Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2014-04-13   CubeCart 5.2.8 - Session Fixation 3 WEB absane
2009-03-02   Yektaweb Academic Web Tools CMS 1.4.2.8/1.5.7 - Multiple Cross-Site Scripting Vulnerabilities 3 WEB Isfahan
2009-03-02   Afian - 'includer.php' Directory Traversal 3 WEB vnbrain.net
2009-02-27   Irokez Blog 0.7.3.2 - Multiple Input Validation Vulnerabilities 3 WEB Corwin
2009-02-26   APC PowerChute Network Shutdown - HTTP Response Splitting / Cross-Site Scripting 3 WEB Digital Security Research Group
2009-02-26   Parsi PHP CMS 2.0 - 'index.php' SQL Injection 3 WEB Cru3l.b0y
2009-02-25   JOnAS 4.10.3 - 'select' Error Page Cross-Site Scripting 3 WEB Digital Security Research Group
2009-02-25   Orooj CMS - 'news.php' SQL Injection 3 WEB Cru3l.b0y
2014-04-11   Sendy 1.1.9.1 - SQL Injection 3 WEB delme
2009-02-24   Magento 1.2 - 'downloader/index.php' Cross-Site Scripting 2 WEB Loukas Kalenderidis
2009-02-24   Magento 1.2 - '/app/code/core/Mage/Adminhtml/controllers/IndexController.php?email' Cross-Site Scrip 3 WEB Loukas Kalenderidis
2009-02-24   Magento 1.2 - '/app/code/core/Mage/Admin/Model/Session.php?login['Username']' Cross-Site Scripting 3 WEB Loukas Kalenderidis
2009-02-23   Joomla! / Mambo Component gigCalendar 1.0 - 'banddetails.php' SQL Injection 2 WEB Salvatore Fresta
2009-02-22   Blue Utopia - 'index.php' Local File Inclusion 3 WEB PLATEN
2009-02-20   lastRSS autoposting bot MOD 0.1.3 - 'phpbb_root_path' Remote File Inclusion 3 WEB Kacper
2008-10-01   A4Desk Event Calendar - 'eventid' SQL Injection 2 WEB r45c4l
2009-02-16   Clipbucket 1.7 - 'dwnld.php' Directory Traversal 3 WEB JIKO
2009-02-10   Banking@Home 2.1 - 'login.asp' Multiple SQL Injections 3 WEB Francesco Bianchino
2014-04-10   Orbit Open Ad Server 1.1.0 - SQL Injection 3 WEB High-Tech Bridge SA
2014-04-10   XCloner Standalone 3.5 - Cross-Site Request Forgery 2 WEB High-Tech Bridge SA
2009-02-09   Bitrix Site Manager 6/7 - Multiple Input Validation Vulnerabilities 3 WEB aGGreSSor
2009-02-05   glFusion 1.1 - Anonymous Comment 'Username' HTML Injection 3 WEB Bjarne Mathiesen Schacht
2009-02-09   FotoWeb 6.0 - 'Grid.fwx?search' Cross-Site Scripting 3 WEB Stelios Tigkas
2009-02-09   FotoWeb 6.0 - 'Login.fwx?s' Cross-Site Scripting 3 WEB Stelios Tigkas
2009-02-06   Ilch CMS 1.1 - 'HTTP_X_FORWARDED_FOR' SQL Injection 3 WEB Gizmore
2009-02-04   MetaBBS 0.11 - Administration Settings Authentication Bypass 3 WEB make0day
2009-02-03   Simple Machines Forum (SMF) 1.1.7 - '[url]' Tag HTML Injection 3 WEB Xianur0
2009-01-30   E-PHP B2B Trading Marketplace Script - Multiple Cross-Site Scripting Vulnerabilities 3 WEB SaiedHacker
2009-01-29   PerlSoft Gästebuch 1.7b - 'admincenter.cgi' Remote Command Execution 3 WEB Perforin
2014-04-09   Quick.CMS 5.4 - Multiple Vulnerabilities 3 WEB Shpend Kurtishaj
2009-01-28   Autonomy Ultraseek - 'cs.html' Open Redirection 5 WEB buzzy
2014-04-09   csUpload Script Site - Authentication Bypass 3 WEB Satanic2000
2009-01-24   NewsCMSLite - Insecure Cookie Authentication Bypass 4 WEB FarhadKey
2009-01-26   OpenX 2.6.2 - 'MAX_type' Local File Inclusion 4 WEB Sarid Harper
2009-01-26   Lootan - 'login.asp' SQL Injection 4 WEB Arash Setayeshi
2009-01-26   ConPresso CMS 4.07 - Multiple Remote Vulnerabilities 4 WEB David Vieira-Kurz
2009-01-26   LDF - 'login.asp' SQL Injection 3 WEB Arash Setayeshi
2009-01-23   OBLOG - 'err.asp' Cross-Site Scripting 4 WEB arash.setayeshi
2009-01-23   BBSXP 5.13 - 'error.asp' Cross-Site Scripting 3 WEB arashps0
2009-01-23   PHP-Nuke Downloads Module - 'url' SQL Injection 5 WEB Sina Yazdanmehr
2009-01-20   MoinMoin 1.8 - 'AttachFile.py' Cross-Site Scripting 4 WEB SecureState
2009-01-20   Apache JackRabbit 1.4/1.5 Content Repository (JCR) - 'swr.jsp?q' Cross-Site Scripting 4 WEB Red Hat
2009-01-20   Apache JackRabbit 1.4/1.5 Content Repository (JCR) - 'search.jsp?q' Cross-Site Scripting 3 WEB Red Hat
2009-01-16   Blog Manager - 'categoryId' Cross-Site Scripting 3 WEB Pouya_Server
2009-01-16   Blog Manager - 'ItemID' SQL Injection 3 WEB Pouya_Server
2009-01-16   LemonLDAP:NG 0.9.3.1 - User Enumeration / Cross-Site Scripting 3 WEB clément Oudot
2009-01-15   w3bcms - '/admin/index.php' SQL Injection 3 WEB Pouya_Server
2009-01-15   Masir Camp 3.0 - 'SearchKeywords' SQL Injection 3 WEB Pouya_Server
2009-01-15   Active Bids - 'search' SQL Injection 2 WEB Pouya_Server
2009-01-15   Active Bids - 'search' Cross-Site Scripting 3 WEB Pouya_Server
2009-01-15   LinksPro - 'OrderDirection' SQL Injection 3 WEB Pouya_Server
2009-01-15   MKPortal 1.2.1 - '/modules/rss/handler_image.php?i' Cross-Site Scripting 3 WEB waraxe
2009-01-15   MKPortal 1.2.1 - '/modules/blog/index.php' Home Template Textarea SQL Injection 3 WEB waraxe
2009-01-14   Dark Age CMS 2.0 - 'login.php' SQL Injection 3 WEB darkjoker
2014-04-07   XAMPP 3.2.1 & phpMyAdmin 4.1.6 - Multiple Vulnerabilities 3 WEB hackerDesk
2009-01-12   Ovidentia 6.7.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Ivan Sanchez
2009-01-12   Comersus Cart 6 - User Email and User Password Unauthorized Access 3 WEB ajann
2009-01-12   Visuplay CMS - Multiple SQL Injections 3 WEB Joseph Giron
2009-01-07   tadbook2 Module for XOOPS - 'open_book.php' SQL Injection 3 WEB stylextra
2009-01-07   Plunet BusinessManager 4.1 - 'pagesUTF8/auftrag_job.jsp?Pfad' Direct Request Information Disclosure 3 WEB Matteo Ignaccolo
2009-01-07   Plunet BusinessManager 4.1 - 'pagesUTF8/Sys_DirAnzeige.jsp?Pfad' Direct Request Information Disclosu 2 WEB Matteo Ignaccolo
2009-01-07   Plunet BusinessManager 4.1 - '/pagesUTF8/auftrag_allgemeinauftrag.jsp' Multiple Cross-Site Scripting 3 WEB Matteo Ignaccolo
2014-04-05   Private Photo+Video 1.1 Pro iOS - Persistent 4 WEB Vulnerability-Lab
2014-04-04   WordPress Plugin XCloner 3.1.0 - Cross-Site Request Forgery 2 WEB High-Tech Bridge SA
2009-01-05   SolucionXpressPro - 'main.php' SQL Injection 3 WEB Ehsan_Hp200
2008-12-04   NPDS < 08.06 - Multiple Input Validation Vulnerabilities 4 WEB Jean-François Leclerc
2008-12-29   Madrese-Portal - 'haber.asp' SQL Injection 4 WEB Sina Yazdanmehr
2008-12-29   ViArt Shop 3.5 - 'manuals_search.php?manuals_search' Cross-Site Scripting 4 WEB Xia Shing Zee
2008-12-29   Mavi Emlak - 'newDetail.asp' SQL Injection 4 WEB Sina Yazdanmehr
2009-01-08   Openfire 3.6.2 - 'log.jsp' Directory Traversal 4 WEB Federico Muttis
2009-01-08   Openfire 3.6.2 - 'log.jsp' Cross-Site Scripting 4 WEB Federico Muttis
2009-01-08   Openfire 3.6.2 - 'user-properties.jsp' Cross-Site Scripting 4 WEB Federico Muttis
2009-01-08   Openfire 3.6.2 - 'group-summary.jsp' Cross-Site Scripting 3 WEB Federico Muttis
2008-12-19   PECL Alternative PHP Cache Local 3 - HTML Injection 4 WEB Moritz Naumann
2008-12-18   Easysitenetwork Jokes Complete Website - 'joke.php' SQL Injection 4 WEB Ehsan_Hp200
2008-12-18   DO-CMS 3.0 - 'p' Multiple SQL Injections 4 WEB crash over
2014-04-03   Oracle Identity Manager 11g R2 SP1 (11.1.2.1.0) - Unvalidated Redirects 4 WEB Giuseppe D'Amore
2008-12-17   PHPcksec 0.2 - 'PHPcksec.php' Cross-Site Scripting 4 WEB ahmadbady
2014-04-03   CMS Made Simple 1.11.10 - Multiple Cross-Site Scripting Vulnerabilities 4 WEB Blessen Thomas
2014-04-02   Kloxo-MR 6.5.0 - Cross-Site Request Forgery 3 WEB Necmettin COSKUN
2014-04-02   Kloxo 6.1.18 Stable - Cross-Site Request Forgery 4 WEB Necmettin COSKUN
2014-04-02   iShare Your Moving Library 1.0 iOS - Multiple Vulnerabilities 4 WEB Vulnerability-Lab
2008-12-15   Injader 2.1.1 - SQL Injection / HTML Injection 4 WEB anonymous
2008-12-14   WebPhotoPro - Multiple SQL Injections 4 WEB baltazar
2014-04-02   CIS Manager CMS - SQL Injection 4 WEB felipe andrian
2008-12-13   ASP-DEV XM Events Diary - 'cat' SQL Injection 4 WEB Pouya_Server
2008-12-01   Octeth Oempro 3.5.5 - Multiple SQL Injections 3 WEB security curmudgeon
2008-12-11   Multiple Ad Server Solutions Products - 'logon_processing.jsp' SQL Injection 4 WEB 3d D3v!L
2008-12-09   Professional Download Assistant 0.1 - SQL Injection 4 WEB ZoRLu
2008-12-08   PHPepperShop 1.4 - 'shop/Admin/SHOP_KONFIGURATION.php' Cross-Site Scripting 3 WEB th3.r00k.ieatpork
2008-12-08   PHPepperShop 1.4 - 'shop/Admin/shop_kunden_mgmt.php' Cross-Site Scripting 3 WEB th3.r00k.ieatpork
2008-12-08   PHPepperShop 1.4 - 'shop/kontakt.php' Cross-Site Scripting 3 WEB th3.r00k.ieatpork
2008-12-08   PHPepperShop 1.4 - 'index.php' Cross-Site Scripting 3 WEB th3.r00k.ieatpork
2008-12-08   PrestaShop 1.1 - 'order.php?PATH_INFO' Cross-Site Scripting 3 WEB th3.r00k.ieatpork
2008-12-08   PrestaShop 1.1 - '/admin/login.php?PATH_INFO' Cross-Site Scripting 3 WEB th3.r00k.ieatpork
2008-12-06   TWiki 4.x - 'URLPARAM' Cross-Site Scripting 3 WEB Marc Schoenefeld
2008-12-06   TWiki 4.x - 'SEARCH' Remote Command Execution 3 WEB Troy Bollinge
2014-04-01   Alienvault 4.5.0 - (Authenticated) SQL Injection (Metasploit) 3 WEB Brandon Perry
2008-12-04   PHPSTREET WebBoard 1.0 - 'show.php' SQL Injection 3 WEB CWH Underground
2008-12-04   RevSense 1.0 - SQL Injection / Cross-Site Scripting 4 WEB Pouya_Server
2008-12-03   Yappa-ng - Query String Cross-Site Scripting 3 WEB Pouya_Server
2008-12-03   Yappa-ng - 'index.php?album' Cross-Site Scripting 2 WEB Pouya_Server
2014-04-01   Horde Webmail 5.1 - Open Redirect 2 WEB felipe andrian
2008-12-02   Orkut Clone - 'profile_social.php?id' Cross-Site Scripting 2 WEB d3b4g
2008-12-02   Orkut Clone - 'profile_social.php?id' SQL Injection 2 WEB d3b4g
2008-12-02   Jbook - SQL Injection 2 WEB Pouya_Server
2008-12-02   Z1Exchange 1.0 - 'id' Cross-Site Scripting 2 WEB Pouya_Server
2008-12-02   Z1Exchange 1.0 - 'id' SQL Injection 2 WEB Pouya_Server
2008-12-02   Fantastico - 'index.php' Local File Inclusion 2 WEB Super-Crystal
2008-12-01   IBM Rational ClearCase 7/8 - Cross-Site Scripting 2 WEB IBM
2008-12-01   Pre ASP Job Board - 'emp_login.asp' Cross-Site Scripting 2 WEB Pouya_Server
2008-12-01   ASP Forum Script - 'default.asp' Query String Cross-Site Scripting 2 WEB Pouya_Server
2008-12-01   ASP Forum Script - 'messages.asp?forum_id' Cross-Site Scripting 2 WEB Pouya_Server
2008-12-01   ASP Forum Script - 'new_message.asp?forum_id' Cross-Site Scripting 2 WEB Pouya_Server
2008-12-01   ASP Forum Script - 'messages.asp?message_id' SQL Injection 2 WEB Pouya_Server
2008-12-01   PHP JOBWEBSITE PRO - 'forgot.php' Cross-Site Scripting 3 WEB Pouya_Server
2008-12-01   PHP JOBWEBSITE PRO - 'adname' SQL Injection 2 WEB Pouya_Server
2014-03-31   EMC Cloud Tiering Appliance 10.0 - XML External Entity Arbitrary File Read (Metasploit) 3 WEB Brandon Perry
2014-03-31   WordPress Plugin Ajax Pagination 1.1 - Local File Inclusion 3 WEB Glyn Wintle
2014-03-31   Vanctech File Commander 1.1 iOS - Multiple Vulnerabilities 3 WEB Vulnerability-Lab
2014-03-31   PhotoWIFI Lite 1.0 iOS - Multiple Vulnerabilities 2 WEB Vulnerability-Lab
2008-12-01   Softbiz Classifieds Script - '/admin/index.php?msg' Cross-Site Scripting 3 WEB Pouya_Server
2008-12-01   Softbiz Classifieds Script - '/admin/adminhome.php?msg' Cross-Site Scripting 3 WEB Pouya_Server
2008-12-01   Softbiz Classifieds Script - 'lostpassword.php?msg' Cross-Site Scripting 3 WEB Pouya_Server
2008-12-01   Softbiz Classifieds Script - 'gallery.php?radio' Cross-Site Scripting 2 WEB Pouya_Server