Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2008-09-24   Drupal Module Ajax Checklist 5.x-1.0 - Multiple SQL Injections 3 WEB Justin C. Klein Keane
2008-09-23   InterTech WCMS - 'etemplate.php' SQL Injection 3 WEB GeNiUs IrAQI
2008-09-23   Omnicom Content Platform - 'browser.asp' Directory Traversal 3 WEB AlbaniaN-[H]
2008-09-23   Datalife Engine CMS 7.2 - 'admin.php' Cross-Site Scripting 3 WEB Hadi Kiamarsi
2008-09-22   6rbScript - 'cat.php' SQL Injection 3 WEB Karar Alshami
2008-09-20   Achievo 1.3.2 - 'atknodetype' Cross-Site Scripting 3 WEB Rohit Bansal
2008-09-21   BlueCUBE CMS - 'tienda.php' SQL Injection 3 WEB r45c4l
2008-09-22   BLUEPAGE CMS 2.5 - 'PHPSESSID' Session Fixation 3 WEB David Vieira-Kurz
2008-09-22   xt:Commerce 3.04 - 'XTCsid' Session Fixation 3 WEB David Vieira-Kurz
2008-09-22   xt:Commerce 3.04 - 'advanced_search_result.php?keywords' Cross-Site Scripting 3 WEB David Vieira-Kurz
2008-09-22   Fuzzylime (cms) 3.0 - 'usercheck.php' Cross-Site Scripting 3 WEB Fabian Fingerle
2008-09-22   MapCal 0.1 - 'id' SQL Injection 3 WEB 0x90
2008-09-22   UNAK-CMS - Cookie Authentication Bypass 3 WEB Ciph3r
2008-09-22   rgb72 WCMS 1.0 - 'index.php' SQL Injection 2 WEB CWH Underground
2008-09-21   eXtrovert software Thyme 1.3 - 'add_calendars.php' Cross-Site Scripting 3 WEB DigiTrust Group
2008-09-19   PHP Pro Bid 5.2.4/6.04 - Multiple SQL Injections 3 WEB Jan Van Niekerk
2008-09-19   Parallels H-Sphere 3.0/3.1 - 'login.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB t0fx
2008-09-19   HyperStop WebHost Directory 1.2 - Database Disclosure 3 WEB r45c4l
2008-09-18   Sama Educational Management System - 'error.asp' Cross-Site Scripting 3 WEB Lagon666
2008-09-17   Add a link 4 - Security Bypass / SQL Injection 3 WEB JosS
2008-09-17   Quick Cart 3.1 - 'admin.php' Cross-Site Scripting 3 WEB John Cobb
2008-09-17   Cars & Vehicle - 'page.php' SQL Injection 4 WEB Hussin X
2008-09-16   Quick CMS Lite 2.1 - 'admin.php' Cross-Site Scripting 3 WEB John Cobb
2014-03-20   D-Link DIR-600L AX 1.00 - Cross-Site Request Forgery 3 WEB Dhruv Shah
2008-09-15   phpMyAdmin 3.2 - 'server_databases.php' Remote Command Execution 3 WEB Norman Hippert
2014-03-20   OXID eShop < 4.7.11/5.0.11 / < 4.8.4/5.1.4 - Multiple Vulnerabilities 3 WEB //sToRm
2014-03-20   Wireless Drive 1.1.0 iOS - Multiple Web Vulnerabilities 3 WEB Vulnerability-Lab
2014-03-19   Array Networks vxAG 9.2.0.34 and vAPV 8.3.2.17 - Multiple Vulnerabilities 3 WEB xistence
2014-03-19   McAfee Asset Manager 6.6 - Multiple Vulnerabilities 3 WEB Brandon Perry
2008-09-12   QuicO - 'photo.php' SQL Injection 4 WEB Beenu Arora
2008-09-12   Paranews 3.4 - Multiple Cross-Site Scripting Vulnerabilities 4 WEB Xylitol
2008-09-12   Dynamic MP3 Lister 2.0.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Xylitol
2008-09-11   Nooms 1.1 - 'search.php?q' Cross-Site Scripting 4 WEB Dr.Crash
2008-09-11   Nooms 1.1 - 'smileys.php?page_id' Cross-Site Scripting 5 WEB Dr.Crash
2008-09-10   Hot Links SQL-PHP - 'news.php' SQL Injection 4 WEB r45c4l
2008-09-10   Horde 3.2 - MIME Attachment Filename Insufficient Filtering Cross-Site Scripting 4 WEB Alexios Fakos
2008-09-10   Horde Application Framework 3.2.1 - Forward Slash Insufficient Filtering Cross-Site Scripting 4 WEB Alexios Fakos
2008-09-10   AvailScript Job Portal Script - 'applynow.php' SQL Injection 3 WEB InjEctOr5
2008-09-10   Jaw Portal 1.2 - 'index.php' Multiple Local File Inclusions 4 WEB SirGod
2008-09-02   UBBCentral UBB.Threads 7.3.1 - 'Forum[]' Array SQL Injection 3 WEB GulfTech Security
2008-09-07   E-PHP B2B Trading Marketplace Script - 'listings.php' SQL Injection 3 WEB r45c4l
2008-09-08   eXtrovert software Thyme 1.3 - 'pick_users.php' SQL Injection 3 WEB Omer Singer
2008-09-08   Gallery 2.0 - Multiple Cross-Site Scripting Vulnerabilities 3 WEB sl4xUz
2008-09-07   phpAdultSite CMS - 'results_per_page' Cross-Site Scripting 3 WEB David Sopas
2008-09-06   Silentum LoginSys 1.0 - Multiple Cross-Site Scripting Vulnerabilities 3 WEB Maximiliano Soler
2008-09-03   CeleronDude Uploader 6.1 - 'account.php' Cross-Site Scripting 3 WEB Xc0re
2014-03-17   Joomla! Component AJAX Shoutbox 1.6 - SQL Injection 3 WEB Ibrahim Raafat
2014-03-17   OpenSupports 2.0 - Blind SQL Injection 3 WEB indoushka
2008-09-04   XRms 1.99.2 - 'starting' Cross-Site Scripting 3 WEB Fabian Fingerle
2008-09-04   XRms 1.99.2 - 'file_id' Cross-Site Scripting 3 WEB Fabian Fingerle
2008-09-04   XRms 1.99.2 - 'case_title' Cross-Site Scripting 3 WEB Fabian Fingerle
2008-09-04   XRms 1.99.2 - 'opportunity_title' Cross-Site Scripting 3 WEB Fabian Fingerle
2008-09-04   XRms 1.99.2 - 'campaign_title' Cross-Site Scripting 3 WEB Fabian Fingerle
2008-09-04   XRms 1.99.2 - 'last_name' Cross-Site Scripting 3 WEB Fabian Fingerle
2008-09-04   XRms 1.99.2 - 'company_name' Cross-Site Scripting 2 WEB Fabian Fingerle
2008-09-04   XRms 1.99.2 - 'title' Cross-Site Scripting 2 WEB Fabian Fingerle
2014-03-17   OpenSupports 2.x - Authentication Bypass / Cross-Site Request Forgery 2 WEB TN CYB3R
2008-09-04   XRms 1.99.2 - 'login.php?target' Cross-Site Scripting 3 WEB Fabian Fingerle
2008-09-03   @Mail 5.42 and @Mail WebMail 5.0.5 - Multiple Cross-Site Scripting Vulnerabilities 3 WEB C1c4Tr1Z
2008-09-03   eliteCMS 1.0 - 'page' SQL Injection 3 WEB e.wiZz!
2008-08-28   OpenDB 1.0.6 - 'user_profile.php?redirect_url' Cross-Site Scripting 3 WEB C1c4Tr1Z
2008-08-28   OpenDB 1.0.6 - 'listings.php?title' Cross-Site Scripting 3 WEB C1c4Tr1Z
2008-08-28   OpenDB 1.0.6 - 'user_admin.php?user_id' Cross-Site Scripting 3 WEB C1c4Tr1Z
2008-09-02   IDevSpot BizDirectory 2.04 - 'page' Cross-Site Scripting 3 WEB Am!r
2008-08-29   Full PHP Emlak Script - 'landsee.php' SQL Injection 3 WEB Hussin X
2008-09-01   GenPortal - 'buscarCat.php' Cross-Site Scripting 3 WEB sl4xUz
2008-09-01   vTiger CRM 5.0.4 - Multiple Cross-Site Scripting Vulnerabilities 3 WEB Fabian Fingerle
2008-08-29   dotProject 2.1.2 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities 3 WEB C1c4Tr1Z
2008-08-27   AbleSpace 1.0 - 'adv_cat.php' Cross-Site Scripting 3 WEB Bug Researchers Group
2008-08-26   Educe ASP Search Engine 1.5.6 - 'search.asp' Cross-Site Scripting 2 WEB JoCk3r
2008-08-26   MatterDaddy Market 1.1 - 'login.php' Cross-Site Scripting 2 WEB Sam Georgiou
2008-08-26   HPSystem Management Homepage (SMH) 2.1.12 - 'message.php' Cross-Site Scripting 2 WEB Luca Carettoni
2008-08-26   Smart Survey 1.0 - 'surveyresults.asp' Cross-Site Scripting 3 WEB Bug Researchers Group
2008-08-25   Bluemoon inc. PopnupBlog 3.30 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Lostmon
2008-08-25   PHP-Ultimate WebBoard 2.0 - 'admindel.php' Multiple Input Validation Vulnerabilities 2 WEB t0pP8uZz
2008-08-23   One-News - Multiple Input Validation Vulnerabilities 3 WEB suN8Hclf
2008-08-22   PicturesPro Photo Cart 3.9 - Search Cross-Site Scripting 3 WEB Tyler Trioxide
2008-08-22   Accellion File Transfer - Multiple Cross-Site Scripting Vulnerabilities 3 WEB Eric Beaulieu
2008-08-21   TimeTrex Time 2.2 and Attendance Module - Multiple Cross-Site Scripting Vulnerabilities 2 WEB Doz
2008-08-21   FAR-PHP 1.0 - 'index.php' Local File Inclusion 3 WEB Beenu Arora
2008-08-20   vBulletin 3.6.10/3.7.2 - '$newpm[title]' Cross-Site Scripting 3 WEB Core Security
2008-08-21   Simasy CMS - 'id' SQL Injection 3 WEB r45c4l
2008-08-21   Scripts4Profit DXShopCart 4.30 - 'pid' SQL Injection 3 WEB Hussin X
2014-03-15   Church Edit - Blind SQL Injection 3 WEB ThatIcyChill
2008-06-19   Folder Lock 5.9.5 - Weak Password Encryption Local Information Disclosure 3 WEB Charalambous Glafkos
2008-08-20   YourFreeWorld Ad-Exchange Script - 'id' SQL Injection 2 WEB Hussin X
2008-08-19   Vanilla 1.1.4 - HTML Injection / Cross-Site Scripting 3 WEB GulfTech Security
2008-08-18   K Web CMS - 'sayfala.asp' SQL Injection 3 WEB baltazar
2008-08-18   itMedia - Multiple SQL Injections 3 WEB baltazar
2014-03-14   Synology DSM 4.3-3827 - 'article.php' Blind SQL Injection 3 WEB Michael Wisniewski
2008-08-18   Ovidentia 6.6.5 - 'index.php' Cross-Site Scripting 3 WEB ThE dE@Th
2008-08-18   NewsHOWLER 1.03 - Cookie Data SQL Injection 3 WEB Khashayar Fereidani
2008-08-18   Freeway 1.4.1.171 - '/templates/Freeway/mainpage_modules/mainpage.php?language' Traversal Local File 4 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/templates/Freeway/boxes/whos_online.php?language' Traversal Local File Inclusi 4 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/templates/Freeway/boxes/loginbox.php?language' Traversal Local File Inclusion 3 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/templates/Freeway/boxes/card1.php?language' Traversal Local File Inclusion 3 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/includes/modules/newsdesk/newsdesk_article_require.php?language' Traversal Loc 2 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/includes/modules/faqdesk/faqdesk_article_require.php?language' Traversal Local 3 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/french/account_newsletters.php?language' Traversal Local File Inclusion 3 WEB Digital Security Research Group
2014-03-14   Fonality trixbox - 'mac' Remote Code Injection 3 WEB i-Hmx
2008-08-18   Freeway 1.4.1.171 - '/english/account.php?language' Traversal Local File Inclusion 3 WEB Digital Security Research Group
2008-08-18   AWStats 6.8 - 'AWStats.pl' Cross-Site Scripting 3 WEB Morgan Todd
2008-08-15   PromoProducts - 'view_product.php' Multiple SQL Injections 3 WEB baltazar
2008-08-15   FipsCMS 2.1 - 'neu.asp' SQL Injection 3 WEB U238
2008-08-15   FlexCMS 2.5 - 'inc-core-admin-editor-previouscolorsjs.php' Cross-Site Scripting 3 WEB Dr.Crash
2008-08-15   Mambo Open Source 4.6.2 - '/mambots/editors/mostlyce/' PHP/connector.php?Query String Cross-Site Scr 3 WEB Khashayar Fereidani
2008-08-15   Mambo Open Source 4.6.2 - '/administrator/popups/index3pop.php?mosConfig_sitename' Cross-Site Script 3 WEB Khashayar Fereidani
2008-08-15   PHPizabi 0.848b C1 HP3 - 'id' Local File Inclusion 4 WEB Lostmon
2008-08-15   mUnky 0.01 - 'index.php' Remote Code Execution 3 WEB Khashayar Fereidani
2008-08-14   Openfire 3.5.2 - 'login.jsp' Cross-Site Scripting 3 WEB Daniel Henninger
2008-08-13   Nortel Networks SRG V16 - 'modules.php?module' Traversal Local File Inclusion 4 WEB CraCkEr
2008-08-13   Nortel Networks SRG V16 - 'admin_modules.php?module' Traversal Local File Inclusion 3 WEB CraCkEr
2008-08-13   Nortel Networks SRG V16 - 'modules.php?module' Cross-Site Scripting 3 WEB CraCkEr
2008-08-13   YapBB 1.2 - 'class_yapbbcooker.php' Remote File Inclusion 3 WEB CraCkEr
2008-08-13   Nukeviet 2.0 - '/admin/login.php' Cookie Authentication Bypass 3 WEB Ciph3r
2008-08-13   PHP-Fusion 4.01 - 'readmore.php' SQL Injection 3 WEB Rake
2008-08-13   PHP Realty - 'dpage.php' SQL Injection 3 WEB CraCkEr
2008-08-13   Freeway 1.4.1 - Multiple Input Validation Vulnerabilities 3 WEB Digital Security Research Group
2014-03-13   Fonality trixbox - SQL Injection 3 WEB Sc4nX
2014-03-13   Ubee EVW3200 - Cross-Site Request Forgery 3 WEB Jeroen - IT Nerdbox
2014-03-13   Ubee EVW3200 - Multiple Persistent Cross-Site Scripting Vulnerabilities 3 WEB Jeroen - IT Nerdbox
2008-08-13   Meet#Web 0.8 - 'RegRightsResource.class.php?root_path' Remote File Inclusion 3 WEB Rakesh S
2008-08-13   Meet#Web 0.8 - 'RegResource.class.php?root_path' Remote File Inclusion 3 WEB Rakesh S
2008-08-13   Meet#Web 0.8 - 'RegForm.class.php?root_path' Remote File Inclusion 3 WEB Rakesh S
2008-08-13   Meet#Web 0.8 - 'ManagerRightsResource.class.php?root_path' Remote File Inclusion 3 WEB Rakesh S