|
2011-08-18
|
|
Mantis Bug Tracker 1.1.8 - Cross-Site Scripting / SQL Injection
|
3 |
WEB
|
Net.Edit0r
|
|
2011-08-18
|
|
Adobe ColdFusion - 'probe.cfm' Cross-Site Scripting
|
3 |
WEB
|
G.R0b1n
|
|
2011-08-17
|
|
Code Widgets Multiple Question - Multiple Choice Online Questionnaire SQL Injections
|
3 |
WEB
|
L0rd CrusAd3r
|
|
2011-08-17
|
|
Code Widgets DataBound Collapsible Menu - 'main.asp' SQL Injection
|
3 |
WEB
|
Inj3ct0r
|
|
2011-08-17
|
|
Code Widgets DataBound Index Style Menu - 'category.asp' SQL Injection
|
3 |
WEB
|
Inj3ct0r
|
|
2011-08-17
|
|
Code Widgets Online Job Application - 'admin.asp' Multiple SQL Injections
|
2 |
WEB
|
L0rd CrusAd3r
|
|
2015-02-13
|
|
WordPress Plugin Webdorado Spider Event Calendar 1.4.9 - SQL Injection
|
2 |
WEB
|
Mateusz Lach
|
|
2015-02-12
|
|
Exponent CMS 2.3.1 - Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
Mayuresh Dani
|
|
2015-02-12
|
|
WordPress Plugin Video Gallery 2.7.0 - SQL Injection
|
3 |
WEB
|
Claudio Viviani
|
|
2015-02-11
|
|
IBM Endpoint Manager - Persistent Cross-Site Scripting
|
3 |
WEB
|
RedTeam Pentesting
|
|
2015-02-11
|
|
Pandora FMS 5.1 SP1 - SQL Injection
|
2 |
WEB
|
Vulnerability-Lab
|
|
2015-02-11
|
|
WordPress Plugin Survey and Poll 1.1 - Blind SQL Injection
|
1 |
WEB
|
Securely (Yoo Hee man)
|
|
2011-08-17
|
|
WordPress Plugin WP-Stats-Dashboard 2.6.5.1 - Multiple Cross-Site Scripting Vulnerabilities
|
1 |
WEB
|
High-Tech Bridge SA
|
|
2011-08-17
|
|
WordPress Plugin Fast Secure Contact Form 3.0.3.1 - 'index.php' Cross-Site Scripting
|
2 |
WEB
|
High-Tech Bridge SA
|
|
2011-08-15
|
|
phpList 2.10.x - Security Bypass / Information Disclosure
|
2 |
WEB
|
Davide Canali
|
|
2011-08-15
|
|
awiki 20100125 - Multiple Local File Inclusions
|
2 |
WEB
|
muuratsalo
|
|
2011-08-17
|
|
phpWebSite - 'page_id' Cross-Site Scripting
|
2 |
WEB
|
Ehsan_Hp200
|
|
2011-08-11
|
|
PHP Flat File Guestbook 1.0 - 'ffgb_admin.php' Remote File Inclusion
|
3 |
WEB
|
RiRes Walid
|
|
2015-02-10
|
|
WordPress Plugin WP EasyCart - Unrestricted Arbitrary File Upload (Metasploit)
|
3 |
WEB
|
Metasploit
|
|
2015-02-10
|
|
LG DVR LE6016D - Remote File Disclosure
|
4 |
WEB
|
Yakir Wizman
|
|
2015-02-09
|
|
Fork CMS 3.8.5 - SQL Injection
|
3 |
WEB
|
Sven Schleier
|
|
2015-02-09
|
|
Chamilo LMS 1.9.8 - Blind SQL Injection
|
3 |
WEB
|
Kacper Szurek
|
|
2011-08-10
|
|
WordPress Plugin eShop 6.2.8 - Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
High-Tech Bridge SA
|
|
2011-08-08
|
|
BlueSoft Rate My Photo Site - 'ty' SQL Injection
|
3 |
WEB
|
darkTR
|
|
2011-08-08
|
|
BlueSoft Banner Exchange - 'referer_id' SQL Injection
|
3 |
WEB
|
darkTR
|
|
2011-08-09
|
|
OpenEMR 4.0 - Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
Houssam Sahli
|
|
2011-08-08
|
|
Search Network 2.0 - 'query' Cross-Site Scripting
|
3 |
WEB
|
darkTR
|
|
2011-08-05
|
|
Softbiz Recipes Portal Script - Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
Net.Edit0r
|
|
2015-02-09
|
|
StaMPi - Local File Inclusion
|
3 |
WEB
|
e . V . E . L
|
|
2015-02-09
|
|
u5CMS 3.9.3 - Multiple Persistent Cross-Site Scripting / Reflected Cross-Site Scripting Vulnerabilit
|
3 |
WEB
|
LiquidWorm
|
|
2015-02-09
|
|
u5CMS 3.9.3 - 'thumb.php' Local File Inclusion
|
3 |
WEB
|
LiquidWorm
|
|
2015-02-09
|
|
u5CMS 3.9.3 - Multiple SQL Injections
|
2 |
WEB
|
LiquidWorm
|
|
2015-02-09
|
|
u5CMS 3.9.3 - 'deletefile.php' Arbitrary File Deletion
|
3 |
WEB
|
LiquidWorm
|
|
2015-02-09
|
|
RedaxScript CMS 2.2.0 - SQL Injection
|
3 |
WEB
|
ITAS Team
|
|
2011-08-04
|
|
Community Server 2007/2008 - 'TagSelector.aspx' Cross-Site Scripting
|
2 |
WEB
|
PontoSec
|
|
2011-08-04
|
|
WordPress Plugin WP E-Commerce 3.8.6 - 'cart_messages[]' Cross-Site Scripting
|
2 |
WEB
|
High-Tech Bridge SA
|
|
2011-08-03
|
|
HESK 2.2 - Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
High-Tech Bridge SA
|
|
2011-08-03
|
|
Joomla! Component com_community - 'userid' SQL Injection
|
2 |
WEB
|
Ne0 H4ck3R
|
|
2011-08-03
|
|
Joomla! Component com_xeslidegalfx - 'id' SQL Injection
|
3 |
WEB
|
Ne0 H4ck3R
|
|
2011-08-03
|
|
Ataccan E-Ticaret Scripti - 'id' SQL Injection
|
3 |
WEB
|
Err0R
|
|
2011-08-03
|
|
BESNI OKUL PORTAL - 'sayfa.asp' Cross-Site Scripting
|
4 |
WEB
|
Err0R
|
|
2011-08-03
|
|
mt LinkDatenbank - 'b' Cross-Site Scripting
|
3 |
WEB
|
Err0R
|
|
2011-07-11
|
|
Gilnet News - 'read_more.php' SQL Injection
|
3 |
WEB
|
Err0R
|
|
2011-08-02
|
|
MyBB MyTabs Plugin - 'tab' SQL Injection
|
2 |
WEB
|
AutoRUN & dR.sqL
|
|
2011-08-01
|
|
Curverider Elgg 1.7.9 - Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
Aung Khant
|
|
2014-12-12
|
|
IBM Tivoli Service Automation Manager 7.2.4 - Remote Code Execution
|
2 |
WEB
|
Jakub Palaczynski
|
|
2011-07-28
|
|
Sitecore CMS 6.4.1 - 'url' Open Redirection
|
2 |
WEB
|
Tom Neaves
|
|
2011-07-28
|
|
HP Network Automation 9.10 - SQL Injection
|
2 |
WEB
|
anonymous
|
|
2011-07-25
|
|
CobraScripts Trading Marketplace Script - 'cid' SQL Injection
|
2 |
WEB
|
Ehsan_Hp200
|
|
2015-02-05
|
|
Magento Server MAGMI Plugin - Multiple Vulnerabilities
|
3 |
WEB
|
SECUPENT
|
|
2015-02-04
|
|
Pragyan CMS 3.0 - SQL Injection
|
1 |
WEB
|
Steffen Rösemann
|
|
2011-07-27
|
|
PHPJunkYard GBook 1.6/1.7 - Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
High-Tech Bridge SA
|
|
2011-07-27
|
|
MBoard 1.3 - 'url' Open Redirection
|
2 |
WEB
|
High-Tech Bridge SA
|
|
2011-07-26
|
|
Support Incident Tracker (SiT!) 3.63 p1 - 'tasks.php?selected[]' SQL Injection
|
2 |
WEB
|
Yuri Goltsev
|
|
2011-07-26
|
|
Support Incident Tracker (SiT!) 3.63 p1 - 'search.php?search_string' SQL Injection
|
2 |
WEB
|
Yuri Goltsev
|
|
2011-07-26
|
|
Support Incident Tracker (SiT!) 3.63 p1 - 'billable_incidents.php?sites[]' SQL Injection
|
1 |
WEB
|
Yuri Goltsev
|
|
2011-07-26
|
|
Support Incident Tracker (SiT!) 3.63 p1 - 'report_marketing.php?exc[]' SQL Injection
|
1 |
WEB
|
Yuri Goltsev
|
|
2011-07-25
|
|
Joomla! Component com_virtualmoney 1.5 - SQL Injection
|
2 |
WEB
|
FL0RiX
|
|
2015-02-03
|
|
Hewlett-Packard (HP) UCMDB - JMX-Console Authentication Bypass
|
3 |
WEB
|
Hans-Martin Muench
|
|
2015-02-03
|
|
ManageEngine Desktop Central 9 Build 90087 - Cross-Site Request Forgery
|
2 |
WEB
|
Mohamed Idris
|
|
2011-07-25
|
|
Willscript Recipes Website Script Silver Edition - 'viewRecipe.php' SQL Injection
|
2 |
WEB
|
Lazmania61
|
|
2011-07-25
|
|
Online Grades 3.2.5 - Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
Gjoko Krstic
|
|
2011-07-25
|
|
Godly Forums - 'id' SQL Injection
|
1 |
WEB
|
3spi0n
|
|
2011-07-21
|
|
Synergy Software - 'id' SQL Injection
|
2 |
WEB
|
Ehsan_Hp200
|
|
2011-07-20
|
|
Cyberoam UTM - Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
Patrick Webster
|
|
2011-07-20
|
|
Tiki Wiki CMS Groupware 7.2 - 'snarf_ajax.php' Cross-Site Scripting
|
2 |
WEB
|
High-Tech Bridge SA
|
|
2011-07-20
|
|
Joomla! < 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
YGN Ethical Hacker Group
|
|
2015-02-02
|
|
Sefrengo CMS 1.6.1 - Multiple SQL Injections
|
2 |
WEB
|
ITAS Team
|
|
2011-07-11
|
|
WordPress Plugin bSuite 4.0.7 - Multiple HTML Injection Vulnerabilities
|
2 |
WEB
|
IHTeam
|
|
2011-07-17
|
|
BlueSoft Social Networking CMS - SQL Injection
|
2 |
WEB
|
Lazmania61
|
|
2011-07-18
|
|
BlueSoft (Multiple Products) - Multiple SQL Injections
|
1 |
WEB
|
Lazmania61
|
|
2011-07-15
|
|
AJ Classifieds - 'listingid' SQL Injection
|
2 |
WEB
|
Lazmania61
|
|
2011-07-15
|
|
Joomla! Component com_newssearch - SQL Injection
|
1 |
WEB
|
Robert Cooper
|
|
2011-07-15
|
|
Joomla! Component Controller - 'Itemid' SQL Injection
|
3 |
WEB
|
SOLVER
|
|
2011-07-15
|
|
Joomla! Component com_hospital - SQL Injection
|
3 |
WEB
|
SOLVER
|
|
2011-07-15
|
|
Joomla! Component Juicy Gallery - 'picId' SQL Injection
|
2 |
WEB
|
SOLVER
|
|
2011-07-15
|
|
Joomla! Component Foto - 'id_categoria' SQL Injection
|
3 |
WEB
|
SOLVER
|
|
2011-07-15
|
|
Easy Estate Rental - 's_location' SQL Injection
|
3 |
WEB
|
Lazmania61
|
|
2011-07-15
|
|
Auto Web Toolbox - 'id' SQL Injection
|
3 |
WEB
|
Lazmania61
|
|
2015-01-24
|
|
NPDS CMS REvolution-13 - SQL Injection
|
3 |
WEB
|
Narendra Bhati
|
|
2011-07-29
|
|
Chyrp 2.x swfupload Extension - 'upload_handler.php' Arbitrary File Upload / Arbitrary PHP Code Exec
|
2 |
WEB
|
Wireghoul
|
|
2011-07-29
|
|
Chyrp 2.x - '/includes/lib/gz.php?File' Traversal Arbitrary File Access
|
3 |
WEB
|
Wireghoul
|
|
2011-07-29
|
|
Chyrp 2.x - 'action' Traversal Local File Inclusion
|
3 |
WEB
|
Wireghoul
|
|
2011-07-13
|
|
Chyrp 2.x - '/includes/JavaScript.php?action' Cross-Site Scripting
|
3 |
WEB
|
Wireghoul
|
|
2011-07-13
|
|
Chyrp 2.x - '/admin/help.php' Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
Wireghoul
|
|
2011-07-13
|
|
TCExam 11.2.x - Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
Gjoko Krstic
|
|
2011-07-12
|
|
Flowplayer 3.2.7 - 'linkUrl' Cross-Site Scripting
|
3 |
WEB
|
Szymon Gruszecki
|
|
2011-07-12
|
|
Sphider 1.3.x - Admin Panel Multiple SQL Injections
|
3 |
WEB
|
Karthik R
|
|
2015-01-29
|
|
ManageEngine Firewall Analyzer 8.0 - Directory Traversal / Cross-Site Scripting
|
3 |
WEB
|
Ertebat Gostar Co
|
|
2011-07-11
|
|
ICMusic 1.2 - 'music_id' SQL Injection
|
4 |
WEB
|
kaMtiEz
|
|
2011-07-11
|
|
Prontus CMS - 'page' Cross-Site Scripting
|
3 |
WEB
|
Zerial
|
|
2011-07-08
|
|
Joomla! Component com_voj - SQL Injection
|
3 |
WEB
|
CoBRa_21
|
|
2011-07-05
|
|
Classified Script - c-BrowseClassified Cross-Site Scripting
|
2 |
WEB
|
Raghavendra Karthik D
|
|
2011-07-03
|
|
eTAWASOL - 'id' SQL Injection
|
2 |
WEB
|
Bl4ck.Viper
|
|
2011-07-02
|
|
Paliz Portal - Cross-Site Scripting / Multiple SQL Injections
|
2 |
WEB
|
Net.Edit0r
|
|
2011-07-05
|
|
Joomla! Component com_jr_tfb - 'Controller' Local File Inclusion
|
3 |
WEB
|
FL0RiX
|
|
2014-11-11
|
|
WordPress Plugin Photo Gallery 1.2.5 - Unrestricted Arbitrary File Upload
|
3 |
WEB
|
Kacper Szurek
|
|
2015-01-26
|
|
Symantec Data Center Security - Multiple Vulnerabilities
|
4 |
WEB
|
SEC Consult
|
|
2015-01-26
|
|
ferretCMS 1.0.4-alpha - Multiple Vulnerabilities
|
3 |
WEB
|
Steffen Rösemann
|
|
2015-01-26
|
|
jclassifiedsmanager - Multiple Vulnerabilities
|
3 |
WEB
|
Sarath Nair
|
|
2015-01-26
|
|
ManageEngine EventLog Analyzer 9.0 - Directory Traversal / Cross-Site Scripting
|
3 |
WEB
|
Ertebat Gostar Co
|
|
2015-01-26
|
|
SWFupload 2.5.0 - Cross Frame Scripting (XFS)
|
3 |
WEB
|
MindCracker
|
|
2015-01-26
|
|
PHP Webquest 2.6 - SQL Injection
|
2 |
WEB
|
jordan root
|
|
2015-01-26
|
|
ManageEngine ServiceDesk Plus 9.0 < Build 9031 - User Privileges Management
|
2 |
WEB
|
Rewterz - Research Group
|
|
2015-01-26
|
|
Barracuda Networks Cloud Series - Filter Bypass
|
3 |
WEB
|
Vulnerability-Lab
|
|
2015-01-26
|
|
Mangallam CMS - SQL Injection
|
1 |
WEB
|
Vulnerability-Lab
|
|
2011-06-28
|
|
Flatpress 0.1010.1 - Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
High-Tech Bridge SA
|
|
2011-06-28
|
|
Joomla! 1.6.3 - Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
Aung Khant
|
|
2011-06-27
|
|
WordPress Plugin Pretty Link Lite 1.4.56 - Multiple SQL Injections
|
3 |
WEB
|
MaKyOtOx
|
|
2015-01-22
|
|
ManageEngine ServiceDesk Plus 9.0 - User Enumeration
|
3 |
WEB
|
Muhammad Ahmed Siddiqui
|
|
2015-01-22
|
|
ManageEngine ServiceDesk Plus 9.0 - SQL Injection
|
3 |
WEB
|
Muhammad Ahmed Siddiqui
|
|
2011-06-27
|
|
Mambo 4.6.x - Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
Aung Khant
|
|
2011-06-27
|
|
Joomla! Component com_morfeoshow - 'idm' SQL Injection
|
2 |
WEB
|
Th3.xin0x
|
|
2011-06-23
|
|
Nodesforum - '_nodesforum_node' SQL Injection
|
2 |
WEB
|
Andrea Bocchetti
|
|
2015-01-19
|
|
WordPress Plugin Cforms 14.7 - Remote Code Execution
|
3 |
WEB
|
Zakhar
|
|
2015-01-22
|
|
ecommerceMajor - SQL Injection / Authentication Bypass
|
3 |
WEB
|
Manish Tanwar
|
|
2011-06-23
|
|
Sitemagic CMS - 'SMTpl' Directory Traversal
|
3 |
WEB
|
Andrea Bocchetti
|
|
2011-06-22
|
|
FanUpdate 3.0 - 'pageTitle' Cross-Site Scripting
|
3 |
WEB
|
High-Tech Bridge SA
|
|
2011-06-22
|
|
Eshop Manager - Multiple SQL Injections
|
3 |
WEB
|
Number 7
|
|
2011-06-22
|
|
H3C ER5100 - Authentication Bypass
|
3 |
WEB
|
128bit
|
|
2011-06-21
|
|
Sitemagic CMS 2010.04.17 - 'SMExt' Cross-Site Scripting
|
3 |
WEB
|
Gjoko Krstic
|
|
2011-06-18
|
|
Taha Portal 3.2 - 'sitemap.php' Cross-Site Scripting
|
3 |
WEB
|
Bl4ck.Viper
|
|
2011-06-18
|
|
Immophp 1.1.1 - Cross-Site Scripting / SQL Injection
|
3 |
WEB
|
KedAns-Dz
|
|
2011-06-19
|
|
Nibbleblog 3 - Multiple SQL Injections
|
3 |
WEB
|
KedAns-Dz
|
|
2011-06-15
|
|
MyBloggie 2.1.6 - HTML Injection / SQL Injection
|
3 |
WEB
|
Robin Verton
|
