2011-12-31
|
|
WordPress Plugin The Welcomizer 1.3.9.4 - 'twiz-index.php' Cross-Site Scripting
|
4 |
WEB
|
Am!r
|
2011-12-13
|
|
WordPress Plugin flash-album-gallery - 'flagshow.php' Cross-Site Scripting
|
3 |
WEB
|
Am!r
|
2015-03-19
|
|
Citrix Nitro SDK - Command Injection
|
4 |
WEB
|
Han Sahin
|
2015-03-19
|
|
Citrix Command Center - Credential Disclosure
|
4 |
WEB
|
Han Sahin
|
2015-03-19
|
|
EMC M&R (Watch4net) - Directory Traversal
|
3 |
WEB
|
Han Sahin
|
2015-03-19
|
|
Joomla! Component ECommerce-WD 1.2.5 - SQL Injection
|
5 |
WEB
|
Brandon Perry
|
2015-03-19
|
|
EMC M&R (Watch4net) - Credential Disclosure
|
4 |
WEB
|
Han Sahin
|
2015-03-19
|
|
Chamilo LMS 1.9.10 - Multiple Vulnerabilities
|
3 |
WEB
|
Rehan Ahmed
|
2011-12-12
|
|
WordPress Plugin GRAND FlAGallery 1.57 - 'flagshow.php' Cross-Site Scripting
|
4 |
WEB
|
Am!r
|
2011-12-09
|
|
Pet Listing - 'preview.php' Cross-Site Scripting
|
5 |
WEB
|
Mr.PaPaRoSSe
|
2015-03-18
|
|
Websense Appliance Manager - Command Injection
|
4 |
WEB
|
Han Sahin
|
2015-03-17
|
|
Metasploit Project < 4.11.1 - Initial User Creation Cross-Site Request Forgery (Metasploit)
|
5 |
WEB
|
Mohamed Abdelbaset Elnoby
|
2015-03-17
|
|
Moodle 2.5.9/2.6.8/2.7.5/2.8.3 - Block Title Handler Cross-Site Scripting
|
4 |
WEB
|
LiquidWorm
|
2015-03-16
|
|
WordPress Plugin WPML 3.1.9 - Multiple Vulnerabilities
|
4 |
WEB
|
Jouko Pynnonen
|
2015-03-16
|
|
WordPress Plugin SEO by Yoast 1.7.3.3 - Blind SQL Injection
|
4 |
WEB
|
Ryan Dewhurst
|
2011-12-06
|
|
Simple Machines Forum (SMF) 1.1.15 - 'fckeditor' Arbitrary File Upload
|
4 |
WEB
|
HELLBOY
|
2011-12-06
|
|
WordPress Plugin Pretty Link 1.5.2 - 'pretty-bar.php' Cross-Site Scripting
|
4 |
WEB
|
Am!r
|
2011-12-05
|
|
Elxis CMS 2009 - 'administrator/index.php' URI Cross-Site Scripting
|
5 |
WEB
|
Ewerson Guimaraes
|
2011-12-05
|
|
Elxis CMS 2009 - 'index.php?task' Cross-Site Scripting
|
4 |
WEB
|
Ewerson Guimaraes
|
2011-12-01
|
|
Hero 3.69 - 'month' Cross-Site Scripting
|
4 |
WEB
|
Gjoko Krstic
|
2011-12-01
|
|
AtMail 1.04 - 'func' Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
Dognædis
|
2015-03-16
|
|
Smart PHP Poll - Authentication Bypass
|
4 |
WEB
|
Mr.tro0oqy yemen
|
2015-03-16
|
|
Joomla! Component com_simplephotogallery 1.0 - SQL Injection
|
4 |
WEB
|
Moneer Masoud
|
2011-11-30
|
|
SugarCRM Community Edition 6.3.0RC1 - 'index.php' Multiple SQL Injections
|
4 |
WEB
|
High-Tech Bridge SA
|
2011-11-30
|
|
WordPress Plugin flash-album-gallery - 'facebook.php' Cross-Site Scripting
|
4 |
WEB
|
Am!r
|
2011-11-30
|
|
WordPress Plugin 1-jquery-photo-gallery-Slideshow-flash 1.01 - Cross-Site Scripting
|
3 |
WEB
|
Am!r
|
2011-11-30
|
|
OrangeHRM 2.6.11 - '/lib/controllers/CentralController.php?id' SQL Injection
|
3 |
WEB
|
High-Tech Bridge SA
|
2011-11-30
|
|
OrangeHRM 2.6.11 - 'lib/controllers/CentralController.php' URI Cross-Site Scripting
|
4 |
WEB
|
High-Tech Bridge SA
|
2011-11-30
|
|
OrangeHRM 2.6.11 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
High-Tech Bridge SA
|
2011-11-29
|
|
Virtual Vertex Muster 6.1.6 - Web Interface Directory Traversal
|
4 |
WEB
|
Nick Freeman
|
2015-03-08
|
|
WordPress Plugin Reflex Gallery 3.1.3 - Arbitrary File Upload
|
4 |
WEB
|
CrashBandicot
|
2015-03-10
|
|
Joomla! Component com_simplephotogallery 1.0 - Arbitrary File Upload
|
4 |
WEB
|
CrashBandicot
|
2015-03-04
|
|
WordPress Theme DesignFolio Plus 1.2 - Arbitrary File Upload
|
4 |
WEB
|
CrashBandicot
|
2015-03-12
|
|
Codiad 2.5.3 - Local File Inclusion
|
4 |
WEB
|
TUNISIAN CYBER
|
2015-03-12
|
|
Citrix Netscaler NS10.5 - WAF Bypass (Via HTTP Header Pollution)
|
5 |
WEB
|
BGA Security
|
2015-03-13
|
|
WoltLab Community Gallery - Persistent Cross-Site Scripting
|
4 |
WEB
|
ITAS Team
|
2011-11-28
|
|
Manx 1.0.1 - '/admin/admin_pages.php?Filename' Traversal Arbitrary File Access
|
4 |
WEB
|
LiquidWorm
|
2011-11-28
|
|
Manx 1.0.1 - '/admin/admin_blocks.php?Filename' Traversal Arbitrary File Access
|
4 |
WEB
|
LiquidWorm
|
2011-11-28
|
|
Manx 1.0.1 - '/admin/tiny_mce/plugins/ajaxfilemanager_OLD/ajax_get_file_listing.php' Multiple Cross-
|
4 |
WEB
|
LiquidWorm
|
2011-11-28
|
|
Manx 1.0.1 - '/admin/tiny_mce/plugins/ajaxfilemanager/ajax_get_file_listing.php' Multiple Cross-Site
|
3 |
WEB
|
LiquidWorm
|
2011-11-28
|
|
WordPress Plugin Skysa App Bar - 'idnews' Cross-Site Scripting
|
2 |
WEB
|
Amir
|
2011-11-26
|
|
eSyndiCat Pro 2.3.5 - Multiple Cross-Site Scripting Vulnerabilities
|
5 |
WEB
|
d3v1l
|
2015-03-11
|
|
CS-Cart 4.2.4 - Cross-Site Request Forgery
|
3 |
WEB
|
Luis Santana
|
2011-11-24
|
|
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/traceroute.jsp?nodename' Cross-Site Scripting
|
4 |
WEB
|
anonymous
|
2011-11-24
|
|
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/statuspoll.jsp?nodename' Cross-Site Scripting
|
4 |
WEB
|
anonymous
|
2011-11-24
|
|
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/ping.jsp?nodename' Cross-Site Scripting
|
4 |
WEB
|
anonymous
|
2011-11-24
|
|
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/configurationpoll.jsp?nodename' Cross-Site Scr
|
4 |
WEB
|
anonymous
|
2011-11-24
|
|
HP Network Node Manager (NMM) i 9.10 - '/nnm/mibdiscover?node' Cross-Site Scripting
|
4 |
WEB
|
anonymous
|
2011-11-24
|
|
Balitbang CMS 3.3 - 'alumni.php?hal' SQL Injection
|
5 |
WEB
|
X-Cisadane
|
2011-11-24
|
|
Balitbang CMS 3.3 - 'index.php?hal' SQL Injection
|
4 |
WEB
|
X-Cisadane
|
2011-11-24
|
|
AdaptCMS 2.0 - SQL Injection
|
3 |
WEB
|
X-Cisadane
|
2011-11-23
|
|
Pro Clan Manager 0.4.2 - SQL Injection
|
6 |
WEB
|
anonymous
|
2011-11-22
|
|
Hastymail2 - 'rs' Cross-Site Scripting
|
4 |
WEB
|
HTrovao
|
2011-11-23
|
|
Zen Cart CMS 1.3.9h - Multiple Cross-Site Scripting Vulnerabilities
|
5 |
WEB
|
RPinto
|
2011-11-23
|
|
Prestashop 1.4.4.1 - 'displayImage.php' HTTP Response Splitting
|
5 |
WEB
|
RGouveia
|
2011-11-23
|
|
PrestaShop 1.4.4.1 - '/admin/ajaxfilemanager/ajax_save_text.php' Multiple Cross-Site Scripting Vulne
|
4 |
WEB
|
Prestashop
|
2011-11-23
|
|
PrestaShop 1.4.4.1 - '/modules/mondialrelay/kit_mondialrelay/SuiviExpedition_ajax.php?Expedition' Cr
|
5 |
WEB
|
Prestashop
|
2011-11-23
|
|
PrestaShop 1.4.4.1 - '/modules/mondialrelay/googlemap.php' Multiple Cross-Site Scripting Vulnerabili
|
5 |
WEB
|
Prestashop
|
2011-11-23
|
|
PrestaShop 1.4.4.1 mondialrelay (kit_mondialrelay) - Multiple Cross-Site Scripting Vulnerabilities
|
5 |
WEB
|
Prestashop
|
2011-11-23
|
|
WordPress Plugin NewsLetter Meenews 5.1 - 'idnews' Cross-Site Scripting
|
5 |
WEB
|
Amir
|
2011-11-23
|
|
WordPress Plugin Featurific For WordPress 1.6.2 - 'snum' Cross-Site Scripting
|
5 |
WEB
|
Amir
|
2011-11-23
|
|
WordPress Plugin ClickDesk Live Support 2.0 - 'cdwidget' Cross-Site Scripting
|
6 |
WEB
|
Amir
|
2011-11-23
|
|
Dolibarr ERP/CRM 3.1.0 - '/admin/boxes.php?rowid' SQL Injection
|
5 |
WEB
|
High-Tech Bridge SA
|
2011-11-23
|
|
Dolibarr ERP/CRM 3.1.0 - '/user/info.php?id' SQL Injection
|
6 |
WEB
|
High-Tech Bridge SA
|
2011-11-23
|
|
Dolibarr ERP/CRM 3.1.0 - '/user/index.php' Multiple SQL Injections
|
5 |
WEB
|
High-Tech Bridge SA
|
2011-11-23
|
|
Dolibarr ERP/CRM 3.1 - Multiple Script URI Cross-Site Scripting Vulnerabilities
|
5 |
WEB
|
High-Tech Bridge SA
|
2011-11-22
|
|
TA.CMS (TeachArabia) - 'lang' Traversal Local File Inclusion
|
6 |
WEB
|
CoBRa_21
|
2011-11-22
|
|
TA.CMS (TeachArabia) - 'index.php?id' SQL Injection
|
5 |
WEB
|
CoBRa_21
|
2011-11-21
|
|
WordPress Plugin Lanoba Social 1.0 - 'action' Cross-Site Scripting
|
6 |
WEB
|
Amir
|
2011-11-21
|
|
WordPress Plugin Adminimize 1.7.21 - 'page' Cross-Site Scripting
|
5 |
WEB
|
Am!r
|
2011-11-21
|
|
WordPress Plugin Advanced Text Widget 2.0 - 'page' Cross-Site Scripting
|
5 |
WEB
|
Amir
|
2011-11-21
|
|
WordPress Plugin Alert Before Your Post - 'name' Cross-Site Scripting
|
5 |
WEB
|
Am!r
|
2011-11-20
|
|
Digital Attic Foundation CMS - 'id' SQL Injection
|
5 |
WEB
|
tempe_mendoan
|
2015-03-10
|
|
GeniXCMS 0.0.1 - Multiple Vulnerabilities
|
5 |
WEB
|
LiquidWorm
|
2015-03-10
|
|
CodoForum 2.5.1 - Arbitrary File Download
|
5 |
WEB
|
Kacper Szurek
|
2011-11-17
|
|
WordPress Plugin Flexible Custom Post Type - 'id' Cross-Site Scripting
|
3 |
WEB
|
Am!r
|
2011-11-17
|
|
ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 - Cross-Site Scripting
|
6 |
WEB
|
James webb
|
2011-11-17
|
|
webERP 4.3.8 - '/reportwriter/FormMaker.php?ReportID' SQL Injection
|
4 |
WEB
|
High-Tech Bridge SA
|
2011-11-17
|
|
webERP 4.3.8 - '/reportwriter/ReportMaker.php?reportid' SQL Injection
|
3 |
WEB
|
High-Tech Bridge SA
|
2011-11-17
|
|
webERP 4.3.8 - Multiple Script URI Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
High-Tech Bridge SA
|
2011-11-16
|
|
Webistry 1.6 - 'pid' SQL Injection
|
4 |
WEB
|
CoBRa_21
|
2011-11-13
|
|
Search Plugin for Hotaru CMS 1.4.2 - 'admin_index.php?site_name' Cross-Site Scripting
|
4 |
WEB
|
Gjoko Krstic
|
2015-03-06
|
|
PHP Betoffice (Betster) 1.0.4 - Authentication Bypass / SQL Injection
|
6 |
WEB
|
ZeQ3uL
|
2015-03-07
|
|
Elastix 2.x - Blind SQL Injection
|
4 |
WEB
|
Ahmed Aboul-Ela
|
2015-03-06
|
|
ProjectSend r561 - SQL Injection
|
5 |
WEB
|
ITAS Team
|
2011-11-14
|
|
Joomla! Component Content - 'year' SQL Injection
|
4 |
WEB
|
E.Shahmohamadi
|
2014-11-24
|
|
WordPress Plugin Download Manager 2.7.2 - Privilege Escalation
|
4 |
WEB
|
Kacper Szurek
|
2011-11-11
|
|
Infoblox NetMRI 6.2.1 - Admin Login Page Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
Jose Carlos de Arriba
|
2011-11-10
|
|
Joomla! Component com_alfcontact 1.9.3 - Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
Jose Carlos de Arriba
|
2011-11-09
|
|
AShop - Open Redirection / Cross-Site Scripting
|
3 |
WEB
|
Infoserve Security Team
|
2011-11-08
|
|
PBCS Technology - 'articlenav.php' SQL Injection
|
3 |
WEB
|
Kalashinkov3
|
2011-11-04
|
|
Centreon 2.3.1 - 'command_name' Remote Command Execution
|
3 |
WEB
|
Christophe de la Fuente
|
2011-11-07
|
|
Oracle NoSQL 11g 1.1.100 R2 - 'log' Directory Traversal
|
4 |
WEB
|
Buherátor
|
2011-11-07
|
|
Admin Bot - 'news.php' SQL Injection
|
5 |
WEB
|
baltazar
|
2011-11-07
|
|
SmartJobBoard - 'keywords' Cross-Site Scripting
|
5 |
WEB
|
Mr.PaPaRoSSe
|
2011-11-04
|
|
WordPress Theme Bonus 1.0 - 's' Cross-Site Scripting
|
5 |
WEB
|
3spi0n
|
2011-11-04
|
|
DreamBox DM800 - 'file' Local File Disclosure
|
4 |
WEB
|
Todor Donev
|
2011-11-03
|
|
CmyDocument - Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
demonalex
|
2011-11-03
|
|
S9Y Serendipity 1.5.5 - 'serendipity[filter][bp.ALT]' Cross-Site Scripting
|
4 |
WEB
|
Stefan Schurtz
|
2011-11-02
|
|
eFront 3.6.x - Multiple Cross-Site Scripting / SQL Injections
|
4 |
WEB
|
High-Tech Bridge SA
|
2011-11-01
|
|
Symphony 2.2.3 - '/symphony/publish/comments?filter' SQL Injection
|
3 |
WEB
|
Mesut Timur
|
2011-11-01
|
|
Symphony 2.2.3 - '/symphony/publish/images?filter' Cross-Site Scripting
|
4 |
WEB
|
Mesut Timur
|
2011-11-01
|
|
eFront 3.6.10 Build 11944 - Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
Netsparker Advisories
|
2011-11-01
|
|
IBSng B1.34(T96) - 'str' Cross-Site Scripting
|
4 |
WEB
|
Isfahan
|
2011-11-01
|
|
Hyperic HQ Enterprise 4.5.1 - Cross-Site Scripting / Multiple Security Vulnerabilities
|
4 |
WEB
|
Benjamin Kunz Mejri
|
2011-11-01
|
|
vBulletin 4.1.7 - Multiple Remote File Inclusions
|
4 |
WEB
|
indoushka
|
2011-11-01
|
|
Domain Shop - 'index.php' Cross-Site Scripting
|
4 |
WEB
|
Mr.PaPaRoSSe
|
2011-10-28
|
|
Plici Search 2.0.0.Stable.r.1878 - 'p48-search.html' Cross-Site Scripting
|
3 |
WEB
|
599eme Man
|
2011-10-28
|
|
SjXjV 2.3 - 'post.php' SQL Injection
|
5 |
WEB
|
599eme Man
|
2015-03-04
|
|
BEdita CMS 3.5.0 - Multiple Vulnerabilities
|
4 |
WEB
|
Edric Teo
|
2015-03-04
|
|
SolarWinds Orion Service - SQL Injection
|
3 |
WEB
|
Brandon Perry
|
2011-10-28
|
|
eFront 3.6.10 - 'professor.php' Script Multiple SQL Injections
|
4 |
WEB
|
Vulnerability Research Laboratory
|
2011-10-26
|
|
vTiger CRM 5.2.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities (2)
|
4 |
WEB
|
LiquidWorm
|
2011-10-25
|
|
Alsbtain Bulletin 1.5/1.6 - Multiple Local File Inclusions
|
4 |
WEB
|
Null H4ck3r
|
2011-10-24
|
|
InverseFlow 2.4 - Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
Amir Expl0its
|
2011-10-24
|
|
e107 0.7.24 - 'cmd' Remote Command Execution
|
4 |
WEB
|
Matt Bergin
|
2015-03-03
|
|
PHPMoAdmin - Unauthorized Remote Code Execution
|
5 |
WEB
|
@u0x
|
2011-10-20
|
|
Tine 2.0 - Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
High-Tech Bridge SA
|
2011-10-20
|
|
osCommerce - Arbitrary File Upload / File Disclosure
|
4 |
WEB
|
indoushka
|
2011-10-20
|
|
Innovate Portal 2.0 - 'cat' Cross-Site Scripting
|
3 |
WEB
|
Eyup CELIK
|
2011-10-19
|
|
Boonex Dolphin 6.1 - 'get_list.php' SQL Injection
|
3 |
WEB
|
Yuri Goltsev
|
2015-03-03
|
|
WordPress Plugin cp-multi-view-calendar 1.1.4 - SQL Injection
|
3 |
WEB
|
i0akiN SEC-LABORATORY
|
2015-03-03
|
|
WordPress Theme Photocrati 4.x - SQL Injection / Cross-Site Scripting
|
3 |
WEB
|
ayastar
|
2015-03-03
|
|
Sagem F@st 3304-V2 - Local File Inclusion
|
6 |
WEB
|
Loudiyi Mohamed
|
2011-10-18
|
|
Site@School 2.4.10 - '/index.php' Cross-Site Scripting / SQL Injection
|
3 |
WEB
|
Stefan Schurtz
|