|
|
2014-07-28
|
|
WordPress Plugin WhyDoWork AdSense - 'options-general.php' Cross-Site Request Forgery (Option Manipu
|
37 |
WEB
|
Dylan Irzi
|
|
2014-07-28
|
|
WordPress Plugin Lead Octopus Power - 'id' SQL Injection
|
33 |
WEB
|
Amirh03in
|
|
2014-07-23
|
|
Ubiquiti Networks UniFi Video Default - 'crossdomain.xml' Security Bypass
|
32 |
WEB
|
Seth Art
|
|
2014-07-23
|
|
Ilya Birman E2 - '/@actions/comment-process' SQL Injection
|
36 |
WEB
|
High-Tech Bridge
|
|
2016-01-18
|
|
SeaWell Networks Spectrum - Multiple Vulnerabilities
|
35 |
WEB
|
Karn Ganeshen
|
|
2016-01-18
|
|
Advanced Electron Forum 1.0.9 - Remote File Inclusion / Cross-Site Request Forgery
|
37 |
WEB
|
hyp3rlinx
|
|
2016-01-18
|
|
Advanced Electron Forum 1.0.9 - Persistent Cross-Site Scripting
|
35 |
WEB
|
hyp3rlinx
|
|
2016-01-18
|
|
Advanced Electron Forum 1.0.9 - Cross-Site Request Forgery
|
35 |
WEB
|
hyp3rlinx
|
|
2014-05-28
|
|
WordPress Plugin Tera Charts (tera-charts) - '/charts/zoomabletreemap.php?fn' Directory Traversal
|
38 |
WEB
|
Anant Shrivastava
|
|
2014-05-28
|
|
WordPress Plugin Tera Charts (tera-charts) - '/charts/treemap.php?fn' Directory Traversal
|
37 |
WEB
|
Anant Shrivastava
|
|
2014-07-14
|
|
WEBMIS CMS - Arbitrary File Upload
|
36 |
WEB
|
Jagriti Sahu
|
|
2014-07-14
|
|
WordPress Plugin CopySafe PDF Protection - Arbitrary File Upload
|
35 |
WEB
|
Jagriti Sahu
|
|
2014-05-28
|
|
WordPress Plugin ENL NewsLetter - '/wp-admin/admin.php' SQL Injection
|
32 |
WEB
|
Anant Shrivastava
|
|
2014-05-28
|
|
WordPress Plugin WP Rss Poster - '/wp-admin/admin.php' SQL Injection
|
37 |
WEB
|
Anant Shrivastava
|
|
2014-05-28
|
|
WordPress Plugin BookX 1.7 - 'bookx_export.php' Local File Inclusion
|
33 |
WEB
|
Anant Shrivastava
|
|
2014-07-13
|
|
WordPress Plugin DZS-VideoGallery - Cross-Site Scripting / Command Injection
|
34 |
WEB
|
MustLive
|
|
2014-07-10
|
|
WeBid - Multiple Cross-Site Scripting / LDAP Injection Vulnerabilities
|
34 |
WEB
|
Govind Singh
|
|
2016-01-15
|
|
mcart.xls Bitrix Module 6.5.2 - SQL Injection
|
36 |
WEB
|
High-Tech Bridge SA
|
|
2016-01-15
|
|
Roundcube Webmail 1.1.3 - Directory Traversal
|
48 |
WEB
|
High-Tech Bridge SA
|
|
2016-01-15
|
|
phpDolphin 2.0.5 - Multiple Vulnerabilities
|
38 |
WEB
|
WhiteCollarGroup
|
|
2016-01-15
|
|
GlassFish Server - Arbitrary File Read
|
36 |
WEB
|
bingbing
|
|
2014-07-09
|
|
WordPress Plugin BSK PDF Manager - '/wp-admin/admin.php' Multiple SQL Injections
|
33 |
WEB
|
Claudio Viviani
|
|
2014-07-07
|
|
xClassified - 'ads.php' SQL Injection
|
35 |
WEB
|
Lazmania61
|
|
2014-07-07
|
|
AtomCMS - SQL Injection / Arbitrary File Upload
|
39 |
WEB
|
Jagriti Sahu
|
|
2014-05-19
|
|
WordPress Plugin NextGEN Gallery 1.9.1 - 'photocrati_ajax' Arbitrary File Upload
|
35 |
WEB
|
SANTHO
|
|
2016-01-14
|
|
Manage Engine Application Manager 12.5 - Arbitrary Command Execution
|
35 |
WEB
|
Bikramaditya Guha
|
|
2016-01-14
|
|
Manage Engine Applications Manager 12 - Multiple Vulnerabilities
|
38 |
WEB
|
Bikramaditya Guha
|
|
2016-01-14
|
|
SevOne NMS 5.3.6.0 - Remote Command Execution
|
36 |
WEB
|
@iamsecurity
|
|
2016-01-13
|
|
WhatsUp Gold 16.3 - Remote Code Execution
|
34 |
WEB
|
Matt Buzanowski
|
|
2014-06-24
|
|
ZeusCart - 'prodid' SQL Injection
|
38 |
WEB
|
Kenny Mathis
|
|
2014-06-10
|
|
WordPress Plugin Featured Comments - Cross-Site Request Forgery
|
38 |
WEB
|
Tom Adams
|
|
2014-06-10
|
|
WordPress Plugin JW Player for Flash & HTML5 Video - Cross-Site Request Forgery
|
40 |
WEB
|
Tom Adams
|
|
2014-06-08
|
|
WordPress Theme Infocus - '/infocus/lib/scripts/dl-skin.php' Local File Disclosure
|
38 |
WEB
|
Felipe Andrian Peixoto
|
|
2014-05-15
|
|
Seo Panel - 'file' Directory Traversal
|
38 |
WEB
|
Eric Sesterhenn
|
|
2014-05-28
|
|
webEdition CMS - 'we_fs.php' SQL Injection
|
39 |
WEB
|
RedTeam Pentesting GmbH
|
|
2016-01-08
|
|
WordPress Plugin WP Symposium Pro Social Network Plugin 15.12 - Multiple Vulnerabilities
|
43 |
WEB
|
Rahul Pratap Singh
|
|
2014-05-24
|
|
PHP-Nuke 'Submit_News' Component - SQL Injection
|
38 |
WEB
|
ali ahmady
|
|
2014-05-23
|
|
Pyplate - 'addScript.py' Cross-Site Request Forgery
|
35 |
WEB
|
Henri Salo
|
|
2014-05-25
|
|
User Cake - Cross-Site Request Forgery
|
35 |
WEB
|
Dolev Farhi
|
|
2014-05-21
|
|
WordPress Plugin Booking System (Booking Calendar) - 'booking_form_id' SQL Injection
|
36 |
WEB
|
maodun
|
|
2016-01-07
|
|
OpenMRS Reporting Module 0.9.7 - Remote Code Execution
|
36 |
WEB
|
Brian D. Hysell
|
|
2016-01-07
|
|
D-Link DCS-931L - Arbitrary File Upload (Metasploit)
|
39 |
WEB
|
Metasploit
|
|
2014-05-20
|
|
Clipperz Password Manager - '/backend/PHP/src/setup/rpc.php' Remote Code Execution
|
36 |
WEB
|
Manish Tanwar
|
|
2014-05-18
|
|
WordPress Plugin cnhk-Slideshow - Arbitrary File Upload
|
32 |
WEB
|
Ashiyane Digital Security Team
|
|
2014-05-19
|
|
Softmatica SMART iPBX - Multiple SQL Injections
|
38 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2014-05-19
|
|
XOOPS Glossaire Module - '/modules/glossaire/glossaire-aff.php' SQL Injection
|
32 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2014-05-16
|
|
CIS Manager - 'email' SQL Injection
|
40 |
WEB
|
Edge
|
|
2016-01-06
|
|
MediaAccess TG788vn - File Disclosure
|
40 |
WEB
|
0x4148
|
|
2014-05-08
|
|
CMS Touch - 'news.php?News_ID' SQL Injection
|
35 |
WEB
|
indoushka
|
|
2014-05-08
|
|
CMS Touch - 'pages.php?Page_ID' SQL Injection
|
36 |
WEB
|
indoushka
|
|
2014-05-08
|
|
TOA - Cross-Site Request Forgery
|
41 |
WEB
|
High-Tech Bridge
|
|
2014-05-07
|
|
Caldera - '/costview2/printers.php?tr' SQL Injection
|
41 |
WEB
|
Thomas Fischer
|
|
2014-05-07
|
|
Caldera - '/costview2/jobs.php?tr' SQL Injection
|
40 |
WEB
|
Thomas Fischer
|
|
2014-05-05
|
|
PrestaShop - 'getSimilarManufacturer.php?id_manufacturer' SQL Injection
|
32 |
WEB
|
indoushka
|
|
2016-01-05
|
|
PHPIPAM 1.1.010 - Multiple Vulnerabilities
|
36 |
WEB
|
Mickael Dorigny
|
|
2016-01-05
|
|
Atlassian Confluence 5.2/5.8.14/5.8.15 - Multiple Vulnerabilities
|
41 |
WEB
|
Sebastian Perez
|
|
2016-01-05
|
|
Simple PHP Polling System - Multiple Vulnerabilities
|
35 |
WEB
|
WICS
|
|
2016-01-05
|
|
Online Airline Booking System - Multiple Vulnerabilities
|
42 |
WEB
|
Manish Tanwar
|
|
2014-04-06
|
|
Puntopy - 'novedad.php' SQL Injection
|
39 |
WEB
|
Felipe Andrian Peixoto
|
|
2014-04-02
|
|
ZamFoo - Multiple Remote Command Execution Vulnerabilities
|
41 |
WEB
|
Al-Shabaab
|
|
2014-04-22
|
|
iDevAffiliate - 'idevads.php' SQL Injection
|
40 |
WEB
|
Robert Cooper
|
|
2016-01-02
|
|
Open Audit - SQL Injection
|
42 |
WEB
|
Rahul Pratap Singh
|
|
2014-04-14
|
|
Jigowatt PHP Event Calendar - 'day_view.php' SQL Injection
|
39 |
WEB
|
Daniel Godoy
|
|
2014-04-14
|
|
Xangati XSR / XNR - 'gui_input_test.pl' Remote Command Execution
|
35 |
WEB
|
Jan Kadijk
|
|
2014-04-14
|
|
Xangati - '/servlet/Installer?file' Directory Traversal
|
36 |
WEB
|
Jan Kadijk
|
|
2014-04-14
|
|
Xangati - '/servlet/MGConfigData' Multiple Directory Traversals
|
37 |
WEB
|
Jan Kadijk
|
|
2014-04-09
|
|
eazyCMS - 'index.php' SQL Injection
|
33 |
WEB
|
Renzi
|
|
2014-04-08
|
|
Joomla! Component Inneradmission - 'index.php' SQL Injection
|
38 |
WEB
|
Lazmania61
|
|
2014-04-05
|
|
PHPFox - Access Control Security Bypass
|
36 |
WEB
|
Wesley Henrique
|
|
2014-03-31
|
|
Primo Interactive CMS - 'pcm.cgi' Remote Command Execution
|
38 |
WEB
|
Felipe Andrian Peixoto
|
|
2014-03-24
|
|
Symphony 2.2.4 - Cross-Site Request Forgery
|
37 |
WEB
|
High-Tech Bridge
|
|
2014-03-23
|
|
WordPress Theme Felici - 'Uploadify.php' Arbitrary File Upload
|
36 |
WEB
|
CaFc Versace
|
|
2015-12-30
|
|
WordPress Plugin Simple Ads Manager 2.9.4.116 - SQL Injection
|
38 |
WEB
|
Kacper Szurek
|
|
2014-03-26
|
|
Beheer Systeem - 'pbs.cgi' Remote Command Execution
|
33 |
WEB
|
Felipe Andrian Peixoto
|
|
2014-03-26
|
|
DotItYourself - 'dot-it-yourself.cgi' Remote Command Execution
|
34 |
WEB
|
Felipe Andrian Peixoto
|
|
2014-03-25
|
|
qEngine 4.1.6/6.0.0 - 'task.php' Local File Inclusion
|
33 |
WEB
|
Gjoko Krstic
|
|
2014-02-21
|
|
Jorjweb - 'id' SQL Injection
|
38 |
WEB
|
Vulnerability Laboratory
|
|
2014-03-21
|
|
innoEDIT - 'innoedit.cgi' Remote Command Execution
|
37 |
WEB
|
Felipe Andrian Peixoto
|
|
2014-03-19
|
|
BigACE 2.7.5 - 'LANGUAGE' Directory Traversal
|
36 |
WEB
|
Hossein Hezami
|
|
2014-03-10
|
|
MeiuPic 2.1.2 - 'ctl' Local File Inclusion
|
33 |
WEB
|
Dr.3v1l
|
|
2014-03-17
|
|
osCMax 2.5 - Cross-Site Request Forgery
|
38 |
WEB
|
TUNISIAN CYBER
|
|
2014-03-15
|
|
OpenX 2.8.x - Multiple Cross-Site Request Forgery Vulnerabilities
|
39 |
WEB
|
Mahmoud Ghorbanzadeh
|
|
2014-03-19
|
|
GNUBoard 4.3x - 'ajax.autosave.php' Multiple SQL Injections
|
36 |
WEB
|
Claepo Wang
|
|
2014-03-08
|
|
Professional Designer E-Store - 'id' Multiple SQL Injections
|
38 |
WEB
|
Nawaf Alkeraithe
|
|
2014-03-06
|
|
WordPress Plugin Premium Gallery Manager - Arbitrary File Upload
|
32 |
WEB
|
eX-Sh1Ne
|
|
2014-03-05
|
|
Cory Jobs Search - 'cid' SQL Injection
|
33 |
WEB
|
Slotleet
|
|
2014-03-04
|
|
WordPress Plugin Relevanssi - 'category_name' SQL Injection
|
36 |
WEB
|
anonymous
|
|
2014-02-26
|
|
POSH 3.1.x - 'addtoapplication.php' SQL Injection
|
31 |
WEB
|
Anthony BAUBE
|
|
2014-02-22
|
|
ATutor - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
|
37 |
WEB
|
HauntIT
|
|
2014-02-22
|
|
eshtery CMS - 'FileManager.aspx' Local File Disclosure
|
35 |
WEB
|
peng.deng
|
|
2014-02-18
|
|
MODx Evogallery Module - 'Uploadify.php' Arbitrary File Upload
|
35 |
WEB
|
TUNISIAN CYBER
|
|
2014-02-19
|
|
WordPress Plugin NextGEN Gallery - 'jqueryFileTree.php' Directory Traversal
|
41 |
WEB
|
Tom Adams
|
|
2014-02-12
|
|
Rhino - Cross-Site Scripting / Password Reset
|
34 |
WEB
|
Slotleet
|
|
2014-02-17
|
|
Joomla! Component com_wire_immogest - 'index.php' SQL Injection
|
37 |
WEB
|
MR.XpR
|
|
2014-02-17
|
|
i-doit Pro - 'objID' SQL Injection
|
38 |
WEB
|
Stephan Rickauer
|
|
2015-12-24
|
|
Rips Scanner 0.5 - 'code.php' Local File Inclusion
|
37 |
WEB
|
Ashiyane Digital Security Team
|
|
2015-12-24
|
|
Beezfud - Remote Code Execution
|
31 |
WEB
|
Ashiyane Digital Security Team
|
|
2014-02-05
|
|
WordPress Theme Kiddo - Arbitrary File Upload
|
36 |
WEB
|
TUNISIAN CYBER
|
|
2013-12-13
|
|
Joomla! Component Projoom NovaSFH 3.0.2 - 'upload.php' Arbitrary File Upload
|
36 |
WEB
|
Yuri Kramarz
|
|
2014-02-05
|
|
Singapore 0.9.9b Beta - Image Gallery Remote File Inclusion / Cross-Site Scripting
|
35 |
WEB
|
TUNISIAN CYBER
|
