|
2008-09-02
|
|
UBBCentral UBB.Threads 7.3.1 - 'Forum[]' Array SQL Injection
|
1 |
WEB
|
GulfTech Security
|
|
2008-09-07
|
|
E-PHP B2B Trading Marketplace Script - 'listings.php' SQL Injection
|
1 |
WEB
|
r45c4l
|
|
2008-09-08
|
|
eXtrovert software Thyme 1.3 - 'pick_users.php' SQL Injection
|
2 |
WEB
|
Omer Singer
|
|
2008-09-08
|
|
Gallery 2.0 - Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
sl4xUz
|
|
2008-09-07
|
|
phpAdultSite CMS - 'results_per_page' Cross-Site Scripting
|
1 |
WEB
|
David Sopas
|
|
2008-09-06
|
|
Silentum LoginSys 1.0 - Multiple Cross-Site Scripting Vulnerabilities
|
1 |
WEB
|
Maximiliano Soler
|
|
2008-09-03
|
|
CeleronDude Uploader 6.1 - 'account.php' Cross-Site Scripting
|
1 |
WEB
|
Xc0re
|
|
2014-03-17
|
|
Joomla! Component AJAX Shoutbox 1.6 - SQL Injection
|
1 |
WEB
|
Ibrahim Raafat
|
|
2014-03-17
|
|
OpenSupports 2.0 - Blind SQL Injection
|
1 |
WEB
|
indoushka
|
|
2008-09-04
|
|
XRms 1.99.2 - 'starting' Cross-Site Scripting
|
1 |
WEB
|
Fabian Fingerle
|
|
2008-09-04
|
|
XRms 1.99.2 - 'file_id' Cross-Site Scripting
|
1 |
WEB
|
Fabian Fingerle
|
|
2008-09-04
|
|
XRms 1.99.2 - 'case_title' Cross-Site Scripting
|
1 |
WEB
|
Fabian Fingerle
|
|
2008-09-04
|
|
XRms 1.99.2 - 'opportunity_title' Cross-Site Scripting
|
1 |
WEB
|
Fabian Fingerle
|
|
2008-09-04
|
|
XRms 1.99.2 - 'campaign_title' Cross-Site Scripting
|
1 |
WEB
|
Fabian Fingerle
|
|
2008-09-04
|
|
XRms 1.99.2 - 'last_name' Cross-Site Scripting
|
1 |
WEB
|
Fabian Fingerle
|
|
2008-09-04
|
|
XRms 1.99.2 - 'company_name' Cross-Site Scripting
|
1 |
WEB
|
Fabian Fingerle
|
|
2008-09-04
|
|
XRms 1.99.2 - 'title' Cross-Site Scripting
|
1 |
WEB
|
Fabian Fingerle
|
|
2014-03-17
|
|
OpenSupports 2.x - Authentication Bypass / Cross-Site Request Forgery
|
1 |
WEB
|
TN CYB3R
|
|
2008-09-04
|
|
XRms 1.99.2 - 'login.php?target' Cross-Site Scripting
|
0 |
WEB
|
Fabian Fingerle
|
|
2008-09-03
|
|
@Mail 5.42 and @Mail WebMail 5.0.5 - Multiple Cross-Site Scripting Vulnerabilities
|
1 |
WEB
|
C1c4Tr1Z
|
|
2008-09-03
|
|
eliteCMS 1.0 - 'page' SQL Injection
|
1 |
WEB
|
e.wiZz!
|
|
2008-08-28
|
|
OpenDB 1.0.6 - 'user_profile.php?redirect_url' Cross-Site Scripting
|
1 |
WEB
|
C1c4Tr1Z
|
|
2008-08-28
|
|
OpenDB 1.0.6 - 'listings.php?title' Cross-Site Scripting
|
1 |
WEB
|
C1c4Tr1Z
|
|
2008-08-28
|
|
OpenDB 1.0.6 - 'user_admin.php?user_id' Cross-Site Scripting
|
1 |
WEB
|
C1c4Tr1Z
|
|
2008-09-02
|
|
IDevSpot BizDirectory 2.04 - 'page' Cross-Site Scripting
|
1 |
WEB
|
Am!r
|
|
2008-08-29
|
|
Full PHP Emlak Script - 'landsee.php' SQL Injection
|
1 |
WEB
|
Hussin X
|
|
2008-09-01
|
|
GenPortal - 'buscarCat.php' Cross-Site Scripting
|
1 |
WEB
|
sl4xUz
|
|
2008-09-01
|
|
vTiger CRM 5.0.4 - Multiple Cross-Site Scripting Vulnerabilities
|
1 |
WEB
|
Fabian Fingerle
|
|
2008-08-29
|
|
dotProject 2.1.2 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities
|
1 |
WEB
|
C1c4Tr1Z
|
|
2008-08-27
|
|
AbleSpace 1.0 - 'adv_cat.php' Cross-Site Scripting
|
1 |
WEB
|
Bug Researchers Group
|
|
2008-08-26
|
|
Educe ASP Search Engine 1.5.6 - 'search.asp' Cross-Site Scripting
|
1 |
WEB
|
JoCk3r
|
|
2008-08-26
|
|
MatterDaddy Market 1.1 - 'login.php' Cross-Site Scripting
|
1 |
WEB
|
Sam Georgiou
|
|
2008-08-26
|
|
HPSystem Management Homepage (SMH) 2.1.12 - 'message.php' Cross-Site Scripting
|
1 |
WEB
|
Luca Carettoni
|
|
2008-08-26
|
|
Smart Survey 1.0 - 'surveyresults.asp' Cross-Site Scripting
|
2 |
WEB
|
Bug Researchers Group
|
|
2008-08-25
|
|
Bluemoon inc. PopnupBlog 3.30 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
Lostmon
|
|
2008-08-25
|
|
PHP-Ultimate WebBoard 2.0 - 'admindel.php' Multiple Input Validation Vulnerabilities
|
1 |
WEB
|
t0pP8uZz
|
|
2008-08-23
|
|
One-News - Multiple Input Validation Vulnerabilities
|
2 |
WEB
|
suN8Hclf
|
|
2008-08-22
|
|
PicturesPro Photo Cart 3.9 - Search Cross-Site Scripting
|
2 |
WEB
|
Tyler Trioxide
|
|
2008-08-22
|
|
Accellion File Transfer - Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
Eric Beaulieu
|
|
2008-08-21
|
|
TimeTrex Time 2.2 and Attendance Module - Multiple Cross-Site Scripting Vulnerabilities
|
1 |
WEB
|
Doz
|
|
2008-08-21
|
|
FAR-PHP 1.0 - 'index.php' Local File Inclusion
|
2 |
WEB
|
Beenu Arora
|
|
2008-08-20
|
|
vBulletin 3.6.10/3.7.2 - '$newpm[title]' Cross-Site Scripting
|
2 |
WEB
|
Core Security
|
|
2008-08-21
|
|
Simasy CMS - 'id' SQL Injection
|
2 |
WEB
|
r45c4l
|
|
2008-08-21
|
|
Scripts4Profit DXShopCart 4.30 - 'pid' SQL Injection
|
2 |
WEB
|
Hussin X
|
|
2014-03-15
|
|
Church Edit - Blind SQL Injection
|
2 |
WEB
|
ThatIcyChill
|
|
2008-06-19
|
|
Folder Lock 5.9.5 - Weak Password Encryption Local Information Disclosure
|
2 |
WEB
|
Charalambous Glafkos
|
|
2008-08-20
|
|
YourFreeWorld Ad-Exchange Script - 'id' SQL Injection
|
1 |
WEB
|
Hussin X
|
|
2008-08-19
|
|
Vanilla 1.1.4 - HTML Injection / Cross-Site Scripting
|
2 |
WEB
|
GulfTech Security
|
|
2008-08-18
|
|
K Web CMS - 'sayfala.asp' SQL Injection
|
2 |
WEB
|
baltazar
|
|
2008-08-18
|
|
itMedia - Multiple SQL Injections
|
2 |
WEB
|
baltazar
|
|
2014-03-14
|
|
Synology DSM 4.3-3827 - 'article.php' Blind SQL Injection
|
2 |
WEB
|
Michael Wisniewski
|
|
2008-08-18
|
|
Ovidentia 6.6.5 - 'index.php' Cross-Site Scripting
|
2 |
WEB
|
ThE dE@Th
|
|
2008-08-18
|
|
NewsHOWLER 1.03 - Cookie Data SQL Injection
|
2 |
WEB
|
Khashayar Fereidani
|
|
2008-08-18
|
|
Freeway 1.4.1.171 - '/templates/Freeway/mainpage_modules/mainpage.php?language' Traversal Local File
|
3 |
WEB
|
Digital Security Research Group
|
|
2008-08-18
|
|
Freeway 1.4.1.171 - '/templates/Freeway/boxes/whos_online.php?language' Traversal Local File Inclusi
|
2 |
WEB
|
Digital Security Research Group
|
|
2008-08-18
|
|
Freeway 1.4.1.171 - '/templates/Freeway/boxes/loginbox.php?language' Traversal Local File Inclusion
|
2 |
WEB
|
Digital Security Research Group
|
|
2008-08-18
|
|
Freeway 1.4.1.171 - '/templates/Freeway/boxes/card1.php?language' Traversal Local File Inclusion
|
2 |
WEB
|
Digital Security Research Group
|
|
2008-08-18
|
|
Freeway 1.4.1.171 - '/includes/modules/newsdesk/newsdesk_article_require.php?language' Traversal Loc
|
1 |
WEB
|
Digital Security Research Group
|
|
2008-08-18
|
|
Freeway 1.4.1.171 - '/includes/modules/faqdesk/faqdesk_article_require.php?language' Traversal Local
|
1 |
WEB
|
Digital Security Research Group
|
|
2008-08-18
|
|
Freeway 1.4.1.171 - '/french/account_newsletters.php?language' Traversal Local File Inclusion
|
2 |
WEB
|
Digital Security Research Group
|
|
2014-03-14
|
|
Fonality trixbox - 'mac' Remote Code Injection
|
2 |
WEB
|
i-Hmx
|
|
2008-08-18
|
|
Freeway 1.4.1.171 - '/english/account.php?language' Traversal Local File Inclusion
|
2 |
WEB
|
Digital Security Research Group
|
|
2008-08-18
|
|
AWStats 6.8 - 'AWStats.pl' Cross-Site Scripting
|
2 |
WEB
|
Morgan Todd
|
|
2008-08-15
|
|
PromoProducts - 'view_product.php' Multiple SQL Injections
|
2 |
WEB
|
baltazar
|
|
2008-08-15
|
|
FipsCMS 2.1 - 'neu.asp' SQL Injection
|
2 |
WEB
|
U238
|
|
2008-08-15
|
|
FlexCMS 2.5 - 'inc-core-admin-editor-previouscolorsjs.php' Cross-Site Scripting
|
2 |
WEB
|
Dr.Crash
|
|
2008-08-15
|
|
Mambo Open Source 4.6.2 - '/mambots/editors/mostlyce/' PHP/connector.php?Query String Cross-Site Scr
|
2 |
WEB
|
Khashayar Fereidani
|
|
2008-08-15
|
|
Mambo Open Source 4.6.2 - '/administrator/popups/index3pop.php?mosConfig_sitename' Cross-Site Script
|
1 |
WEB
|
Khashayar Fereidani
|
|
2008-08-15
|
|
PHPizabi 0.848b C1 HP3 - 'id' Local File Inclusion
|
2 |
WEB
|
Lostmon
|
|
2008-08-15
|
|
mUnky 0.01 - 'index.php' Remote Code Execution
|
1 |
WEB
|
Khashayar Fereidani
|
|
2008-08-14
|
|
Openfire 3.5.2 - 'login.jsp' Cross-Site Scripting
|
1 |
WEB
|
Daniel Henninger
|
|
2008-08-13
|
|
Nortel Networks SRG V16 - 'modules.php?module' Traversal Local File Inclusion
|
2 |
WEB
|
CraCkEr
|
|
2008-08-13
|
|
Nortel Networks SRG V16 - 'admin_modules.php?module' Traversal Local File Inclusion
|
1 |
WEB
|
CraCkEr
|
|
2008-08-13
|
|
Nortel Networks SRG V16 - 'modules.php?module' Cross-Site Scripting
|
0 |
WEB
|
CraCkEr
|
|
2008-08-13
|
|
YapBB 1.2 - 'class_yapbbcooker.php' Remote File Inclusion
|
1 |
WEB
|
CraCkEr
|
|
2008-08-13
|
|
Nukeviet 2.0 - '/admin/login.php' Cookie Authentication Bypass
|
1 |
WEB
|
Ciph3r
|
|
2008-08-13
|
|
PHP-Fusion 4.01 - 'readmore.php' SQL Injection
|
1 |
WEB
|
Rake
|
|
2008-08-13
|
|
PHP Realty - 'dpage.php' SQL Injection
|
1 |
WEB
|
CraCkEr
|
|
2008-08-13
|
|
Freeway 1.4.1 - Multiple Input Validation Vulnerabilities
|
1 |
WEB
|
Digital Security Research Group
|
|
2014-03-13
|
|
Fonality trixbox - SQL Injection
|
1 |
WEB
|
Sc4nX
|
|
2014-03-13
|
|
Ubee EVW3200 - Cross-Site Request Forgery
|
1 |
WEB
|
Jeroen - IT Nerdbox
|
|
2014-03-13
|
|
Ubee EVW3200 - Multiple Persistent Cross-Site Scripting Vulnerabilities
|
1 |
WEB
|
Jeroen - IT Nerdbox
|
|
2008-08-13
|
|
Meet#Web 0.8 - 'RegRightsResource.class.php?root_path' Remote File Inclusion
|
1 |
WEB
|
Rakesh S
|
|
2008-08-13
|
|
Meet#Web 0.8 - 'RegResource.class.php?root_path' Remote File Inclusion
|
1 |
WEB
|
Rakesh S
|
|
2008-08-13
|
|
Meet#Web 0.8 - 'RegForm.class.php?root_path' Remote File Inclusion
|
1 |
WEB
|
Rakesh S
|
|
2008-08-13
|
|
Meet#Web 0.8 - 'ManagerRightsResource.class.php?root_path' Remote File Inclusion
|
1 |
WEB
|
Rakesh S
|
|
2008-08-13
|
|
Meet#Web 0.8 - 'ManagerResource.class.php?root_path' Remote File Inclusion
|
1 |
WEB
|
Rakesh S
|
|
2008-08-13
|
|
Meet#Web 0.8 - 'modules.php?root_path' Remote File Inclusion
|
1 |
WEB
|
Rakesh S
|
|
2008-08-12
|
|
IDevSpot PHPLinkExchange 1.01/1.02 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
|
1 |
WEB
|
sl4xUz
|
|
2008-08-12
|
|
Datafeed Studio 1.6.2 - 'search.php' Cross-Site Scripting
|
1 |
WEB
|
Bug Researchers Group
|
|
2008-08-12
|
|
Datafeed Studio - 'patch.php' Remote File Inclusion
|
1 |
WEB
|
Bug Researchers Group
|
|
2008-08-11
|
|
Kayako SupportSuite 3.x - '/staff/index.php?customfieldlinkid' SQL Injection
|
1 |
WEB
|
GulfTech Security
|
|
2008-08-11
|
|
Kayako SupportSuite 3.x - 'index.php?filter' Cross-Site Scripting
|
1 |
WEB
|
GulfTech Security
|
|
2008-08-11
|
|
Kayako SupportSuite 3.x - '/visitor/index.php?sessionid' Cross-Site Scripting
|
1 |
WEB
|
GulfTech Security
|
|
2008-08-11
|
|
Domain Group Network GooCMS 1.02 - 'index.php' Cross-Site Scripting
|
3 |
WEB
|
ahmadbaby
|
|
2008-08-08
|
|
Linkspider 1.08 - Multiple Remote File Inclusions
|
1 |
WEB
|
Rohit Bansal
|
|
2008-08-09
|
|
RMSOFT Downloads Plus - '/(rmdp) 1.5/1.7 Module for XOOPS down.php?id' Cross-Site Scripting
|
1 |
WEB
|
Lostmon
|
|
2008-08-09
|
|
RMSOFT Downloads Plus - '/(rmdp) 1.5/1.7 Module for XOOPS search.php?key' Cross-Site Scripting
|
1 |
WEB
|
Lostmon
|
|
2014-03-12
|
|
FreePBX 2.11.0 - Remote Command Execution
|
1 |
WEB
|
@0x00string
|
|
2014-03-12
|
|
vTiger CRM 5.4.0/6.0 RC/6.0.0 GA - 'browse.php' Local File Inclusion
|
1 |
WEB
|
Portcullis
|
|
2014-03-12
|
|
Procentia IntelliPen 1.1.12.1520 - 'data.aspx' Blind SQL Injection
|
1 |
WEB
|
Portcullis
|
|
2014-03-12
|
|
LuxCal 3.2.2 - Cross-Site Request Forgery / Blind SQL Injection
|
1 |
WEB
|
TUNISIAN CYBER
|
|
2014-03-12
|
|
GNUPanel 0.3.5_R4 - Multiple Vulnerabilities
|
1 |
WEB
|
Necmettin COSKUN
|
|
2014-03-12
|
|
ZYXEL P-660HN-T1A Router - Authentication Bypass
|
2 |
WEB
|
Michael Grifalconi
|
|
2008-08-09
|
|
Yogurt Social Network 3.2 rc1 Module for XOOPS - 'tribes.php?uid' Cross-Site Scripting
|
3 |
WEB
|
Lostmon
|
|
2008-08-09
|
|
Yogurt Social Network 3.2 rc1 Module for XOOPS - 'index.php?uid' Cross-Site Scripting
|
2 |
WEB
|
Lostmon
|
|
2008-08-09
|
|
Yogurt Social Network 3.2 rc1 Module for XOOPS - 'scrapbook.php?uid' Cross-Site Scripting
|
2 |
WEB
|
Lostmon
|
|
2008-08-09
|
|
Yogurt Social Network 3.2 rc1 Module for XOOPS - 'album.php?uid' Cross-Site Scripting
|
2 |
WEB
|
Lostmon
|
|
2008-08-09
|
|
Yogurt Social Network 3.2 rc1 Module for XOOPS - 'seutubo.php?uid' Cross-Site Scripting
|
2 |
WEB
|
Lostmon
|
|
2008-08-09
|
|
Yogurt Social Network 3.2 rc1 Module for XOOPS - 'friends.php?uid' Cross-Site Scripting
|
1 |
WEB
|
Lostmon
|
|
2008-08-09
|
|
RMSOFT MiniShop 1.0 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities
|
2 |
WEB
|
Lostmon
|
|
2008-08-06
|
|
PHP-Nuke Kleinanzeigen Module - 'lid' SQL Injection
|
0 |
WEB
|
Lovebug
|
|
2008-08-06
|
|
Kshop 2.22 - 'kshop_search.php' Cross-Site Scripting
|
1 |
WEB
|
Lostmon
|
|
2008-08-06
|
|
WebmasterSite (Multiple Products) - Remote Command Execution
|
1 |
WEB
|
otmorozok428
|
|
2008-08-06
|
|
Joomla! / Mambo Component com_utchat 0.2 - Multiple Remote File Inclusions
|
1 |
WEB
|
by_casper41
|
|
2008-08-06
|
|
Quate CMS 0.3.4 - Multiple Cross-Site Scripting Vulnerabilities
|
1 |
WEB
|
CraCkEr
|
|
2008-08-06
|
|
KAPhotoservice - 'search.asp?Filename' Cross-Site Scripting
|
1 |
WEB
|
by_casper41
|
|
2008-08-06
|
|
KAPhotoservice - 'order.asp?page' Cross-Site Scripting
|
1 |
WEB
|
by_casper41
|
|
2008-08-06
|
|
PHPKF-Portal 1.10 - 'anket_yonetim.php?portal_ayarlarportal_dili' Traversal Local File Inclusion
|
0 |
WEB
|
KnocKout
|
|
2008-08-06
|
|
PHPKF-Portal 1.10 - 'baslik.php?tema_dizin' Traversal Local File Inclusion
|
0 |
WEB
|
KnocKout
|
|
2008-08-06
|
|
Battle.net Clan Script 1.5.x - 'index.php' Multiple SQL Injections
|
1 |
WEB
|
Khashayar Fereidani
|
|
2008-08-06
|
|
Chupix CMS Contact Module 0.1 - 'index.php' Multiple Local File Inclusions
|
1 |
WEB
|
casper41
|
|
2008-08-05
|
|
POWERGAP ShopSystem - 's03.php' SQL Injection
|
1 |
WEB
|
Rohit Bansal
|
|
2008-08-05
|
|
Softbiz Image Gallery - 'browsecats.php?msg' Cross-Site Scripting
|
1 |
WEB
|
sl4xUz
|
|
2008-08-05
|
|
Softbiz Image Gallery - 'cleanup.php?msg' Cross-Site Scripting
|
0 |
WEB
|
sl4xUz
|
