Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2009-10-13   Achievo 1.x - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities 2 WEB Ryan Dewhurst
2009-10-06   AfterLogic WebMail Pro 4.7.10 - Multiple Cross-Site Scripting Vulnerabilities 2 WEB Sébastien Duquette
2009-10-06   X-Cart Email Subscription - 'email' Cross-Site Scripting 1 WEB Paulo Santos
2009-10-05   Joomla! Component CB Resume Builder - 'group_id' SQL Injection 2 WEB kaMtiEz
2009-09-29   Interspire Knowledge Manager 5 - 'p' Directory Traversal 2 WEB Infected Web
2009-09-28   e107 0.7.x - CAPTCHA Security Bypass / Cross-Site Scripting 3 WEB MustLive
2009-09-23   IBM Lotus Connections 2.0.1 - 'simpleSearch.do' Cross-Site Scripting 2 WEB IBM
2014-05-08   Cobbler 2.4.x < 2.6.x - Local File Inclusion 1 WEB Dolev Farhi
2014-05-08   Collabtive 1.2 - Persistent Cross-Site Scripting 1 WEB Deepak Rathore
2014-05-08   Collabtive 1.2 - SQL Injection 1 WEB Deepak Rathore
2014-05-08   OpenFiler 2.99.1 - Multiple Persistent Cross-Site Scripting Vulnerabilities 1 WEB Dolev Farhi
2014-05-08   OpenFiler 2.99.1 - Arbitrary Code Execution 2 WEB Dolev Farhi
2009-09-23   Vastal I-Tech Agent Zone - 'view_listing.php' SQL Injection 1 WEB OoN_Boy
2009-09-22   Vastal I-Tech DVD Zone - 'view_mag.php' Cross-Site Scripting 1 WEB OoN_Boy
2009-09-22   Vastal I-Tech DVD Zone - 'view_mag.php' SQL Injection 2 WEB OoN_Boy
2009-09-22   Vastal I-Tech Cosmetics Zone - 'view_products.php' SQL Injection 1 WEB OoN_Boy
2009-09-22   Joomla! Component JoomlaFacebook - SQL Injection 1 WEB kaMtiEz
2009-09-22   Joomla! Component SportFusion 0.2.x - SQL Injection 1 WEB kaMtiEz
2009-09-22   Maxwebportal 1.365 - 'forum.asp' SQL Injection 1 WEB OoN_Boy
2009-09-19   MyBB 1.4.8 - 'search.php' SQL Injection 2 WEB $qL_DoCt0r
2009-09-18   Avaya Intuity Audix LX R1.1 - Multiple Remote Vulnerabilities 2 WEB pagvac
2009-09-16   TuttoPHP Morris Guestbook - 'view.php' Cross-Site Scripting 2 WEB Moudi
2009-09-16   Mega File Hosting Script 1.2 - 'emaillinks.php' Cross-Site Scripting 2 WEB Moudi
2009-09-11   Planet 2.0 - HTML Injection 2 WEB Steve Kemp
2009-09-11   Joomla! Component com_mediaalert - 'id' SQL Injection 2 WEB Moudi
2009-09-10   Joomla! Component com_pressrelease - 'id' SQL Injection 2 WEB Moudi
2009-09-04   DvBBS 2.0 - 'boardrule.php' SQL Injection 2 WEB Securitylab.ir
2009-09-03   Adobe RoboHelp Server 8 - Authentication Bypass 2 WEB Intevydis
2009-08-31   MKPortal 1.x - Multiple BBCode HTML Injection Vulnerabilities 3 WEB Inj3ct0r
2009-08-31   MKPortal 1.x (Multiple Modules) - Cross-Site Scripting 2 WEB Inj3ct0r
2009-09-09   phpAuction 3.2 - 'lan' Remote File Inclusion 2 WEB Beenu Arora
2009-07-27   68 Classifieds 4.1 - 'viewmember.php' Cross-Site Scripting 2 WEB Moudi
2009-07-27   68 Classifieds 4.1 - 'viewlisting.php' Cross-Site Scripting 2 WEB Moudi
2009-07-27   68 Classifieds 4.1 - 'toplistings.php' Cross-Site Scripting 2 WEB Moudi
2009-07-27   68 Classifieds 4.1 - 'searchresults.php' Cross-Site Scripting 2 WEB Moudi
2009-07-27   68 Classifieds 4.1 - 'login.php' Cross-Site Scripting 2 WEB Moudi
2009-07-27   68 Classifieds 4.1 - 'category.php' Cross-Site Scripting 2 WEB Moudi
2014-05-05   TeamHelpdesk Customer Web Service (CWS) 8.3.5 & Technician Web Access (TWA) 8.3.5 - Remote User Cred 2 WEB bhamb
2009-08-28   FlexCMS 2.5 - 'CookieUsername' Cookie SQL Injection 2 WEB Inj3ct0r
2009-08-25   OpenAutoClassifieds 1.5.9 - SQL Injection 1 WEB Andrew Horton
2009-08-26   PHP-Fusion 6.1.18 - Multiple Information Disclosure Vulnerabilities 2 WEB Inj3ct0r
2009-08-26   VideoGirls - 'view.php?p' Cross-Site Scripting 2 WEB Moudi
2009-08-26   VideoGirls - 'profile.php?profile_name' Cross-Site Scripting 2 WEB Moudi
2009-08-26   VideoGirls - 'forum.php?t' Cross-Site Scripting 2 WEB Moudi
2009-06-08   Computer Associates SiteMinder - Unicode Cross-Site Scripting Protection Security Bypass 2 WEB Arshan Dabirsiaghi
2009-08-19   Adobe Flex SDK 3.x - 'index.template.html' Cross-Site Scripting 2 WEB Adam Bixby
2009-06-08   Computer Associates SiteMinder - '%00' Cross-Site Scripting Protection Security Bypass 2 WEB Arshan Dabirsiaghi
2009-08-17   DUWare DUgallery 3.0 - '/admin/edit.asp' Authentication Bypass 2 WEB spymeta
2009-08-17   Adobe ColdFusion Server 8.0.1 - '/administrator/enter.cfm' Query String Cross-Site Scripting 2 WEB Alexander Polyakov
2009-08-17   Adobe ColdFusion Server 8.0.1 - '/wizards/common/_logintowizard.cfm' Query String Cross-Site Scripti 2 WEB Alexander Polyakov
2009-08-17   Adobe ColdFusion Server 8.0.1 - 'administrator/logviewer/searchlog.cfm?startRow' Cross-Site Scriptin 2 WEB Alexander Polyakov
2009-08-17   Adobe ColdFusion Server 8.0.1 - '/wizards/common/_authenticatewizarduser.cfm' Query String Cross-Sit 2 WEB Alexander Polyakov
2009-08-15   Discuz! 6.0 - '2fly_gift.php' SQL Injection 2 WEB Securitylab.ir
2009-08-10   Papoo 3.x - Upload Images Arbitrary File Upload 2 WEB RedTeam Pentesting GmbH
2014-05-03   Seagate BlackArmor NAS - Multiple Vulnerabilities 2 WEB Shayan S
2009-08-10   ViArt CMS - 'forum_topic_new.php?forum_id' Cross-Site Scripting 2 WEB Moudi
2009-08-10   ViArt CMS - 'forum.php?forum_id' Cross-Site Scripting 2 WEB Moudi
2014-05-03   Crime24 Stealer Panel 1.0 - Multiple Vulnerabilities 1 WEB Daisuke Dan
2009-08-10   ViArt CMS - 'forums.php?category_id' Cross-Site Scripting 1 WEB Moudi
2009-08-10   SQLiteManager 1.2 - 'main.php' Cross-Site Scripting 1 WEB Hadi Kiamarsi
2009-08-10   SupportPRO SupportDesk 3.0 - 'shownews.php' Cross-Site Scripting 3 WEB Moudi
2009-08-07   PhotoPost PHP 3.3.1 - 'cat' Cross-Site Scripting / SQL Injection 1 WEB 599eme Man
2009-08-06   Alkacon OpenCMS 7.x - Multiple Input Validation Vulnerabilities 2 WEB Katie French
2009-08-05   AJ Auction Pro 3.0 - 'txtkeyword' Cross-Site Scripting 1 WEB 599eme Man
2009-08-04   CS-Cart 2.0.5 - 'reward_points.post.php' SQL Injection 2 WEB Ryan Dewhurst
2009-06-29   Censura < 2.1.1 - Multiple Cross-Site Scripting Vulnerabilities 2 WEB mark99
2014-05-01   Netgear DGN2200 1.0.0.29_1.7.29_HotS - Persistent Cross-Site Scripting 2 WEB Dolev Farhi
2014-05-01   Fritz!Box - Remote Command Execution 2 WEB 0x4148
2009-07-30   Softbiz Dating Script 1.0 - 'cat_products.php' SQL Injection 2 WEB MizoZ
2009-06-30   XOOPS 2.3.3 - 'op' Multiple Cross-Site Scripting Vulnerabilities 2 WEB Sense of Security
2009-06-30   NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities (1) 2 WEB Ivan Sanchez
2014-04-30   Beetel 450TC2 Router - Cross-Site Request Forgery (Admin Password) 2 WEB shyamkumar somana
2009-06-29   Miniweb 2.0 Site Builder Module - Multiple Cross-Site Scripting Vulnerabilities 2 WEB Moudi
2009-06-28   Matterdaddy Market 1.x - 'index.php' Cross-Site Scripting 2 WEB Moudi
2009-06-28   Joomla! Component Permis 1.0 (com_groups) - 'id' SQL Injection 2 WEB Prince_Pwn3r
2009-06-27   Joomla! Component com_user - 'view' Open Redirection 2 WEB 599eme Man
2009-06-24   Pilot Group eTraining - 'lessons_login.php' Cross-Site Scripting 1 WEB Moudi
2009-06-24   Pilot Group eTraining - 'news_read.php' Cross-Site Scripting 1 WEB Moudi
2009-06-24   Pilot Group eTraining - 'courses_login.php' Cross-Site Scripting 1 WEB Moudi
2009-06-27   AlmondSoft Classifieds Pro - 'gmap.php?addr' Cross-Site Scripting 2 WEB Moudi
2009-06-27   AlmondSoft Multiple Classifieds Products - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 2 WEB Moudi
2009-06-27   AlmondSoft Multiple Classifieds Products - 'index.php?replid' SQL Injection 2 WEB Moudi
2009-06-27   Joomla! Component Almond Classifieds 7.5 - Cross-Site Scripting / SQL Injection 0 WEB Moudi
2009-06-27   PG Roommate Finder Solution - 'viewprofile.php?part' Cross-Site Scripting 2 WEB Moudi
2009-06-27   PG Roommate Finder Solution - 'quick_search.php?part' Cross-Site Scripting 2 WEB Moudi
2009-06-27   AIOCP 1.4 - 'cp_html2txt.php' Remote File Inclusion 2 WEB Hadi Kiamarsi
2009-06-24   XZeroScripts XZero Community Classifieds 4.97.8 - Multiple Cross-Site Scripting Vulnerabilities 2 WEB Moudi
2009-06-24   PG Matchmaking - 'services.php?show' Cross-Site Scripting 2 WEB Moudi
2009-06-24   PG Matchmaking - 'search.php?show' Cross-Site Scripting 2 WEB Moudi
2009-06-24   PG Matchmaking - 'browse_men.php?show' Cross-Site Scripting 2 WEB Moudi
2009-06-24   PG Matchmaking - 'browse_ladies.php?show' Cross-Site Scripting 3 WEB Moudi
2009-06-23   CommuniGate Pro 5.2.14 - Web Mail URI Parsing HTML Injection 2 WEB Andrea Purificato
2009-06-20   Programs Rating - 'postcomments.php?id' Cross-Site Scripting 2 WEB Moudi
2009-06-20   Programs Rating - 'rate.php?id' Cross-Site Scripting 2 WEB Moudi
2014-04-29   NULL NUKE CMS 2.2 - Multiple Vulnerabilities 2 WEB LiquidWorm
2014-04-29   TRENDnet TEW-634GRU 1.00.23 - Multiple Vulnerabilities 2 WEB SirGod
2009-06-16   PHPLive! 3.2.2 - 'request.php' SQL Injection 2 WEB boom3rang
2009-06-14   Scriptsez Easy Image Downloader - 'id' Cross-Site Scripting 2 WEB Moudi
2014-04-28   WordPress Plugin iMember360 3.8.012 < 3.9.001 - Multiple Vulnerabilities 1 WEB Everett Griffiths
2014-04-28   GeoCore MAX DB Ver. 7.3.3 - Blind SQL Injection 2 WEB Esac
2014-04-28   Adem 0.5.1 - Local File Inclusion 2 WEB JIKO
2014-04-28   ApPHP MicroBlog 1.0.1 - Remote Command Execution 2 WEB LOTFREE
2009-06-06   ClanSphere 2009 - 'text' Cross-Site Scripting 2 WEB 599eme Man
2009-06-05   Horde 3.1 - 'Passwd' Module Cross-Site Scripting 2 WEB anonymous
2009-06-01   Joomla! 1.5.x - Cross-Site Scripting / Information Disclosure 2 WEB Juan Galiana Lara
2009-05-30   phpMyAdmin 3.3.0 - 'db' Cross-Site Scripting 2 WEB r0t
2009-05-26   Aardvark Topsites PHP 5.2 - 'index.php' Cross-Site Scripting 1 WEB anonymous
2009-05-23   Basic Analysis and Security Engine (BASE) 1.2.4 - 'readRoleCookie()' Authentication Bypass 2 WEB Tim Medin
2009-05-19   DirectAdmin 1.33.6 - 'CMD_REDIRECT' Cross-Site Scripting 2 WEB r0t
2009-05-15   Webmedia Explorer 5.0.9/5.10 - Multiple Cross-Site Scripting Vulnerabilities 2 WEB intern0t
2014-04-26   ApPHP MicroBlog 1.0.1 - Multiple Vulnerabilities 1 WEB JIKO
2014-04-25   Depot WiFi 1.0.0 iOS - Multiple Vulnerabilities 1 WEB Vulnerability-Lab
2009-06-03   Joomla! < 1.5.11 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities 2 WEB Airton Torres
2009-06-02   PHP-Nuke 8.0 Downloads Module - 'query' Cross-Site Scripting 2 WEB Schap Security
2014-04-25   miSecureMessages 4.0.1 - Session Management / Authentication Bypass 3 WEB Jared Bird
2009-05-28   Achievo 1.3.4 - Multiple Cross-Site Scripting Vulnerabilities 1 WEB MaXe
2009-05-15   Lussumo Vanilla 1.1.5/1.1.7 - 'updatecheck.php' Cross-Site Scripting 2 WEB Gerendi Sandor Attila
2009-05-27   PHP-Nuke 8.0 - '/main/tracking/userLog.php' SQL Injection 2 WEB Gerendi Sandor Attila
2009-05-22   DotNetNuke 4.9.3 - 'ErrorPage.aspx' Cross-Site Scripting 1 WEB ben hawkes
2009-05-22   LxBlog - Multiple Cross-Site Scripting / SQL Injections 2 WEB Securitylab.ir
2014-04-24   Alienvault 4.3.1 - SQL Injection / Cross-Site Scripting 1 WEB Sasha Zivojinovic
2014-04-24   WD Arkeia Virtual Appliance 10.2.9 - Local File Inclusion 2 WEB SEC Consult
2014-04-24   dompdf 0.6.0 - 'dompdf.php?read' Arbitrary File Read 2 WEB Portcullis
2014-04-24   WordPress Plugin Work-The-Flow 1.2.1 - Arbitrary File Upload 0 WEB nopesled
2009-05-20   Profense 2.2.20/2.4.2 - Web Application Firewall Security Bypass 1 WEB EnableSecurity