|
2010-02-16
|
|
Extreme Mobster - 'login' Cross-Site Scripting
|
38 |
WEB
|
indoushka
|
|
2010-02-16
|
|
BGSvetionik BGS CMS - 'search' Cross-Site Scripting
|
33 |
WEB
|
hacker@sr.gov.yu
|
|
2010-02-16
|
|
Portrait Software Portrait Campaign Manager 4.6.1.22 - Multiple Cross-Site Scripting Vulnerabilities
|
35 |
WEB
|
Roel Schouten
|
|
2009-12-31
|
|
Joomla! Component MS Comment 0.8.0b - Security Bypass / Cross-Site Scripting
|
36 |
WEB
|
Jeff Channell
|
|
2010-02-12
|
|
Basic-CMS - 'nav_id' Cross-Site Scripting
|
36 |
WEB
|
Red-D3v1L
|
|
2010-02-12
|
|
CMS Made Simple 1.6.6 - Local File Inclusion / Cross-Site Scripting
|
39 |
WEB
|
Beenu Arora
|
|
2009-09-17
|
|
Joomla! Component F!BB 1.5.96 RC - SQL Injection / HTML Injection
|
37 |
WEB
|
Jeff Channell
|
|
2009-09-17
|
|
Joomla! Component EasyBook 2.0.0rc4 - Multiple HTML Injection Vulnerabilities
|
35 |
WEB
|
Jeff Channell
|
|
2009-11-15
|
|
Joomla! Component Webee Comments 1.1/1.2 - Multiple BBCode Tags Cross-Site Scripting Vulnerabilities
|
36 |
WEB
|
Jeff Channell
|
|
2009-11-15
|
|
Joomla! Component Webee Comments 1.1/1.2 - 'index2.php' articleId SQL Injection
|
39 |
WEB
|
Jeff Channell
|
|
2010-02-03
|
|
Interspire Knowledge Manager 5 - 'callback.snipshot.php' Arbitrary File Creation
|
38 |
WEB
|
Cory Marsh
|
|
2010-02-11
|
|
CommodityRentals CD Rental Software - 'index.php' SQL Injection
|
38 |
WEB
|
Don Tukulesto
|
|
2014-06-03
|
|
IPSwitch IMail Server WEB client 12.4 - Persistent Cross-Site Scripting
|
39 |
WEB
|
Peru
|
|
2014-06-03
|
|
Bluetooth Photo-File Share 2.1 iOS - Multiple Vulnerabilities
|
38 |
WEB
|
Vulnerability-Lab
|
|
2014-06-03
|
|
AllReader 1.0 iOS - Multiple Vulnerabilities
|
35 |
WEB
|
Vulnerability-Lab
|
|
2014-06-03
|
|
TigerCom My Assistant 1.1 iOS - Local File Inclusion
|
38 |
WEB
|
Vulnerability-Lab
|
|
2014-06-03
|
|
Privacy Pro 1.2 HZ iOS - Local File Inclusion
|
36 |
WEB
|
Vulnerability-Lab
|
|
2014-06-03
|
|
Files Desk Pro 1.4 iOS - Local File Inclusion
|
37 |
WEB
|
Vulnerability-Lab
|
|
2014-06-03
|
|
NG WifiTransfer Pro 1.1 - Local File Inclusion
|
36 |
WEB
|
Vulnerability-Lab
|
|
2014-06-03
|
|
PHPBTTracker+ 2.2 - SQL Injection
|
36 |
WEB
|
BackBox Linux Team
|
|
2010-02-11
|
|
vBulletin 3.5.4 - Multiple Cross-Site Scripting Vulnerabilities
|
35 |
WEB
|
ROOT_EGY
|
|
2010-02-09
|
|
vBulletin Adsense Component - 'viewpage.php' SQL Injection
|
40 |
WEB
|
JIKO
|
|
2010-02-08
|
|
VideoDB 3.0.3 - 'login.php' Cross-Site Scripting
|
36 |
WEB
|
vr
|
|
2010-02-08
|
|
Zen Time Tracking 2.2 - Multiple SQL Injections
|
36 |
WEB
|
cr4wl3r
|
|
2010-02-08
|
|
Aflam Online 1.0 - 'index.php' SQL Injection
|
36 |
WEB
|
alnjm33
|
|
2014-06-02
|
|
WordPress Plugin Participants Database 1.5.4.8 - SQL Injection
|
41 |
WEB
|
Yarubo Research Team
|
|
2010-02-05
|
|
ASCET Interactive Huski Retail - Multiple SQL Injections
|
37 |
WEB
|
Wireghoul
|
|
2010-02-05
|
|
ASCET Interactive Huski CMS - 'i' Local File Inclusion
|
37 |
WEB
|
Wireghoul
|
|
2010-02-05
|
|
LANDesk Management Gateway 4.x - Multiple Vulnerabilities
|
37 |
WEB
|
Aureliano Calvo
|
|
2010-02-05
|
|
evalSMSI 2.1.3 - Multiple Input Validation Vulnerabilities
|
38 |
WEB
|
ekse
|
|
2010-02-04
|
|
Data 1 Systems UltraBB 1.17 - 'view_post.php' Cross-Site Scripting
|
37 |
WEB
|
s4r4d0
|
|
2010-02-04
|
|
KnowGate hipergate 4.0.12 - Multiple Cross-Site Scripting Vulnerabilities
|
40 |
WEB
|
Nahuel Grisolia
|
|
2010-02-04
|
|
Interspire Knowledge Manager < 5.1.3 - Multiple Remote Vulnerabilities
|
39 |
WEB
|
Cory Marsh
|
|
2010-02-01
|
|
Joomla! Component AutartiTarot - Directory Traversal
|
38 |
WEB
|
B-HUNT3|2
|
|
2010-02-01
|
|
Joomla! Component com_gambling - 'gamblingEvent' SQL Injection
|
43 |
WEB
|
md.r00t
|
|
2010-01-31
|
|
Joomla! Component com_rsgallery2 2.0 - 'catid' SQL Injection
|
39 |
WEB
|
snakespc
|
|
2009-07-16
|
|
XAMPP 1.6.x - 'showcode.php' Local File Inclusion
|
39 |
WEB
|
MustLive
|
|
2010-01-28
|
|
CommonSpot Server - '/utilities/longproc.cfm' Cross-Site Scripting
|
39 |
WEB
|
Richard Brain
|
|
2010-01-27
|
|
Discuz! 6.0 - 'tid' Cross-Site Scripting
|
39 |
WEB
|
s4r4d0
|
|
2010-01-26
|
|
Joomla! Component 3D Cloud - 'tagcloud.swf' Cross-Site Scripting
|
37 |
WEB
|
MustLive
|
|
2009-10-24
|
|
Jetty 6.1.x - JSP Snoop Page Multiple Cross-Site Scripting Vulnerabilities
|
41 |
WEB
|
aScii
|
|
2010-01-22
|
|
OpenX 2.6.1 - SQL Injection
|
39 |
WEB
|
AndySoon
|
|
2010-01-21
|
|
cPanel and WHM 11.25 - 'failurl' HTTP Response Splitting
|
36 |
WEB
|
Trancer
|
|
2014-05-28
|
|
Sharetronix 3.3 - Multiple Vulnerabilities
|
38 |
WEB
|
High-Tech Bridge SA
|
|
2014-05-28
|
|
AuraCMS 3.0 - Multiple Vulnerabilities
|
37 |
WEB
|
Mustafa ALTINKAYNAK
|
|
2010-01-20
|
|
PHPMySpace Gold 8.0 - 'gid' SQL Injection
|
38 |
WEB
|
Ctacok
|
|
2010-01-19
|
|
VisualShapers EZContents 2.0.3 - Authentication Bypass / Multiple SQL Injections
|
38 |
WEB
|
AmnPardaz Security Research Team
|
|
2010-01-18
|
|
vBulletin 4.0.1 - 'misc.php' SQL Injection
|
34 |
WEB
|
indoushka
|
|
2010-01-18
|
|
Easysitenetwork Jokes Complete Website - 'searchingred' Cross-Site Scripting
|
35 |
WEB
|
indoushka
|
|
2010-01-18
|
|
Easysitenetwork Jokes Complete Website - 'id' Cross-Site Scripting
|
38 |
WEB
|
indoushka
|
|
2010-01-19
|
|
DataLife Engine 8.3 - '/engine/ajax/addcomments.php?_REQUEST[skin]' Remote File Inclusion
|
34 |
WEB
|
indoushka
|
|
2010-01-19
|
|
DataLife Engine 8.3 - '/engine/ajax/pm.php?config[lang]' Remote File Inclusion
|
34 |
WEB
|
indoushka
|
|
2010-01-19
|
|
DataLife Engine 8.3 - '/engine/inc/help.php?config[langs]' Remote File Inclusion
|
38 |
WEB
|
indoushka
|
|
2010-01-19
|
|
DataLife Engine 8.3 - '/engine/inc/include/init.php?selected_language' Remote File Inclusion
|
37 |
WEB
|
indoushka
|
|
2010-01-18
|
|
TestLink 1.8.5 - 'order_by_login_dir' Cross-Site Scripting
|
37 |
WEB
|
Prashant Khandelwal
|
|
2010-01-15
|
|
LetoDms 1.4.x - 'lang' Local File Inclusion
|
33 |
WEB
|
D. Fabian
|
|
2010-01-14
|
|
Joomla! Component com_marketplace 1.2 - 'catid' Cross-Site Scripting
|
36 |
WEB
|
ViRuSMaN
|
|
2010-01-14
|
|
Xforum 1.4 - 'nbpageliste' Cross-Site Scripting
|
35 |
WEB
|
ViRuSMaN
|
|
2010-01-14
|
|
Technology for Solutions 1.0 - 'id' Cross-Site Scripting
|
38 |
WEB
|
PaL-D3v1L
|
|
2014-05-26
|
|
D-Link Routers - Multiple Vulnerabilities
|
40 |
WEB
|
Kyle Lovett
|
|
2014-05-26
|
|
ZYXEL P-660HW-T1 3 Wireless Router - Cross-Site Request Forgery
|
34 |
WEB
|
Mustafa ALTINKAYNAK
|
|
2014-05-26
|
|
Videos Tube 1.0 - Multiple SQL Injections
|
38 |
WEB
|
Mustafa ALTINKAYNAK
|
|
2010-01-14
|
|
Zenoss 2.3.3 - Multiple SQL Injections
|
40 |
WEB
|
nGenuity Information Services
|
|
2010-01-13
|
|
Tribisur - 'cat' Cross-Site Scripting
|
32 |
WEB
|
ViRuSMaN
|
|
2010-01-13
|
|
Joomla! Component com_tienda - 'categoria' Cross-Site Scripting
|
45 |
WEB
|
FL0RiX
|
|
2010-01-12
|
|
Simple PHP Blog 0.5.x - 'search.php' Cross-Site Scripting
|
35 |
WEB
|
Sora
|
|
2010-01-12
|
|
Docmint 1.0/2.1 - 'id' Cross-Site Scripting
|
38 |
WEB
|
Red-D3v1L
|
|
2014-05-24
|
|
Web Terra 1.1 - 'books.cgi' Remote Command Execution
|
39 |
WEB
|
felipe andrian
|
|
2014-05-24
|
|
Mayan-EDms Web-Based Document Management OS System - Multiple Persistent Cross-Site Scripting Vulner
|
37 |
WEB
|
Dolev Farhi
|
|
2010-01-11
|
|
Active Calendar 1.2 - '$_SERVER['PHP_SELF']' Multiple Cross-Site Scripting Vulnerabilities
|
36 |
WEB
|
Martin Barbella
|
|
2010-01-12
|
|
PHPepperShop 2.5 - 'USER_ARTIKEL_HANDLING_AUFRUF.php' Cross-Site Scripting
|
36 |
WEB
|
Crux
|
|
2010-01-11
|
|
@lex Guestbook 5.0 - Multiple Cross-Site Scripting Vulnerabilities
|
42 |
WEB
|
D3V!L FUCKER
|
|
2010-01-11
|
|
Jamit Job Board - 'post_id' Cross-Site Scripting
|
39 |
WEB
|
Crux
|
|
2010-01-11
|
|
DELTAScripts PHP Links 1.0 - 'email' Cross-Site Scripting
|
39 |
WEB
|
Crux
|
|
2010-01-10
|
|
DigitalHive - 'mt' Cross-Site Scripting
|
40 |
WEB
|
ViRuSMaN
|
|
2010-01-08
|
|
Joomla! Component Jobads - 'type' SQL Injection
|
44 |
WEB
|
N0KT4
|
|
2010-01-07
|
|
Calendarix 0.7 - 'calpath' Remote File Inclusion
|
44 |
WEB
|
Saywhat
|
|
2010-01-07
|
|
dotProject 2.1.3 - Multiple SQL Injections / HTML Injection Vulnerabilities
|
37 |
WEB
|
Justin C. Klein Keane
|
|
2010-01-07
|
|
Joomla! Component DM Orders - 'id' SQL Injection
|
39 |
WEB
|
NoGe
|
|
2010-01-06
|
|
Roundcube Webmail 0.2 - Cross-Site Scripting
|
42 |
WEB
|
j4ck & Globus
|
|
2010-01-05
|
|
LineWeb 1.0.5 - Multiple Remote Vulnerabilities
|
40 |
WEB
|
Ignacio Garrido
|
|
2010-01-05
|
|
LXR 0.9.x - Cross Referencer Multiple Cross-Site Scripting Vulnerabilities
|
34 |
WEB
|
Dan Rosenberg
|
|
2010-01-04
|
|
MercuryBoard 1.1.5 - 'index.php' Cross-Site Scripting
|
33 |
WEB
|
indoushka
|
|
2010-01-04
|
|
WMNews - '/admin/wmnews.php' Cross-Site Scripting
|
33 |
WEB
|
indoushka
|
|
2010-01-04
|
|
pL-PHP 0.9 - 'index.php' Cross-Site Scripting
|
36 |
WEB
|
indoushka
|
|
2010-01-03
|
|
SLAED CMS 2.0 - 'stop' Cross-Site Scripting
|
35 |
WEB
|
indoushka
|
|
2010-01-03
|
|
Discuz! 2.0 - Multiple Cross-Site Scripting Vulnerabilities
|
35 |
WEB
|
indoushka
|
|
2010-01-01
|
|
VisionGate 1.6 - 'login.php' Cross-Site Scripting
|
36 |
WEB
|
indoushka
|
|
2010-01-01
|
|
VirtuaSystems VirtuaNews Pro 1.0.4 - 'admin.php' Cross-Site Scripting
|
38 |
WEB
|
indoushka
|
|
2010-01-01
|
|
PHPCart 3.1.2 - 'search.php' Cross-Site Scripting
|
37 |
WEB
|
indoushka
|
|
2010-01-01
|
|
Reamday Enterprises Magic News Plus 1.0.2 - Cross-Site Scripting
|
37 |
WEB
|
indoushka
|
|
2009-12-31
|
|
DieselPay 1.6 - Cross-Site Scripting / Directory Traversal
|
42 |
WEB
|
indoushka
|
|
2009-12-31
|
|
Discuz! 1.0 - 'referer' Cross-Site Scripting
|
42 |
WEB
|
indoushka
|
|
2009-12-31
|
|
PhotoKorn 1.542 - Cross-Site Scripting / Remote File Inclusion
|
37 |
WEB
|
indoushka
|
|
2009-12-31
|
|
StarDevelop Live Help 2.6 - 'SERVER' Multiple Cross-Site Scripting Vulnerabilities
|
41 |
WEB
|
indoushka
|
|
2014-05-21
|
|
Binatone DT 850W Wireless Router - Multiple Cross-Site Request Forgery Vulnerabilities
|
37 |
WEB
|
Samandeep Singh
|
|
2009-12-31
|
|
Imagevue r16 - 'amount' Cross-Site Scripting
|
38 |
WEB
|
indoushka
|
|
2009-12-31
|
|
BosClassifieds 1.20 - 'recent.php' Cross-Site Scripting
|
42 |
WEB
|
indoushka
|
|
2009-12-31
|
|
SendStudio 4.0.1 - Cross-Site Scripting / Security Bypass
|
42 |
WEB
|
indoushka
|
|
2009-12-31
|
|
PHPMyCart 1.3 - Cross-Site Scripting / Authentication Bypass
|
35 |
WEB
|
indoushka
|
|
2009-12-29
|
|
AzDGDatingMedium 1.9.3 - 'l' Multiple Cross-Site Scripting Vulnerabilities
|
38 |
WEB
|
indoushka
|
|
2009-12-29
|
|
FreeWebShop 2.2.9 R2 - Multiple Remote Vulnerabilities
|
40 |
WEB
|
Akita Software Security
|
|
2009-12-25
|
|
Barbo91 - 'upload.php' Cross-Site Scripting
|
37 |
WEB
|
indoushka
|
|
2009-12-26
|
|
PHPInstantGallery 1.1 - 'admin.php' Cross-Site Scripting
|
37 |
WEB
|
indoushka
|
|
2009-12-28
|
|
FreePBX 2.5.2 - Zap Channel Addition Description Parameter Cross-Site Scripting
|
38 |
WEB
|
Global-Evolution
|
|
2009-12-28
|
|
FreePBX 2.5.2 - '/admin/config.php?tech' Cross-Site Scripting
|
37 |
WEB
|
Global-Evolution
|
|
2009-12-28
|
|
Joomla! Component Joomulus 2.0 - 'tagcloud.swf' Cross-Site Scripting
|
38 |
WEB
|
MustLive
|
|
2009-12-29
|
|
Joomla! Component iF Portfolio Nexus - 'Controller' Remote File Inclusion
|
38 |
WEB
|
F10riX
|
|
2009-12-24
|
|
MyBB 1.4.10 - 'myps.php' Cross-Site Scripting
|
39 |
WEB
|
Steven Abbagnaro
|
|
2009-12-23
|
|
webMathematica 3 - 'MSP' Script Cross-Site Scripting
|
35 |
WEB
|
Floyd Fuh
|
|
2009-12-21
|
|
PHP-Calendar 1.1 - 'update10.php?configfile' Traversal Local File Inclusion
|
41 |
WEB
|
Juan Galiana Lara
|
|
2009-12-21
|
|
PHP-Calendar 1.1 - 'update08.php?configfile' Traversal Local File Inclusion
|
36 |
WEB
|
Juan Galiana Lara
|
|
2009-12-22
|
|
ClarkConnect Linux 5.0 - 'proxy.php' Cross-Site Scripting
|
41 |
WEB
|
Edgard Chammas
|
|
2014-05-19
|
|
HP Release Control - (Authenticated) XML External Entity (Metasploit)
|
39 |
WEB
|
Brandon Perry
|
|
2014-05-19
|
|
SafeNet Sentinel Protection Server 7.0 < 7.4 / Sentinel Keys Server 1.0.3 < 1.0.4 - Directory Traver
|
40 |
WEB
|
Matt Schmidt
|
|
2014-05-19
|
|
SPIP CMS < 2.0.23/ 2.1.22/3.0.9 - Privilege Escalation
|
39 |
WEB
|
Gregory Draperi
|
|
2009-12-21
|
|
Kasseler CMS 1.3.4 Lite - Multiple Cross-Site Scripting Vulnerabilities
|
37 |
WEB
|
Gamoscu
|
|
2009-12-20
|
|
JBC Explorer 7.20 - 'arbre.php' Cross-Site Scripting
|
39 |
WEB
|
Metropolis
|
|
2009-12-18
|
|
Ampache 3.4.3 - 'login.php' Multiple SQL Injections
|
35 |
WEB
|
R3d-D3V!L
|
|
2009-12-18
|
|
F3Site 2009 - '/mod/new.php?GLOBALS[nlang]' Traversal Local File Inclusion
|
38 |
WEB
|
cr4wl3r
|
|
2009-12-18
|
|
F3Site 2009 - '/mod/poll.php?GLOBALS[nlang]' Traversal Local File Inclusion
|
42 |
WEB
|
cr4wl3r
|
|
2009-12-17
|
|
Joomla! Component com_joomportfolio - 'secid' SQL Injection
|
37 |
WEB
|
Fl0riX & Snakespc
|
|
2009-12-17
|
|
cPanel 11.x - 'fileop' Multiple Cross-Site Scripting Vulnerabilities
|
41 |
WEB
|
RENO
|
|
2009-12-17
|
|
QuiXplorer 2.x - 'lang' Local File Inclusion
|
39 |
WEB
|
Juan Galiana Lara
|
|
2009-12-17
|
|
Pluxml-Blog 4.2 - '/core/admin/auth.php' Cross-Site Scripting
|
36 |
WEB
|
Metropolis
|
