Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2009-06-24   XZeroScripts XZero Community Classifieds 4.97.8 - Multiple Cross-Site Scripting Vulnerabilities 3 WEB Moudi
2009-06-24   PG Matchmaking - 'services.php?show' Cross-Site Scripting 2 WEB Moudi
2009-06-24   PG Matchmaking - 'search.php?show' Cross-Site Scripting 3 WEB Moudi
2009-06-24   PG Matchmaking - 'browse_men.php?show' Cross-Site Scripting 2 WEB Moudi
2009-06-24   PG Matchmaking - 'browse_ladies.php?show' Cross-Site Scripting 3 WEB Moudi
2009-06-23   CommuniGate Pro 5.2.14 - Web Mail URI Parsing HTML Injection 4 WEB Andrea Purificato
2009-06-20   Programs Rating - 'postcomments.php?id' Cross-Site Scripting 3 WEB Moudi
2009-06-20   Programs Rating - 'rate.php?id' Cross-Site Scripting 3 WEB Moudi
2014-04-29   NULL NUKE CMS 2.2 - Multiple Vulnerabilities 3 WEB LiquidWorm
2014-04-29   TRENDnet TEW-634GRU 1.00.23 - Multiple Vulnerabilities 3 WEB SirGod
2009-06-16   PHPLive! 3.2.2 - 'request.php' SQL Injection 3 WEB boom3rang
2009-06-14   Scriptsez Easy Image Downloader - 'id' Cross-Site Scripting 4 WEB Moudi
2014-04-28   WordPress Plugin iMember360 3.8.012 < 3.9.001 - Multiple Vulnerabilities 2 WEB Everett Griffiths
2014-04-28   GeoCore MAX DB Ver. 7.3.3 - Blind SQL Injection 4 WEB Esac
2014-04-28   Adem 0.5.1 - Local File Inclusion 3 WEB JIKO
2014-04-28   ApPHP MicroBlog 1.0.1 - Remote Command Execution 4 WEB LOTFREE
2009-06-06   ClanSphere 2009 - 'text' Cross-Site Scripting 3 WEB 599eme Man
2009-06-05   Horde 3.1 - 'Passwd' Module Cross-Site Scripting 3 WEB anonymous
2009-06-01   Joomla! 1.5.x - Cross-Site Scripting / Information Disclosure 3 WEB Juan Galiana Lara
2009-05-30   phpMyAdmin 3.3.0 - 'db' Cross-Site Scripting 3 WEB r0t
2009-05-26   Aardvark Topsites PHP 5.2 - 'index.php' Cross-Site Scripting 2 WEB anonymous
2009-05-23   Basic Analysis and Security Engine (BASE) 1.2.4 - 'readRoleCookie()' Authentication Bypass 3 WEB Tim Medin
2009-05-19   DirectAdmin 1.33.6 - 'CMD_REDIRECT' Cross-Site Scripting 3 WEB r0t
2009-05-15   Webmedia Explorer 5.0.9/5.10 - Multiple Cross-Site Scripting Vulnerabilities 2 WEB intern0t
2014-04-26   ApPHP MicroBlog 1.0.1 - Multiple Vulnerabilities 2 WEB JIKO
2014-04-25   Depot WiFi 1.0.0 iOS - Multiple Vulnerabilities 3 WEB Vulnerability-Lab
2009-06-03   Joomla! < 1.5.11 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities 3 WEB Airton Torres
2009-06-02   PHP-Nuke 8.0 Downloads Module - 'query' Cross-Site Scripting 3 WEB Schap Security
2014-04-25   miSecureMessages 4.0.1 - Session Management / Authentication Bypass 4 WEB Jared Bird
2009-05-28   Achievo 1.3.4 - Multiple Cross-Site Scripting Vulnerabilities 2 WEB MaXe
2009-05-15   Lussumo Vanilla 1.1.5/1.1.7 - 'updatecheck.php' Cross-Site Scripting 3 WEB Gerendi Sandor Attila
2009-05-27   PHP-Nuke 8.0 - '/main/tracking/userLog.php' SQL Injection 5 WEB Gerendi Sandor Attila
2009-05-22   DotNetNuke 4.9.3 - 'ErrorPage.aspx' Cross-Site Scripting 2 WEB ben hawkes
2009-05-22   LxBlog - Multiple Cross-Site Scripting / SQL Injections 4 WEB Securitylab.ir
2014-04-24   Alienvault 4.3.1 - SQL Injection / Cross-Site Scripting 2 WEB Sasha Zivojinovic
2014-04-24   WD Arkeia Virtual Appliance 10.2.9 - Local File Inclusion 3 WEB SEC Consult
2014-04-24   dompdf 0.6.0 - 'dompdf.php?read' Arbitrary File Read 3 WEB Portcullis
2014-04-24   WordPress Plugin Work-The-Flow 1.2.1 - Arbitrary File Upload 2 WEB nopesled
2009-05-20   Profense 2.2.20/2.4.2 - Web Application Firewall Security Bypass 3 WEB EnableSecurity
2009-05-20   Kingsoft Webshield 1.1.0.62 - Cross-Site Scripting / Remote Command Execution 3 WEB inking
2009-05-15   Cacti 0.8.7 - 'data_input.php' Cross-Site Scripting 3 WEB fgeek
2014-04-24   Bonefire 0.7.1 - Reinstall Admin Account 3 WEB Mehmet Ince
2009-05-11   Dacio's Image Gallery 1.6 - Multiple Remote Vulnerabilities 3 WEB ahmadbady
2009-05-08   MagpieRSS 0.72 - Cross-Site Scripting / HTML Injection 3 WEB Justin Klein Keane
2009-05-08   Claroline 1.8.11 - '/claroline/linker/notfound.php' Cross-Site Scripting 3 WEB Gerendi Sandor Attila
2014-04-23   HP Laser Jet - JavaScript Persistent Cross-Site Scripting via PJL Directory Traversal 3 WEB @0x00string
2009-05-06   Verlihub Control Panel 1.7 - Multiple Cross-Site Scripting Vulnerabilities 3 WEB TEAMELITE
2009-05-05   VerliAdmin 0.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB TEAMELITE
2009-05-05   IceWarp Merak Mail Server 9.4.1 - 'Forgot Password' Input Validation 3 WEB RedTeam Pentesting GmbH
2009-05-05   IceWarp Merak Mail Server 9.4.1 - 'item.php' Cross-Site Scripting 3 WEB RedTeam Pentesting GmbH
2014-04-22   kitForm CRM Extension 0.43 - 'sorter.ph?sorter_value' SQL Injection 2 WEB chapp
2014-04-22   No-CMS 0.6.6 rev 1 - Admin Account Hijacking / Remote Code Execution via Static Encryption Key 2 WEB Mehmet Ince
2014-04-22   Sixnet Sixview 2.4.1 - Web Console Directory Traversal 2 WEB daniel svartman
2009-05-05   IceWarp Merak Mail Server 9.4.1 - 'cleanHTML()' Cross-Site Scripting 3 WEB RedTeam Pentesting GmbH
2009-05-05   IceWarp Merak Mail Server 9.4.1 Groupware Component - Multiple SQL Injections 3 WEB RedTeam Pentesting
2009-05-03   MyBB 1.4.5 - Multiple Vulnerabilities 3 WEB Jacques Copeau
2009-04-29   Coppermine Photo Gallery 1.4.21 - 'css' Cross-Site Scripting 3 WEB Gerendi Sandor Attila
2009-04-27   Invision Power Board (IP.Board) 3.0 - Multiple HTML Injection / Information Disclosure Vulnerabiliti 3 WEB brain[pillow]
2009-04-27   MataChat - 'input.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Am!r
2009-04-24   PuterJam's Blog PJBlog3 3.0.6 - 'action.asp' SQL Injection 3 WEB anonymous
2009-04-23   CS Whois Lookup - 'ip' Remote Command Execution 3 WEB SirGod
2009-04-22   Flat Calendar 1.1 - 'add.php' HTML Injection 3 WEB ZoRLu
2009-04-22   New5starRating 1.0 - '/admin/control_panel_sample.php' SQL Injection 3 WEB zer0day
2014-04-20   Teracom Modem T2-B-Gawv1.4U10Y-BI - Cross-Site Request Forgery 3 WEB Rakesh S
2014-04-19   PTCeffect 4.6 - Local File Inclusion / SQL Injection 3 WEB walid naceri
2009-04-21   Sun Java System Delegated Administrator 6.x - HTTP Response Splitting 3 WEB SCS team
2009-04-20   Online Contact Manager 3.0 - 'delete.php?id' Cross-Site Scripting 3 WEB Vrs-hCk
2009-04-20   Online Contact Manager 3.0 - 'edit.php?id' Cross-Site Scripting 3 WEB Vrs-hCk
2009-04-20   Online Contact Manager 3.0 - 'email.php?id' Cross-Site Scripting 3 WEB Vrs-hCk
2009-04-20   Online Contact Manager 3.0 - 'view.php?id' Cross-Site Scripting 3 WEB Vrs-hCk
2009-04-20   Online Contact Manager 3.0 - 'index.php?showGroup' Cross-Site Scripting 3 WEB Vrs-hCk
2009-04-20   Online Photo Pro 2.0 - 'section' Cross-Site Scripting 3 WEB Vrs-hCk
2014-04-18   CMSimple 4.4/4.4.2 - Remote File Inclusion 3 WEB NoGe
2009-04-17   Malleo 1.2.3 - 'admin.php' Local File Inclusion 3 WEB Drosophila
2009-04-16   BlackBerry Enterprise Server 4.0/4.1 - MDS Connection Service Cross-Site Scripting 4 WEB Ken Millar
2009-04-16   RazorCMS 0.3RC2 - Multiple Vulnerabilities 2 WEB Jeremi Gosney
2009-04-16   Geeklog 1.5.2 - 'usersettings.php' SQL Injection 3 WEB Nine:Situations:Group::bookoo
2009-04-16   Phorum 5.2 - 'versioncheck.php?upgrade_available' Cross-Site Scripting 3 WEB voodoo-labs
2009-04-16   Phorum 5.2 - '/admin/users.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB voodoo-labs
2009-04-16   Phorum 5.2 - '/admin/banlist.php?curr' Cross-Site Scripting 3 WEB voodoo-labs
2009-04-16   Phorum 5.2 - '/admin/badwords.php?curr' Cross-Site Scripting 3 WEB voodoo-labs
2009-04-15   Novell Teaming 1.0 - User Enumeration / Multiple Cross-Site Scripting Vulnerabilities 2 WEB Michael Kirchner
2009-04-14   IBM Tivoli Continuous Data Protection for Files 3.1.4.0 - Cross-Site Scripting 3 WEB Abdul-Aziz Hariri
2009-04-13   Banshee 1.4.2 DAAP Extension - '/apps/web/vs_diag.cgi' Cross-Site Scripting 3 WEB Anthony de Almeida Lopes
2009-04-13   People-Trak - Login SQL Injection 2 WEB Mormoroth.net
2009-04-09   Absolute Form Processor XE 1.5 - 'login.asp' SQL Injection 3 WEB ThE g0bL!N
2009-04-09   Cisco Subscriber Edge Services Manager - Cross-Site Scripting / HTML Injection 3 WEB Usman Saeed
2009-04-09   IBM Bladecenter Advanced Management Module 1.42 - Cross-Site Request Forgery 4 WEB Henri Lindberg
2009-04-09   IBM Bladecenter Advanced Management Module 1.42 - '/private/file_Management.ssi?PATH' Cross-Site Scr 3 WEB Henri Lindberg
2009-04-09   IBM Bladecenter Advanced Management Module 1.42 - Login 'Username' Cross-Site Scripting 2 WEB Henri Lindberg
2009-04-02   4CMS - SQL Injection / Local File Inclusion 2 WEB k1ll3r_null
2009-04-02   Asbru Web Content Management 6.5/6.6.9 - SQL Injection / Cross-Site Scripting 1 WEB Patrick Webster
2009-04-02   osCommerce 2.2/3.0 - 'oscid' Session Fixation 2 WEB laurent.desaulniers
2014-04-15   Xerox DocuShare - SQL Injection 2 WEB Brandon Perry
2014-04-15   Netgear WNDR3400 N600 Wireless Dual Band - Multiple Vulnerabilities 3 WEB Santhosh Kumar
2009-04-02   SAP Business Objects Crystal Reports 7-10 - 'viewreport.asp' Cross-Site Scripting 3 WEB Bugs NotHugs
2009-03-31   Turnkey eBook Store 1.1 - 'keywords' Cross-Site Scripting 3 WEB TEAMELITE
2009-03-25   Comparison Engine Power 1.0 - 'product.comparision.php' SQL Injection 3 WEB SirGod
2009-04-01   BlogEngine.NET 1.4 - 'search.aspx' Cross-Site Scripting 3 WEB sk
2009-03-17   phpCMS 2008 - 'search_ajax.php' SQL Injection 3 WEB anonymous
2009-03-24   PHPizabi 0.8 - 'notepad_body' SQL Injection 3 WEB Nine:Situations:Group::bookoo
2009-03-22   ExpressionEngine 1.6 - Avtaar Name HTML Injection 3 WEB Adam Baldwin
2009-04-19   AWStats 6.4 - 'AWStats.pl' Multiple Full Path Disclosures 3 WEB r0t
2014-04-14   eScan Web Management Console - Command Injection (Metasploit) 3 WEB Metasploit
2014-04-14   WordPress Plugin Twitget 3.3.1 - Multiple Vulnerabilities 3 WEB Tom Adams
2014-04-14   WordPress Plugin Quick Page/Post Redirect 5.0.3 - Multiple Vulnerabilities 3 WEB Tom Adams
2014-04-14   PDF Album 1.7 iOS - Local File Inclusion 3 WEB Vulnerability-Lab
2009-05-20   Sun Java System Communications Express 6.3 - 'UWCMain' Cross-Site Scripting 3 WEB SCS team
2009-05-20   Sun Java System Communications Express 6.3 - 'search.xml' Cross-Site Scripting 3 WEB SCS team
2009-03-31   Sun Java System Calendar Server 6 - 'command.shtml' Cross-Site Scripting 3 WEB SCS team
2014-04-14   WordPress Theme LineNity 1.20 - Local File Inclusion 2 WEB felipe andrian
2014-04-14   Sagem Fast 3304-V2 - Authentication Bypass (1) 3 WEB Yassin Aboukir
2009-03-17   Sun Java System Messenger Express 6.3-0.15 - 'error' Cross-Site Scripting 3 WEB syniack
2009-03-12   TikiWiki 2.2/3.0 - 'tiki-listpages.php' Cross-Site Scripting 3 WEB iliz
2009-03-12   TikiWiki 2.2/3.0 - 'tiki-list_file_gallery.php' Cross-Site Scripting 3 WEB iliz
2009-03-12   TikiWiki 2.2/3.0 - 'tiki-galleries.php' Cross-Site Scripting 3 WEB iliz
2009-03-10   Nenriki CMS 0.5 - 'ID' Cookie SQL Injection 3 WEB x0r
2009-03-09   PHORTAIL 1.2.1 - 'poster.php' Multiple HTML Injection Vulnerabilities 3 WEB Jonathan Salwan
2009-03-06   TinXCMS 3.5 - 'rss.php' SQL Injection 3 WEB Dmitriy Evteev
2009-03-06   UMI CMS 2.7 - 'fields_filter' Cross-Site Scripting 3 WEB Dmitriy Evteev
2009-02-28   CMSCart 1.04 - 'maindatafunctions.php' SQL Injection 3 WEB John Martinelli
2009-03-05   Amoot Web Directory - Password Field SQL Injection 3 WEB Pouya_Server
2009-03-03   Novaboard 1.0 - HTML Injection / Cross-Site Scripting 3 WEB Jose Luis Zayas
2009-03-02   Blogsa 1.0 - 'Widgets.aspx' Cross-Site Scripting 3 WEB DJR
2014-04-13   Microweber CMS 0.93 - Cross-Site Request Forgery 3 WEB sajith