Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2009-08-06   Silurus Classifieds - 'category.php?ID' Cross-Site Scripting 3 WEB Moudi
2009-08-06   AJ Auction Pro OOPD 3.0 - 'txtkeyword' Cross-Site Scripting 4 WEB 599eme Man
2010-09-15   ChillyCMS 2.3.4.3 - Arbitrary File Upload 3 WEB John Leitch
2010-09-15   Mollify 1.6 - 'index.php' Cross-Site Scripting 4 WEB John Leitch
2010-09-15   CMScout IBrowser TinyMCE Plugin 2.3.4.3 - Local File Inclusion 3 WEB John Leitch
2014-09-12   Joomla! Component com_formmaker 3.4 - SQL Injection 3 WEB Claudio Viviani
2010-09-15   NWS-Classifieds - 'cmd' Local File Inclusion 3 WEB John Leitch
2009-08-06   Willscript Auction Website Script - 'category.php' SQL Injection 3 WEB 599eme Man
2010-09-15   Multple I-Escorts Products - 'escorts_search.php' Cross-Site Scripting 3 WEB 599eme Man
2009-08-08   SpiceWorks - 'query' Cross-Site Scripting 4 WEB Adam Baldwin
2009-08-06   Multi Website 1.5 - 'search' HTML Injection 3 WEB 599eme Man
2010-09-15   ATutor 1.0 - Multiple 'cid' Cross-Site Scripting Vulnerabilities 3 WEB High-Tech Bridge SA
2010-09-15   AChecker 1.0 - 'URI' Cross-Site Scripting 3 WEB High-Tech Bridge SA
2010-09-15   AContent 1.0 - Cross-Site Scripting / HTML Injection 3 WEB High-Tech Bridge SA
2010-09-06   Santafox 2.0.2 - 'search' Cross-Site Scripting 3 WEB High-Tech Bridge SA
2014-09-11   ChatSecure IM 2.2.4 iOS - Persistent Cross-Site Scripting 3 WEB Vulnerability-Lab
2014-09-11   Photorange 1.0 iOS - Local File Inclusion 3 WEB Vulnerability-Lab
2014-09-11   Joomla! Component Spider Contacts 1.3.6 - 'contacts_id' SQL Injection 3 WEB Claudio Viviani
2014-09-11   OroCRM - Persistent Cross-Site Scripting 3 WEB Provensec
2010-09-14   PaysiteReviewCMS - 'image.php' Cross-Site Scripting 3 WEB Valentin Hoebel
2010-09-14   PaysiteReviewCMS 1.1 - 'search.php' Cross-Site Scripting 3 WEB Valentin Hoebel
2009-09-06   Omnistar Recruiting - 'resume_register.php' Cross-Site Scripting 3 WEB MizoZ
2009-08-06   Waverider Systems Perlshop - Multiple Input Validation Vulnerabilities 3 WEB Shadow
2009-08-13   Elkagroup Elkapax - 'q' Cross-Site Scripting 3 WEB Isfahan
2010-09-09   SmarterTools SmarterStats 5.3.3819 - 'frmHelp.aspx' Cross-Site Scripting 3 WEB David Hoyt
2010-09-07   ZenPhoto 1.3 - '/zp-core/admin.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Bogdan Calin
2010-09-07   ZenPhoto 1.3 - '/zp-core/full-image.php?a' SQL Injection 3 WEB Bogdan Calin
2010-09-06   MySource Matrix - 'char_map.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Gjoko Krstic
2010-09-06   HeffnerCMS 1.22 - 'index.php' Local File Inclusion 3 WEB MiND C0re
2010-09-02   TBDev 2.0 - Remote File Inclusion / SQL Injection 4 WEB Inj3ct0r
2009-09-02   Webformatique Reservation Manager 2.4 - 'index.php' Cross-Site Scripting 3 WEB Moudi
2010-09-06   Horde Application Framework 3.3.8 - 'icon_browser.php' Cross-Site Scripting 3 WEB Moritz Naumann
2010-09-06   BlueCMS 1.6 - 'x-forwarded-for' Header SQL Injection 3 WEB cnryan
2009-09-11   Match Agency BiZ - 'report.php?pid' Cross-Site Scripting 3 WEB Moudi
2009-09-11   Match Agency BiZ - 'edit_profile.php?important' Cross-Site Scripting 3 WEB Moudi
2009-09-10   tourismscripts HotelBook - 'hotel_id' Multiple SQL Injections 3 WEB Mr.SQL
2009-09-11   SZNews 2.7 - 'printnews.php3' Remote File Inclusion 2 WEB kurdish hackers team
2010-09-10   Datetopia Buy Dating Site - Cross-Site Scripting 4 WEB Moudi
2010-09-03   Pligg CMS 1.0.4 - SQL Injection / Cross-Site Scripting 3 WEB Bogdan Calin
2014-09-09   Parallels Plesk Sitebuilder 9.5 - Multiple Vulnerabilities 3 WEB alieye
2014-09-09   WordPress Plugin WP Support Plus Responsive Ticket System 2.0 - Multiple Vulnerabilities 3 WEB Fikri Fadzil
2014-09-08   Jenkins 1.578 - Multiple Vulnerabilities 3 WEB JoeV
2014-09-08   Mpay24 PrestaShop Payment Module 1.5 - Multiple Vulnerabilities 3 WEB Wireghoul
2014-09-08   Atmail Webmail 7.2 - Multiple Vulnerabilities 3 WEB smash
2014-09-08   TP-Link TL-WR841N / TL-WR841ND - Multiple Vulnerabilities 3 WEB smash
2014-09-08   TP-Link TL-WR340G / TL-WR340GD - Multiple Vulnerabilities 3 WEB smash
2014-09-08   osCommerce 2.3.4 - Multiple Vulnerabilities 3 WEB smash
2014-09-08   Zen Cart 1.5.3 - Multiple Vulnerabilities 3 WEB smash
2014-09-08   phpMyFAQ 2.8.x - Multiple Vulnerabilities 3 WEB smash
2014-09-08   vBulletin 5.1.x - Persistent Cross-Site Scripting 5 WEB smash
2014-09-08   WordPress Theme Acento - 'view-pdf.php?File' Arbitrary File Download 4 WEB alieye
2014-09-08   WordPress Plugin Bulk Delete Users by Email 1.0 - Cross-Site Request Forgery 4 WEB Fikri Fadzil
2014-09-08   Joomla! Component Spider Calendar 3.2.6 - SQL Injection 4 WEB Claudio Viviani
2010-09-03   NuSOAP 0.9.5 - 'nusoap.php' Cross-Site Scripting 4 WEB Bogdan Calin
2010-09-02   CMS WebManager-Pro - 'c.php' SQL Injection 4 WEB MustLive
2010-09-02   OneCMS 2.6.1 - 'index.php' Cross-Site Scripting 4 WEB anT!-Tr0J4n
2009-10-14   AdaptBB 1.0 - 'q' Cross-Site Scripting 4 WEB drunken danish rednecks
2009-09-07   KingCMS 0.6 - 'CONFIG[AdminPath]' Remote File Inclusion 4 WEB Securitylab.ir
2010-09-01   ArtGK CMS - Cross-Site Scripting / HTML Injection 5 WEB High-Tech Bridge SA
2010-09-01   Rumba XML 2.4 - 'index.php' Multiple HTML Injection Vulnerabilities 3 WEB High-Tech Bridge SA
2010-09-01   Amiro.CMS 5.8.4.0 - Multiple HTML Injection Vulnerabilities 3 WEB High-Tech Bridge SA
2014-09-07   PhpOnlineChat 3.0 - Cross-Site Scripting 4 WEB N0 Feel
2014-09-07   WordPress Plugin Like Dislike Counter 1.2.3 - SQL Injection 5 WEB Att4ck3r.ir
2014-09-07   LoadedCommerce7 - Systemic Query Factory 4 WEB Breaking.Technology
2014-09-07   Invision Power Board (IP.Board) 3.x - Cross-Site Request Forgery / Token Hjiacking 3 WEB Piotr S.
2009-09-10   Datemill - 'search.php?st' Cross-Site Scripting 4 WEB Moudi
2009-09-10   Datemill - 'photo_search.php?st' Cross-Site Scripting 3 WEB Moudi
2009-09-10   Datemill - 'photo_view.php?return' Cross-Site Scripting 5 WEB Moudi
2010-08-31   HP Insight Diagnostics Online Edition 8.4 - 'custom.php?testmode' Cross-Site Scripting 4 WEB Mr Teatime
2010-08-31   HP Insight Diagnostics Online Edition 8.4 - 'globals.php?tabpage' Cross-Site Scripting 3 WEB Mr Teatime
2010-08-31   HP Insight Diagnostics Online Edition 8.4 - 'survey.php?category' Cross-Site Scripting 4 WEB Mr Teatime
2010-08-31   HP Insight Diagnostics Online Edition 8.4 - 'idstatusframe.php' Multiple Cross-Site Scripting Vulner 4 WEB Mr Teatime
2010-08-31   HP Insight Diagnostics Online Edition 8.4 - 'parameters.php?device' Cross-Site Scripting 5 WEB Mr Teatime
2010-08-29   WebsiteKit Gbplus - 'Name' / 'Body' HTML Injection 5 WEB MiND
2014-09-05   MyBB User Social Networks Plugin 1.2 - Persistent Cross-Site Scripting 4 WEB Fikri Fadzil
2014-09-05   WordPress Plugin Premium Gallery Manager - Configuration Access 5 WEB Hannaichi
2010-08-26   CompuCMS - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities 4 WEB High-Tech Bridge SA
2010-08-26   Valarsoft WebMatic 3.0.5 - Multiple HTML Injection Vulnerabilities 4 WEB High-Tech Bridge SA
2010-08-26   TCMS - Multiple Input Validation Vulnerabilities 4 WEB High-Tech Bridge SA
2010-08-23   Auto CMS 1.6 - 'autocms.php' Cross-Site Scripting 5 WEB High-Tech Bridge SA
2010-08-25   BlastChat Client 3.3 - Cross-Site Scripting 6 WEB Aung Khant
2010-08-25   Acunetix Web Vulnerability Scanner - DLL Loading Arbitrary Code Execution 6 WEB Kolor
2014-09-03   vBulletin 4.0.x < 4.1.2 - 'search.php?cat' SQL Injection 5 WEB D35m0nd142
2014-09-02   Syslog LogAnalyzer 3.6.5 - Persistent Cross-Site Scripting 4 WEB Dolev Farhi
2014-09-02   WordPress Plugin Huge-IT Image Gallery 1.0.1 - (Authenticated) SQL Injection 4 WEB Claudio Viviani
2014-09-01   ManageEngine EventLog Analyzer - Multiple Vulnerabilities (1) 4 WEB Hans-Martin Muench
2014-09-01   ManageEngine Desktop Central - Arbitrary File Upload / Remote Code Execution 5 WEB Pedro Ribeiro
2014-09-01   WordPress Plugin Slideshow Gallery 1.4.6 - Arbitrary File Upload 4 WEB Jesus Ramirez Pichardo
2014-09-01   Arachni Web Application Scanner Web UI - Persistent Cross-Site Scripting 6 WEB Prakhar Prasad
2014-09-01   Mulitple WordPress Themes - 'admin-ajax.php?img' Arbitrary File Download 6 WEB Hugo Santiago
2010-08-23   AneCMS 1.0/1.3 - 'register/next' SQL Injection 5 WEB Sweet
2010-08-19   Cacti 0.8.7 (RedHat High Performance Computing [HPC]) - 'utilities.php?Filter' Cross-Site Scripting 6 WEB Marc Schoenefeld
2010-08-19   Syntax Highlighter 3.0.83 - 'index.html' HTML Injection 5 WEB indoushka
2009-08-10   Hitron Soft Answer Me - 'answers.php' Cross-Site Scripting 3 WEB Moudi
2009-08-10   ViArt Helpdesk - 'products_search.php?search_category_id' Cross-Site Scripting 4 WEB Moudi
2009-08-10   ViArt Helpdesk - 'forum.php?forum_id' Cross-Site Scripting 4 WEB Moudi
2009-08-10   ViArt Helpdesk - 'reviews.php?category_id' Cross-Site Scripting 6 WEB Moudi
2009-08-10   ViArt Helpdesk - 'product_details.php?category_id' Cross-Site Scripting 4 WEB Moudi
2009-08-10   ViArt Helpdesk - 'article.php?category_id' Cross-Site Scripting 4 WEB Moudi
2009-08-10   ViArt Helpdesk - 'products.php?category_id' Cross-Site Scripting 5 WEB Moudi
2009-08-03   Payment Processor Script (PPScript) - 'shop.htm' SQL Injection 4 WEB MizoZ
2009-08-10   Online Work Order Suite Lite Edition - Multiple Cross-Site Scripting Vulnerabilities 3 WEB Moudi
2009-08-07   Facil Helpdesk - 'kbase/kbase.php' URI Cross-Site Scripting 2 WEB Moudi
2009-10-19   phpCMS 2008 - 'download.php' Information Disclosure 4 WEB Securitylab.ir
2009-10-14   FreeSchool - 'key_words' Cross-Site Scripting 3 WEB drunken danish rednecks
2010-08-18   Joomla! Component com_dirfrm - Multiple SQL Injections 4 WEB Hieuneo
2010-08-10   Nasim Guest Book - 'page' Cross-Site Scripting 4 WEB Moudi
2009-08-10   TurnkeyForms Yahoo Answers Clone - 'questiondetail.php' Cross-Site Scripting 5 WEB Moudi
2010-08-16   123 Flash Chat 7.8 - Multiple Vulnerabilities 4 WEB Lincoln
2010-08-16   CMSimple 3.3 - Cross-Site Scripting / Cross-Site Request Forgery 4 WEB High-Tech Bridge SA
2010-08-15   Joomla! Component com_fireboard - 'Itemid' SQL Injection 5 WEB ViRuS Qalaa
2010-08-15   Zomplog 3.9 - 'message' Cross-Site Scripting 4 WEB 10n1z3d
2010-08-15   Joomla! Component Weblinks - 'Itemid' SQL Injection 5 WEB ViRuS Qalaa
2009-09-01   Property Watch - 'login.php?redirect' Cross-Site Scripting 4 WEB Moudi
2009-09-01   Property Watch - 'email.php?videoid' Cross-Site Scripting 6 WEB Moudi
2009-09-01   PHPMass Real Estate - 'view_map.php' Cross-Site Scripting 5 WEB Moudi
2009-09-01   Beex - 'partneralle.php?navaction' Cross-Site Scripting 4 WEB Moudi
2009-09-01   Beex - 'news.php?navaction' Cross-Site Scripting 5 WEB Moudi
2010-08-10   Onyx - Multiple Cross-Site Scripting Vulnerabilities 6 WEB High-Tech Bridge SA
2010-08-10   Mystic 0.1.4 - Multiple Cross-Site Scripting Vulnerabilities 5 WEB High-Tech Bridge SA
2010-08-13   Edit-X PHP CMS - 'search_text' Cross-Site Scripting 5 WEB High-Tech Bridge SA
2010-08-13   CMS Source - Multiple Input Validation Vulnerabilities 4 WEB High-Tech Bridge SA
2010-08-10   SyntaxCMS - 'rows_per_page' SQL Injection 4 WEB High-Tech Bridge SA
2009-10-19   Amiro.CMS 5.4 - Multiple Input Validation Vulnerabilities 4 WEB Vladimir Vorontsov
2009-08-31   JBoard - Multiple Cross-Site Scripting / SQL Injections 4 WEB Inj3ct0r