Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2010-07-27   Impact Software AdPeeps - Cross-Site Scripting / HTML Injection 2 WEB Matt
2010-07-28   SPIP 2.1 - 'var_login' Cross-Site Scripting 2 WEB dotsafe.fr
2010-07-28   Cetera eCommerce - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities 2 WEB MustLive
2010-07-28   Cetera eCommerce - Multiple SQL Injections 1 WEB MustLive
2010-07-28   Jira 4.0.1 - Cross-Site Scripting / Information Disclosure 1 WEB MaXe
2010-07-27   Social Media - 'index.php' Local File Inclusion 1 WEB Harri Johansson
2014-08-21   MyBB 1.8 Beta 3 - Multiple Vulnerabilities 1 WEB DemoLisH B3yaZ
2009-12-22   Active Business Directory 2 - 'searchadvance.asp' Cross-Site Scripting 1 WEB Andrea Bocchetti
2010-07-26   SyndeoCMS 2.9 - Multiple HTML Injection Vulnerabilities 1 WEB High-Tech Bridge SA
2009-12-04   Clixint Technologies DPI - Cross-Site Scripting 1 WEB anonymous
2010-10-04   Portili Personal and Team Wiki 1.14 - Multiple Vulnerabilities (2) 1 WEB Abysssec
2009-10-06   e-Courier CMS - 'UserGUID' Multiple Cross-Site Scripting Vulnerabilities 1 WEB BugsNotHugs
2010-07-26   Joomla! Component FreiChat 1.0/2.x - HTML Injection 1 WEB nag_sunny
2010-07-25   MC Content Manager 10.1 - SQL Injection / Cross-Site Scripting 2 WEB MustLive
2010-07-23   SAP NetWeaver 6.4/7.0 - 'wsnavigator' Cross-Site Scripting 2 WEB Alexandr Polyakov
2009-10-28   Piwigo 2.0 - 'comments.php' Multiple Cross-Site Scripting Vulnerabilities 2 WEB Andrew Paterson
2009-11-02   Stratek Web Design Twilight CMS 4.0 - 'calendar' Cross-Site Scripting 2 WEB Vladimir Vorontsov
2010-07-22   Claus Muus Spitfire 1.0.336 - Multiple Cross-Site Scripting Vulnerabilities 2 WEB High-Tech Bridge SA
2014-08-18   Tenda A5s Router 3.02.05_CN - Authentication Bypass 2 WEB zixian
2009-12-15   Scriptsez Ez FAQ Maker 1.0 - Cross-Site Scripting / Cross-Site Request Forgery 1 WEB Milos Zivanovic
2009-12-14   TenderSystem 0.9.5 - 'main.php' Multiple Local File Inclusions 1 WEB Packetdeath
2010-07-19   SnowFlake CMS 0.9.5 Beta - 'uid' SQL Injection 1 WEB Dinesh Arora
2009-12-16   BOLDfx Recipe Script 5.0 - Multiple Remote Vulnerabilities 1 WEB Milos Zivanovic
2009-12-16   BOLDfx eUploader 3.1.1 - 'admin.php' Multiple Remote Vulnerabilities 1 WEB Milos Zivanovic
2010-07-15   Sourcefabric Campsite Articles - HTML Injection 1 WEB D4rk357
2010-07-18   YACS CMS 10.5.27 - 'context[path_to_root]' Remote File Inclusion 1 WEB eidelweiss
2010-07-18   iOffice 0.1 - 'parametre' Remote Command Execution 1 WEB Marshall Whittaker
2009-12-17   jCore - 'search' Cross-Site Scripting 1 WEB loneferret
2009-12-17   Pre Jobo.NET - Multiple SQL Injections 1 WEB bi0
2007-12-17   MOJO IWms 7 - 'default.asp' Cookie Manipulation 2 WEB cp77fk4r
2009-12-14   Ez Poll Hoster - Multiple Cross-Site Scripting Vulnerabilities 1 WEB Milos Zivanovic
2009-09-21   WX-Guestbook 1.1.208 - SQL Injection / HTML Injection 1 WEB learn3r
2010-07-15   Pligg CMS 1.0.4 - 'search.php' Cross-Site Scripting 1 WEB High-Tech Bridge SA
2010-07-15   Pixie 1.0.4 - HTML Injection / Cross-Site Scripting 2 WEB High-Tech Bridge SA
2010-07-15   Gekko Web Builder 9.0 - 'index.php' Cross-Site Scripting 2 WEB High-Tech Bridge SA
2014-08-14   WordPress Plugin Disqus 2.7.5 - Cross-Site Request Forgery (Admin Persistent) / Cross-Site Scripting 2 WEB Nik Cubrilovic
2010-07-15   FestOS 2.3 - 'contents' Cross-Site Scripting 2 WEB High-Tech Bridge SA
2010-07-15   DSite CMS 4.81 - 'modmenu.php' Cross-Site Scripting 2 WEB High-Tech Bridge SA
2010-07-15   PHPWCMS 1.4.5 - 'PHPwcms.php' Cross-Site Scripting 1 WEB High-Tech Bridge SA
2010-07-15   Spitfire 1.0.381 - Cross-Site Scripting / Cross-Site Request Forgery 2 WEB Nijel the Destroyer
2009-12-14   Ez Cart - 'index.php' Cross-Site Scripting 2 WEB anti-gov
2009-12-13   Zeecareers 2.0 - Cross-Site Scripting / Authentication Bypass 3 WEB bi0
2009-12-13   WS Interactive Automne 4.0 - '228-recherche.php' Cross-Site Scripting 2 WEB loneferret
2009-12-14   The Next Generation of Genealogy Sitebuilding - 'searchform.php' Cross-Site Scripting 1 WEB bi0
2014-08-09   TomatoCart 1.x - SQL Injection 2 WEB Breaking.Technology
2014-08-09   Easy FTP Pro 4.2 iOS - Command Injection 2 WEB Vulnerability-Lab
2014-08-09   PhotoSync Wifi & Bluetooth 1.0 - Local File Inclusion 2 WEB Vulnerability-Lab
2010-07-13   Diem 5.1.2 - Multiple Cross-Site Scripting Vulnerabilities 2 WEB High-Tech Bridge SA
2010-07-11   CMS Made Simple Module Antz Toolkit 1.02 - Arbitrary File Upload 2 WEB John Leitch
2010-07-11   CMS Made Simple 1.8 - 'default_cms_lang' Local File Inclusion 2 WEB John Leitch
2010-07-11   CMS Made Simple Module Download Manager 1.4.1 - Arbitrary File Upload 2 WEB John Leitch
2010-07-11   CSSTidy 1.3 - 'css_optimiser.php' Cross-Site Scripting 2 WEB John Leitch
2010-07-11   RunCMS 2.1 - 'magpie_debug.php' Cross-Site Scripting 2 WEB John Leitch
2010-07-09   WordPress Plugin Firestats 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities 2 WEB Jelmer de Hen
2010-07-12   dotDefender 4.02 - 'clave' Cross-Site Scripting 1 WEB David K
2010-07-10   eliteCMS 1.01 - Multiple Cross-Site Scripting Vulnerabilities 2 WEB 10n1z3d
2010-07-10   Joomla! Component Rapid-Recipe - HTML Injection 2 WEB Sid3^effects
2010-07-11   Mac's CMS 1.1.4 - 'SearchString' Cross-Site Scripting 2 WEB 10n1z3d
2009-12-21   Web Cocoon simpleCMS - 'show.php' SQL Injection 1 WEB anonymous
2009-12-22   pragmaMX 0.1.11 - 'modules.php' Multiple SQL Injections 2 WEB Hadi Kiamarsi
2010-07-09   Yappa 3.1.2 - 'yappa.php' Multiple Remote Command Execution Vulnerabilities 2 WEB Sn!pEr.S!Te Hacker
2010-07-09   SimpNews 2.47.3 - Multiple Cross-Site Scripting Vulnerabilities 2 WEB MustLive
2010-12-13   Articlems 2.0 - 'c[]' Cross-Site Scripting 1 WEB Packetdeath
2010-07-08   osCSS 1.2.2 - 'page' Cross-Site Scripting 2 WEB High-Tech Bridge SA
2009-12-13   Model Agency Manager - 'search_process.php' Cross-Site Scripting 2 WEB bi0
2010-07-09   Real Estate Manager 1.0.1 - 'index.php' Cross-Site Scripting 2 WEB bi0
2010-07-04   phpFaber CMS 2.0.5 - Multiple Cross-Site Scripting Vulnerabilities 2 WEB prodigy
2014-08-06   Feng Office - Persistent Cross-Site Scripting 2 WEB Juan Sacco
2014-08-06   Pro Chat Rooms 8.2.0 - Multiple Vulnerabilities 2 WEB Mike Manzotti
2014-08-06   HybridAuth 2.2.2 - Remote Code Execution 1 WEB @u0x
2010-07-07   Worxware DCP-Portal 7.0 - Multiple Cross-Site Scripting Vulnerabilities 1 WEB Andrei Rimsa Alvares
2010-07-07   RunCMS 2.1 - 'check.php' Cross-Site Scripting 1 WEB Andrei Rimsa Alvares
2010-07-07   Exponent CMS 0.97 - 'Slideshow.js.php' Cross-Site Scripting 2 WEB Andrei Rimsa Alvares
2014-08-04   FreeDisk 1.01 iOS - Multiple Vulnerabilities 2 WEB Vulnerability-Lab
2014-08-04   Video WiFi Transfer 1.01 - Directory Traversal 2 WEB Vulnerability-Lab
2010-07-05   odCMS 1.07 - 'archive.php' Cross-Site Scripting 2 WEB John Leitch
2010-07-05   Bitweaver 2.7 - 'fImg' Cross-Site Scripting 2 WEB John Leitch
2010-07-05   NewsOffice 2.0.18 - 'news_show.php' Cross-Site Scripting 2 WEB John Leitch
2010-07-06   NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities (2) 2 WEB Ivan Sanchez
2010-07-05   SocialABC NetworX 1.0.3 - Arbitrary File Upload / Cross-Site Scripting 2 WEB John Leitch
2010-07-03   cPanel 11.25 - Cross-Site Request Forgery 2 WEB G0D-F4Th3r
2014-08-03   TP-Link TL-WR740N v4 Router (FW-Ver. 3.16.6 Build 130529 Rel.47286n) - Command Execution 2 WEB Christoph Kuhl
2010-07-05   Orbis CMS 1.0.2 - 'editor-body.php' Cross-Site Scripting 2 WEB John Leitch
2010-07-06   i-Net Solution Matrimonial Script 2.0.3 - 'alert.php' Cross-Site Scripting 2 WEB Andrea Bocchetti
2010-07-05   Joomla! Component Canteen 1.0 - Local File Inclusion 1 WEB Drosophila
2009-12-25   AL-Caricatier 2.5 - 'comment.php' Cross-Site Scripting 1 WEB indoushka
2014-08-02   ArticleFR 11.06.2014 - 'data.php' Privilege Escalation 1 WEB High-Tech Bridge SA
2014-08-02   Photo WiFi Transfer 1.01 - Directory Traversal 1 WEB Vulnerability-Lab
2014-08-02   ISPConfig 3.0.54p1 - (Authenticated) Admin Privilege Escalation 1 WEB mra
2014-08-02   TigerCom iFolder+ 1.2 iOS - Multiple Vulnerabilities 1 WEB Vulnerability-Lab
2014-08-02   Status2k Server Monitoring Software - Multiple Vulnerabilities 1 WEB Shayan S
2014-08-02   Sphider Search Engine - Multiple Vulnerabilities 2 WEB Shayan S
2010-07-02   Xplico 0.5.7 - 'add.ctp' Cross-Site Scripting (2) 1 WEB Marcos Garcia & Maximiliano Soler
2010-07-01   ReCMS - 'users_lang' Directory Traversal 1 WEB Locu
2010-07-01   Wiki Web Help 0.2.7 - Cross-Site Scripting / HTML Injection 1 WEB John Leitch
2010-07-01   Flatnux 2010-06.09 - 'find' Cross-Site Scripting 1 WEB ITSecTeam
2010-07-01   DPScms - 'q' SQL Injection / Cross-Site Scripting 2 WEB Ariko-Security
2009-12-30   LiveZilla 3.1.8.3 - Multiple Cross-Site Scripting Vulnerabilities 1 WEB MaXe
2010-06-29   ArcademSX 2.904 - 'cat' Cross-Site Scripting 1 WEB Th3 RDX
2010-06-30   System CMS Contentia - 'news.php' SQL Injection 1 WEB GlaDiaT0R
2010-06-29   TornadoStore 1.4.3 - SQL Injection / HTML Injection 2 WEB Lucas Apa
2010-06-29   Kryn.cms 6.0 - Cross-Site Request Forgery / HTML Injection 0 WEB TurboBorland
2010-06-29   Miyabi CGI Tools 1.02 - 'index.pl' Remote Command Execution 1 WEB Marshall Whittaker
2010-06-29   Grafik CMS - '/admin.php' SQL Injection / Cross-Site Scripting 1 WEB High-Tech Bridge SA
2010-06-29   Iatek PortalApp 3.3/4.0 - 'login.asp' Multiple Cross-Site Scripting Vulnerabilities 1 WEB High-Tech Bridge SA
2010-06-29   CANDID - '/image/view.php?image_id' Cross-Site Scripting 0 WEB L0rd CrusAd3r
2010-06-29   CANDID - '/image/view.php?image_id' SQL Injection 1 WEB L0rd CrusAd3r
2010-06-28   V-EVA Classified Script 5.1 - 'classified_img.php' SQL Injection 1 WEB Sid3^effects
2010-06-28   Clix'N'Cash Clone 2010 - 'index.php' SQL Injection 1 WEB L0rd CrusAd3r
2010-06-28   eBay Clone Script 2010 - 'showcategory.php' SQL Injection 1 WEB L0rd CrusAd3r
2010-06-28   MySpace Clone 2010 - SQL Injection / Cross-Site Scripting 1 WEB L0rd CrusAd3r
2010-06-29   PHP Bible Search - 'bible.php?chapter' Cross-Site Scripting 1 WEB L0rd CrusAd3r
2010-06-29   PHP Bible Search - 'bible.php?chapter' SQL Injection 1 WEB L0rd CrusAd3r
2010-06-24   OneCMS 2.6.1 - 'short1' Cross-Site Scripting 1 WEB High-Tech Bridge SA
2010-06-24   OneCMS 2.6.1 - 'search' SQL Injection 1 WEB High-Tech Bridge SA
2010-06-24   OneCMS 2.6.1 - 'cat' Cross-Site Scripting 1 WEB High-Tech Bridge SA
2010-06-28   BlaherTech Placeto CMS - 'Username' SQL Injection 1 WEB S.W.T
2010-06-28   Customer Paradigm PageDirector - 'id' SQL Injection 1 WEB Tr0y-x
2014-07-30   D-Link AP 3200 - Multiple Vulnerabilities 1 WEB pws
2014-07-30   SkaDate Lite 2.0 - Remote Code Execution 1 WEB LiquidWorm
2014-07-30   SkaDate Lite 2.0 - Multiple Cross-Site Request Forgery / Persistent Cross-Site Scripting Vulnerabili 1 WEB LiquidWorm
2010-06-24   Limny 2.1 - 'q' Cross-Site Scripting 1 WEB High-Tech Bridge SA
2010-06-25   AbleSpace 1.0 - 'news.php' SQL Injection 1 WEB JaMbA
2014-07-29   WiFi HD 7.3.0 iOS - Multiple Vulnerabilities 1 WEB Vulnerability-Lab
2010-05-05   WordPress Plugin Cimy Counter 0.9.4 - HTTP Response Splitting / Cross-Site Scripting 1 WEB MustLive