Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2012-05-21   PHPhq.Net phAlbum 1.5.1 - 'index.php' Cross-Site Scripting 1 WEB Eyup CELIK
2012-05-22   Plogger Photo Gallery - SQL Injection 1 WEB Eyup CELIK
2015-06-17   BlackCat CMS 1.1.1 - Arbitrary File Download 1 WEB d4rkr0id
2015-06-16   E-Detective Lawful Interception System - Multiple Vulnerabilities 2 WEB Mustafa Al-Bassam
2015-06-16   TYPO3 Extension Akronymmanager 0.5.0 - SQL Injection 2 WEB RedTeam Pentesting
2015-06-16   Apexis IP CAM - Information Disclosure 2 WEB Sunplace Solutions
2015-06-16   Ektron CMS 9.10 SP1 (Build 9.1.0.184.1.114) - Cross-Site Request Forgery 3 WEB Jerold Hoong
2015-06-15   Milw0rm Clone Script 1.0 - '/admin/login.php' Authentication Bypass 2 WEB walid naceri
2012-05-20   AZ Photo Album - Cross-Site Scripting / Arbitrary File Upload 2 WEB Eyup CELIK
2015-06-12   WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload 3 WEB Larry W. Cashdollar
2015-06-12   WordPress Plugin SE HTML5 Album Audio Player 1.1.0 - Directory Traversal 2 WEB Larry W. Cashdollar
2015-06-12   ZCMS 1.1 - Multiple Vulnerabilities 1 WEB hyp3rlinx
2015-06-12   Opsview 4.6.2 - Multiple Cross-Site Scripting Vulnerabilities 1 WEB Dolev Farhi
2015-06-12   Nakid CMS - Multiple Vulnerabilities 1 WEB hyp3rlinx
2015-06-12   ClickHeat 1.14 - Cross-Site Request Forgery (Change Admin Password) 1 WEB David Shanahan
2015-06-10   WordPress Plugin Encrypted Contact Form 1.0.4 - Cross-Site Request Forgery 1 WEB Nitin Venkatesh
2015-06-10   AnimaGallery 2.6 - Local File Inclusion 1 WEB d4rkr0id
2015-06-10   Alcatel-Lucent OmniSwitch - Cross-Site Request Forgery 2 WEB RedTeam Pentesting
2015-06-10   Bonita BPM 6.5.1 - Multiple Vulnerabilities 2 WEB High-Tech Bridge SA
2015-06-10   ISPConfig 3.0.5.4p6 - Multiple Vulnerabilities 2 WEB High-Tech Bridge SA
2015-06-10   GeoVision (GeoHttpServer) Webcams - Remote File Disclosure 2 WEB Viktor Minin
2015-06-10   FiverrScript - Cross-Site Request Forgery (Add Admin) 2 WEB Mahmoud Gamal
2015-06-10   Pandora FMS 5.0/5.1 - Authentication Bypass 1 WEB Manuel Mancera
2015-06-10   WordPress Plugin History Collection 1.1.1 - Arbitrary File Download 2 WEB Kuroi'SH
2015-06-10   WordPress Plugin Paypal Currency Converter Basic For WooCommerce - File Read 2 WEB Kuroi'SH
2015-06-10   WordPress Plugin RobotCPA V5 - Local File Inclusion 2 WEB T3N38R15
2015-06-10   HP WebInspect 10.4 - XML External Entity Injection 2 WEB Jakub Palaczynski
2015-06-09   Milw0rm Clone Script 1.0 - 'related.php?program' Blind SQL Injection 2 WEB Pancaker
2015-06-08   Pasworld - 'detail.php' Blind SQL Injection 1 WEB Sebastian khan
2015-06-08   WordPress Plugin WP Mobile Edition - Local File Inclusion 1 WEB Ali Khalil
2015-06-08   WordPress Plugin Wp-ImageZoom 1.1.0 - Multiple Vulnerabilities 1 WEB T3N38R15
2015-06-08   D-Link DSL-526B ADSL2+ AU_2.01 - Remote DNS Change 1 WEB Todor Donev
2015-06-08   D-Link DSL-2730B AU_2.01 - Authentication Bypass DNS Change 1 WEB Todor Donev
2015-06-08   TP-Link TD-W8950ND ADSL2+ - Remote DNS Change 1 WEB Todor Donev
2015-06-08   D-Link DSL-2780B DLink_1.01.14 - Remote DNS Change 1 WEB Todor Donev
2012-05-20   Concrete5 CMS FlashUploader - Arbitrary '.SWF' File Upload 1 WEB AkaStep
2012-05-20   Concrete CMS < 5.5.21 - Multiple Vulnerabilities 1 WEB AkaStep
2012-05-21   Yandex.Server 2010 9.0 - 'text' Cross-Site Scripting 1 WEB MustLive
2012-05-21   Acuity CMS 2.6.2 - '/admin/file_manager/browse.asp?path' Traversal Arbitrary File Access 1 WEB Aung Khant
2012-05-21   Acuity CMS 2.6.2 - '/admin/file_manager/file_upload_submit.asp' Multiple Arbitrary File Upload / Cod 1 WEB Aung Khant
2012-05-17   Atlassian JIRA FishEye 2.5.7 / Crucible 2.5.7 Plugins - XML Parsing Security 1 WEB anonymous
2012-05-03   OpenKM 5.1.7 - Cross-Site Request Forgery 1 WEB Cyrill Brunschwiler
2012-05-17   PHP Address Book 7.0 - Multiple Cross-Site Scripting Vulnerabilities 0 WEB Stefan Schurtz
2012-05-17   ArtiPHP 5.5.0 Neo - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 0 WEB Gjoko Krstic
2012-05-16   Unijimpe Captcha - 'captchademo.php' Cross-Site Scripting 0 WEB Daniel Godoy
2015-06-06   Broadlight Residential Gateway DI3124 - Remote DNS Change 1 WEB Todor Donev
2015-06-06   WiFi HD 8.1 - Directory Traversal / Denial of Service 0 WEB Wh1t3Rh1n0 (Michael Allen)
2015-06-05   WordPress Plugin Really Simple Guest Post 1.0.6 - Local File Inclusion 1 WEB Kuroi'SH
2012-05-16   backupDB() 1.2.7a - 'onlyDB' Cross-Site Scripting 1 WEB LiquidWorm
2012-05-16   SiliSoftware PHPThumb() 1.7.11-201108081537 - '/demo/PHPThumb.demo.random.php?dir' Cross-Site Script 1 WEB Gjoko Krstic
2012-05-16   SiliSoftware PHPThumb() 1.7.11-201108081537 - '/demo/PHPThumb.demo.showpic.php?title' Cross-Site Scr 1 WEB Gjoko Krstic
2012-05-16   LongTail JW Player - 'debug' Cross-Site Scripting 1 WEB gainover
2012-05-15   WordPress Plugin Track That Stat 1.0.8 - Cross-Site Scripting 1 WEB Heine Pedersen
2012-05-15   WordPress Plugin Soundcloud Is Gold 2.1 - 'width' Cross-Site Scripting 1 WEB Heine Pedersen
2012-05-15   WordPress Plugin Share and Follow 1.80.3 - 'admin.php' Cross-Site Scripting 1 WEB Heine Pedersen
2012-05-15   WordPress Plugin Sharebar 1.2.1 - SQL Injection / Cross-Site Scripting 1 WEB Heine Pedersen
2015-06-04   WordPress Plugin zM Ajax Login & Register 1.0.9 - Local File Inclusion 1 WEB Panagiotis Vagenas
2012-05-15   WordPress Plugin Pretty Link Lite 1.5.2 - SQL Injection / Cross-Site Scripting 0 WEB Heine Pedersen
2012-05-15   WordPress Plugin WP Forum Server 1.7.3 - '/fs-admin/fs-admin.php' Multiple Cross-Site Scripting Vuln 1 WEB Heine Pedersen
2012-05-15   WordPress Plugin Mingle Forum 1.0.33 - 'admin.php' Multiple Cross-Site Scripting Vulnerabilities 1 WEB Heine Pedersen
2012-05-15   WordPress Plugin GD Star Rating 1.9.16 - 'tpl_section' Cross-Site Scripting 1 WEB Heine Pedersen
2012-05-15   WordPress Plugin Leaflet Maps Marker 0.0.1 - 'leaflet_marker.php?id' Cross-Site Scripting 1 WEB Heine Pedersen
2012-05-15   WordPress Plugin Leaflet Maps Marker 0.0.1 - 'leaflet_layer.php?id' Cross-Site Scripting 1 WEB Heine Pedersen
2012-05-15   WordPress Plugin LeagueManager 3.7 - Multiple Cross-Site Scripting Vulnerabilities 2 WEB Heine Pedersen
2012-05-15   WordPress Plugin Media Library Categories - Multiple Cross-Site Scripting Vulnerabilities 2 WEB Heine Pedersen
2015-06-03   VFront 0.99.2 - Cross-Site Request Forgery / Persistent Cross-Site Scripting 2 WEB hyp3rlinx
2015-06-03   Seagate Central 2014.0410.0026-F - Remote Facebook Access Token 2 WEB Jeremy Brown
2015-06-02   WordPress Plugin LeagueManager 3.9.11 - SQL Injection 1 WEB javabudd
2012-05-15   WordPress Plugin NewsLetter Manager 1.0 - Multiple Cross-Site Scripting Vulnerabilities 1 WEB Heine Pedersen
2012-05-15   WordPress Plugin iFrame Admin Pages 0.1 - 'main_page.php' Cross-Site Scripting 1 WEB Heine Pedersen
2012-05-15   WordPress Plugin 2 Click Social Media Buttons 0.32.2 - Multiple Cross-Site Scripting Vulnerabilities 1 WEB Heine Pedersen
2012-05-15   WordPress Plugin CataBlog 1.6 - 'admin.php' Cross-Site Scripting 1 WEB Heine Pedersen
2012-05-15   WordPress Plugin PDF & Print Button Joliprint 1.3.0 - Multiple Cross-Site Scripting Vulnerabilities 1 WEB Heine Pedersen
2012-05-15   WordPress Plugin Network Publisher 5.0.1 - 'networkpub_key' Cross-Site Scripting 2 WEB Heine Pedersen
2015-06-01   Aruba ClearPass Policy Manager - Persistent Cross-Site Scripting 2 WEB Cristiano Maruti
2015-06-01   WordPress Plugin dzs-zoomsounds 2.0 - Arbitrary File Upload 2 WEB nabil chris
2012-05-15   WordPress Plugin Dynamic Widgets 1.5.1 - 'themes.php' Cross-Site Scripting 2 WEB Heine Pedersen
2012-05-15   WordPress Plugin GRAND Flash Album Gallery 1.71 - 'admin.php' Cross-Site Scripting 2 WEB Heine Pedersen
2012-05-13   WordPress Plugin WP-FaceThumb 0.1 - 'pagination_wp_facethum' Cross-Site Scripting 2 WEB d3v1l
2015-05-29   ESC 8832 Data Controller - Multiple Vulnerabilities 2 WEB Balazs Makany
2015-05-29   JSPMyAdmin 1.1 - Multiple Vulnerabilities 2 WEB hyp3rlinx
2015-05-29   TCPDF Library 5.9 - Arbitrary File Deletion 0 WEB Filippo Roncari
2012-05-10   Chevereto 1.91 - '/Upload/engine.php?v' Traversal Arbitrary File Enumeration 1 WEB AkaStep
2012-05-10   Chevereto 1.91 - '/Upload/engine.php?v' Cross-Site Scripting 1 WEB AkaStep
2012-05-09   PivotX 2.3.2 - 'ajaxhelper.php' Cross-Site Scripting 1 WEB High-Tech Bridge SA
2012-05-09   OrangeHRM 2.7 RC - 'index.php?URI' Cross-Site Scripting 1 WEB High-Tech Bridge SA
2012-05-09   OrangeHRM 2.7 RC - '/templates/hrfunct/emppop.php?sortOrder1' Cross-Site Scripting 1 WEB High-Tech Bridge SA
2012-05-09   OrangeHRM 2.7 RC - '/plugins/ajaxCalls/haltResumeHsp.php?newHspStatus' Cross-Site Scripting 1 WEB High-Tech Bridge SA
2012-05-09   OrangeHRM 2.7 RC - '/plugins/ajaxCalls/haltResumeHsp.php?hspSummaryId' SQL Injection 2 WEB High-Tech Bridge SA
2012-05-08   PHP Enter 4.1.2 - 'banners.php' PHP Code Injection 2 WEB L3b-r1'z
2012-05-07   JibberBook 2.3 - 'Login_form.php' Authentication Bypass 2 WEB L3b-r1'z
2012-05-07   Ramui Forum Script - 'query' Cross-Site Scripting 2 WEB 3spi0n
2012-05-06   Schneider Electric Telecontrol Kerweb 3.0.0/6.0.0 - 'kw.dll' HTML Injection 2 WEB phocean
2012-05-07   Trombinoscope 3.x - 'photo.php' Server SQL Injection 2 WEB Ramdan Yantu
2012-05-02   iGuard Security Access Control Device Firmware 3.6.7427A - Cross-Site Scripting 1 WEB Usman Saeed
2012-04-27   MySQLDumper 1.24.4 - 'menu.php' PHP Remote Code Execution 1 WEB AkaStep
2012-04-27   MySQLDumper 1.24.4 - 'index.php?page' Cross-Site Scripting 1 WEB AkaStep
2015-05-27   WordPress Plugin Free Counter 1.1 - Persistent Cross-Site Scripting 1 WEB Panagiotis Vagenas
2012-04-27   MySQLDumper 1.24.4 - 'main.php' Multiple Cross-Site Request Forgery Vulnerabilities 1 WEB AkaStep
2012-04-27   MySQLDumper 1.24.4 - Multiple Script Direct Request Information Disclosures 1 WEB AkaStep
2012-04-27   MySQLDumper 1.24.4 - 'filemanagement.php?f' Traversal Arbitrary File Access 1 WEB AkaStep
2012-04-27   MySQLDumper 1.24.4 - 'sql.php' Multiple Cross-Site Scripting Vulnerabilities 1 WEB AkaStep
2012-04-27   MySQLDumper 1.24.4 - 'install.php' Multiple Cross-Site Scripting Vulnerabilities 1 WEB AkaStep
2012-04-27   MySQLDumper 1.24.4 - 'install.php?language' Traversal Arbitrary File Access 1 WEB AkaStep
2012-04-27   MySQLDumper 1.24.4 - 'restore.php?Filename' Cross-Site Scripting 1 WEB AkaStep
2012-04-30   WordPress Plugin WPsc MijnPress - 'rwflush' Cross-Site Scripting 1 WEB Am!r
2012-04-28   Shawn Bradley PHP Volunteer Management 1.0.2 - 'id' SQL Injection 1 WEB eidelweiss
2012-04-27   BBSXP CMS - Multiple SQL Injections 1 WEB Farbod Mahini
2012-04-27   Uiga FanClub - 'p' SQL Injection 1 WEB Farbod Mahini
2012-04-27   XM Forum - 'id' Multiple SQL Injections 1 WEB Farbod Mahini
2012-04-27   SKYUC 3.2.1 - 'encode' Cross-Site Scripting 1 WEB farbodmahini
2012-04-29   Croogo CMS 1.3.4 - Multiple HTML Injection Vulnerabilities 1 WEB Chokri Ben Achor
2012-04-27   SilverStripe CMS 2.4.7 - 'install.php' PHP Code Injection 1 WEB Mehmet Ince
2015-05-26   ClickHeat 1.13+ - Remote Command Execution 1 WEB Calum Hutton
2015-05-26   Sendio ESP - Information Disclosure 1 WEB Core Security
2015-05-26   WordPress Plugin Simple Photo Gallery 1.7.8 - Blind SQL Injection 1 WEB woodspeed
2015-05-26   WordPress Plugin church_admin 0.800 - Persistent Cross-Site Scripting 1 WEB woodspeed
2015-05-26   WordPress Plugin MailChimp Subscribe Forms 1.1 - Remote Code Execution 1 WEB woodspeed
2015-05-26   Apache JackRabbit - WebDAV XML External Entity 1 WEB Mikhail Egorov
2015-05-26   WordPress Plugin GigPress 2.3.8 - SQL Injection 1 WEB Adrián M. F.
2015-05-26   WordPress Plugin Landing Pages 1.8.4 - Multiple Vulnerabilities 1 WEB Adrián M. F.
2015-05-26   WordPress Plugin NewStatPress 0.9.8 - Multiple Vulnerabilities 1 WEB Adrián M. F.
2015-05-26   WordPress Plugin Video Gallery 2.8 - Arbitrary Mail Relay 1 WEB Claudio Viviani
2012-04-26   Quick.CMS 4.0 - 'p' Cross-Site Scripting 1 WEB Jakub Galczyk
2012-04-26   gpEasy 2.3.3 - 'jsoncallback' Cross-Site Scripting 2 WEB Jakub Galczyk