|
2008-05-24
|
|
Horde Multiple Product - 'week.php?Timestamp' Cross-Site Scripting
|
3 |
WEB
|
Ivan Sanchez
|
|
2008-05-24
|
|
Horde Multiple Product - 'workweek.php?Timestamp' Cross-Site Scripting
|
3 |
WEB
|
Ivan Sanchez
|
|
2008-05-24
|
|
DZOIC Handshakes 3.5 - 'fname' SQL Injection
|
3 |
WEB
|
Ali Jasbi
|
|
2008-05-24
|
|
WordPress Plugin Upload File - 'wp-uploadfile.php' SQL Injection
|
3 |
WEB
|
eserg.ru
|
|
2008-05-22
|
|
Apple Safari Montage 3.1.3 - 'forgotPW.php' Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
Omer Singer
|
|
2014-02-22
|
|
WordPress Plugin AdRotate 3.9.4 - 'clicktracker.ph?track' SQL Injection
|
3 |
WEB
|
High-Tech Bridge SA
|
|
2014-02-22
|
|
ILIAS 4.4.1 - Multiple Vulnerabilities
|
2 |
WEB
|
HauntIT
|
|
2008-05-22
|
|
AbleDating 2.4 - 'search_results.php?keyword' Cross-Site Scripting
|
3 |
WEB
|
Ali Jasbi
|
|
2008-05-22
|
|
AbleDating 2.4 - 'search_results.php?keyword' SQL Injection
|
3 |
WEB
|
Ali Jasbi
|
|
2008-05-22
|
|
BMForum 5.6 - 'bsd01header.php' Cross-Site Scripting
|
3 |
WEB
|
CWH Underground
|
|
2008-05-22
|
|
BMForum 5.6 - 'bsd01footer.php' Cross-Site Scripting
|
3 |
WEB
|
CWH Underground
|
|
2008-05-22
|
|
BMForum 5.6 - 'index.php' Cross-Site Scripting
|
3 |
WEB
|
CWH Underground
|
|
2008-05-22
|
|
phpSQLiteCMS 1 RC2 - '/cms/includes/login.inc.php' Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
CWH Underground
|
|
2008-05-22
|
|
phpSQLiteCMS 1 RC2 - '/cms/includes/header.inc.php' Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
CWH Underground
|
|
2008-05-22
|
|
PHPFreeForum 1.0 rc2 - '/part/menu.php' Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
tan_prathan
|
|
2008-05-22
|
|
PHPFreeForum 1.0 rc2 - 'error.php?message' Cross-Site Scripting
|
3 |
WEB
|
tan_prathan
|
|
2008-05-21
|
|
SAP Web Application Server 7.0 - '/sap/bc/gui/sap/its/webgui/' Cross-Site Scripting
|
3 |
WEB
|
DSecRG
|
|
2008-05-20
|
|
eCMS 0.4.2 - Multiple Vulnerabilities
|
3 |
WEB
|
hadihadi
|
|
2008-05-20
|
|
DizaynPlus Nobetci Eczane Takip 1.0 - 'ayrinti.asp' SQL Injection
|
4 |
WEB
|
U238
|
|
2008-05-20
|
|
Site Tanitimlari Scripti - Multiple SQL Injections
|
3 |
WEB
|
fahn zichler
|
|
2008-05-20
|
|
Web Slider 0.6 - 'slide' SQL Injection
|
3 |
WEB
|
fahn zichler
|
|
2008-05-20
|
|
Starsgames Control Panel 4.6.2 - 'index.php' Cross-Site Scripting
|
3 |
WEB
|
CWH Underground
|
|
2008-05-20
|
|
AppServ Open Project 2.5.10 - 'appservlang' Cross-Site Scripting
|
3 |
WEB
|
CWH Underground
|
|
2008-05-19
|
|
cPanel 11.21 - 'wwwact' Privilege Escalation
|
3 |
WEB
|
Ali Jasbi
|
|
2008-05-19
|
|
bcoos 1.0.13 - 'file' Local File Inclusion
|
4 |
WEB
|
Lostmon
|
|
2008-05-17
|
|
PHP-Nuke 'KuiraniKerim' Module - 'sid' SQL Injection
|
3 |
WEB
|
Lovebug
|
|
2008-05-16
|
|
Digital Hive 2.0 - 'base_include.php' Local File Inclusion
|
4 |
WEB
|
ZoRLu
|
|
2008-05-16
|
|
AN Guestbook 0.4 - 'send_email.php' Cross-Site Scripting
|
3 |
WEB
|
ZoRLu
|
|
2008-05-16
|
|
ACGV News 0.9.1 - 'glossaire.php?id' Cross-Site Scripting
|
3 |
WEB
|
ZoRLu
|
|
2008-05-16
|
|
ACGV News 0.9.1 - 'glossaire.php?id' SQL Injection
|
3 |
WEB
|
ZoRLu
|
|
2008-05-15
|
|
SunShop Shopping Cart 3.5.1 - 'index.php' SQL Injection
|
3 |
WEB
|
irvian
|
|
2008-05-14
|
|
philboard 0.5 - 'W1L3D4_konuya_mesaj_yaz.asp' Multiple SQL Injections
|
4 |
WEB
|
U238
|
|
2008-05-14
|
|
philboard 0.5 - 'W1L3D4_konuoku.asp?id' SQL Injection
|
4 |
WEB
|
U238
|
|
2008-05-14
|
|
philboard 0.5 - 'W1L3D4_foruma_yeni_konu_ac.asp?forumid' SQL Injection
|
3 |
WEB
|
U238
|
|
2008-08-14
|
|
Links Pile - 'link.php' SQL Injection
|
2 |
WEB
|
HaCkeR_EgY
|
|
2008-05-14
|
|
PicsEngine 1.0 - 'index.php' Cross-Site Scripting
|
3 |
WEB
|
ZoRLu
|
|
2008-05-14
|
|
Horde Turba 3.1.7 - Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
Ivan Javier Sanchez
|
|
2014-02-20
|
|
Stark CRM 1.0 - Multiple Vulnerabilities
|
3 |
WEB
|
LiquidWorm
|
|
2014-02-20
|
|
Barracuda Firewall 6.1.0.016 - Multiple Vulnerabilities
|
4 |
WEB
|
Vulnerability-Lab
|
|
2008-05-13
|
|
Kalptaru Infotech Automated Link Exchange Portal - 'linking.page.php' SQL Injection
|
4 |
WEB
|
HaCkeR_EgY
|
|
2008-05-12
|
|
phpMyAgenda 2.1 - 'infoevent.php3' Remote File Inclusion
|
3 |
WEB
|
MajnOoNxHaCkEr
|
|
2008-05-12
|
|
Fusebox 5.5.1 - 'fusebox5.php' Remote File Inclusion
|
3 |
WEB
|
MajnOoNxHaCkEr
|
|
2008-05-12
|
|
Claroline 1.7.5 - Multiple Remote File Inclusions
|
3 |
WEB
|
MajnOoNxHaCkEr
|
|
2008-05-12
|
|
IBD Micro CMS 3.5 - 'microcms-admin-login.php' Multiple SQL Injections
|
3 |
WEB
|
SkyOut
|
|
2008-05-12
|
|
CyrixMED 1.4 - 'index.php' Cross-Site Scripting
|
3 |
WEB
|
ZoRLu
|
|
2008-05-12
|
|
PHPInstantGallery 2.0 - 'image.php' Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
ZoRLu
|
|
2008-05-12
|
|
PHPInstantGallery 2.0 - 'index.php?Gallery' Cross-Site Scripting
|
3 |
WEB
|
ZoRLu
|
|
2008-05-12
|
|
AJ Classifieds - 'index.php' SQL Injection
|
3 |
WEB
|
t0pP8uZz
|
|
2008-05-09
|
|
WordPress Plugin WP Photo Album - 'photo' SQL Injection
|
3 |
WEB
|
THE_MILLER
|
|
2008-05-10
|
|
OtherLogic - 'vocourse.php' SQL Injection
|
3 |
WEB
|
Breeeeh
|
|
2008-05-10
|
|
BlogPHP 2.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
David Sopas Ferreira
|
|
2008-05-09
|
|
cPanel 11.x - '/scripts2/listaccts?search' Cross-Site Scripting
|
4 |
WEB
|
Matteo Carli
|
|
2008-05-09
|
|
cPanel 11.x - '/scripts2/changeip?user' Cross-Site Scripting
|
3 |
WEB
|
Matteo Carli
|
|
2008-05-09
|
|
cPanel 11.x - '/scripts2/knowlegebase?issue' Cross-Site Scripting
|
3 |
WEB
|
Matteo Carli
|
|
2014-02-19
|
|
WordPress Plugin BP Group Documents 1.2.1 - Multiple Vulnerabilities
|
3 |
WEB
|
Tom Adams
|
|
2014-02-19
|
|
Barracuda Message Archiver 650 - Persistent Cross-Site Scripting
|
2 |
WEB
|
Vulnerability-Lab
|
|
2014-02-19
|
|
D-Link DIR-615 vE4 Firmware 5.10 - Cross-Site Request Forgery
|
3 |
WEB
|
Dhruv Shah
|
|
2014-02-19
|
|
Lotus Sametime 8.5.1 - Password Disclosure
|
3 |
WEB
|
Adriano Marcio Monteiro
|
|
2008-05-08
|
|
SAP Internet Transaction Server 6200.1017.50954.0 - Bu query String JavaScript Splicing Cross-Site S
|
3 |
WEB
|
Portcullis
|
|
2008-05-08
|
|
SAP Internet Transaction Server 6200.1017.50954.0 Bu (WGate) - 'wgate.dll?~service' Cross-Site Scrip
|
3 |
WEB
|
Portcullis
|
|
2008-05-07
|
|
Tux CMS 0.1 - Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
Hadi Kiamarsi
|
|
2008-05-07
|
|
Forum Rank System 6 - 'settings['locale']' Multiple Local File Inclusions
|
3 |
WEB
|
Matrix86
|
|
2008-05-06
|
|
Sphider 1.3.4 - 'query' Cross-Site Scripting
|
3 |
WEB
|
Christian Holler
|
|
2008-05-06
|
|
QTO File Manager 1.0 - 'qtofm.php' Arbitrary File Upload
|
3 |
WEB
|
CrAzY CrAcKeR
|
|
2008-05-06
|
|
RunCMS 1.6.1 - 'pm.class.php' Multiple SQL Injections
|
3 |
WEB
|
The:Paradox
|
|
2008-05-05
|
|
iGaming CMS 1.5 - 'poll_vote.php' SQL Injection
|
3 |
WEB
|
Cod3rZ
|
|
2008-05-05
|
|
BatmanPorTaL - 'profil.asp?id' SQL Injection
|
3 |
WEB
|
U238
|
|
2008-05-05
|
|
BatmanPorTaL - 'uyeadmin.asp?id' SQL Injection
|
3 |
WEB
|
U238
|
|
2008-05-05
|
|
osCommerce 2.1/2.2 - Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
David Sopas Ferreira
|
|
2008-05-05
|
|
Maian Uploader 4.0 - 'header.php' Cross-Site Scripting
|
3 |
WEB
|
Khashayar Fereidani
|
|
2008-05-05
|
|
Maian Uploader 4.0 - 'index.php' Cross-Site Scripting
|
3 |
WEB
|
Khashayar Fereidani
|
|
2008-05-05
|
|
Maian Uploader 4.0 - 'keywords' Cross-Site Scripting
|
3 |
WEB
|
Khashayar Fereidani
|
|
2008-05-05
|
|
LifeType 1.2.8 - 'admin.php' Cross-Site Scripting
|
3 |
WEB
|
Khashayar Fereidani
|
|
2008-05-05
|
|
TLM CMS 1.1 - 'index.php' Multiple SQL Injections
|
3 |
WEB
|
ZoRLu
|
|
2014-02-18
|
|
Open Web Analytics 1.5.4 - 'owa_email_address' SQL Injection
|
3 |
WEB
|
Dana James Traversie
|
|
2014-02-18
|
|
Concrete5 CMS 5.6.2.1 - 'index.php?cID' SQL Injection
|
3 |
WEB
|
killall-9
|
|
2014-02-18
|
|
Pina CMS - Multiple Vulnerabilities
|
3 |
WEB
|
Shadman Tanjim
|
|
2014-02-18
|
|
My PDF Creator & DE DM 1.4 iOS - Multiple Vulnerabilities
|
3 |
WEB
|
Vulnerability-Lab
|
|
2008-05-05
|
|
GEDCOM_TO_MYSQL - '/PHP/info.php' Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
ZoRLu
|
|
2008-05-05
|
|
GEDCOM_TO_MYSQL - '/PHP/index.php?nom_branche' Cross-Site Scripting
|
3 |
WEB
|
ZoRLu
|
|
2008-05-05
|
|
GEDCOM_TO_MYSQL - '/PHP/prenom.php' Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
ZoRLu
|
|
2008-05-03
|
|
SiteXS CMS 0.1.1 - 'upload.php' Arbitrary File Upload
|
3 |
WEB
|
Hadi Kiamarsi
|
|
2008-05-02
|
|
Chicomas 2.0.4 - 'index.php' Cross-Site Scripting
|
3 |
WEB
|
Hadi Kiamarsi
|
|
2008-05-02
|
|
Zen Cart 2008 - 'index.php?keyword' Cross-Site Scripting
|
3 |
WEB
|
Ivan Sanchez
|
|
2008-05-02
|
|
Zen Cart 2008 - 'index.php?keyword' SQL Injection
|
3 |
WEB
|
Ivan Sanchez
|
|
2008-05-02
|
|
Alumni 1.0.8/1.0.9 - 'index.php?year' Cross-Site Scripting
|
3 |
WEB
|
hadihadi
|
|
2008-05-02
|
|
Alumni 1.0.8/1.0.9 - 'info.php?id' SQL Injection
|
3 |
WEB
|
hadihadi
|
|
2008-05-02
|
|
EJ3 BlackBook 1.0 - 'header.php' Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
Khashayar Fereidani
|
|
2008-05-02
|
|
EJ3 BlackBook 1.0 - 'footer.php' Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
Khashayar Fereidani
|
|
2008-05-02
|
|
QT-cute QuickTalk Guestbook 1.6 - Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
ZoRLu
|
|
2008-05-02
|
|
KnowledgeQuest 2.6 - Administration Multiple Authentication Bypass Vulnerabilities
|
2 |
WEB
|
Cod3rZ
|
|
2008-05-01
|
|
MJGUEST 6.7 - 'QT 'mjguest.php' Cross-Site Scripting
|
3 |
WEB
|
Khashayar Fereidani
|
|
2008-05-01
|
|
VWar 1.6.1 R2 - Multiple Remote Vulnerabilities
|
3 |
WEB
|
Darren McDonald
|
|
2008-04-30
|
|
C-News 1.0.1 - 'install.php' Cross-Site Scripting
|
3 |
WEB
|
ZoRLu
|
|
2008-04-26
|
|
Siteman 2.0.x2 - 'module' Cross-Site Scripting / Local File Inclusion
|
3 |
WEB
|
Khashayar Fereidani
|
|
2008-04-26
|
|
Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusion
|
3 |
WEB
|
NoGe
|
|
2008-04-24
|
|
PHCDownload 1.1 - '/upload/install/index.php?step' Cross-Site Scripting
|
3 |
WEB
|
ZoRLu
|
|
2008-04-24
|
|
PHCDownload 1.1 - '/admin/index.php?hash' SQL Injection
|
3 |
WEB
|
ZoRLu
|
|
2008-04-24
|
|
Pixel Motion Blog - 'list_article.php' Cross-Site Scripting
|
2 |
WEB
|
ZoRLu
|
|
2008-04-24
|
|
PHP-Nuke DownloadsPlus Module - Arbitrary File Upload
|
3 |
WEB
|
ZoRLu
|
|
2008-04-24
|
|
Digital Hive 2.0 - 'base.php' Cross-Site Scripting
|
3 |
WEB
|
ZoRLu
|
|
2008-04-24
|
|
e107 CMS 0.7 - Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
ZoRLu
|
|
2008-04-23
|
|
Horde Webmail 1.0.6 - 'addevent.php' Cross-Site Scripting
|
3 |
WEB
|
Aria-Security Team
|
|
2014-02-16
|
|
File Hub 1.9.1 iOS - Multiple Vulnerabilities
|
3 |
WEB
|
Vulnerability-Lab
|
|
2014-02-16
|
|
mbDriveHD 1.0.7 iOS - Multiple Vulnerabilities
|
3 |
WEB
|
Vulnerability-Lab
|
|
2014-02-16
|
|
Office Assistant Pro 2.2.2 iOS - Local File Inclusion
|
3 |
WEB
|
Vulnerability-Lab
|
|
2014-02-16
|
|
Trendchip HG520 ADSL2+ Wireless Modem - Cross-Site Request Forgery
|
2 |
WEB
|
Dhruv Shah
|
|
2014-02-16
|
|
Dexter (CasinoLoader) Panel - SQL Injection
|
2 |
WEB
|
bwall
|
|
2008-04-22
|
|
S9Y Serendipity 1.3 - Referer HTTP Header Cross-Site Scripting
|
3 |
WEB
|
Hanno Boeck
|
|
2008-04-21
|
|
XOOPS 2.0.14 Article Module - 'article.php' SQL Injection
|
3 |
WEB
|
Cr@zy_King
|
|
2008-04-21
|
|
PortailPHP 2.0 - 'mod_search' Remote File Inclusion
|
1 |
WEB
|
ZoRLu
|
|
2008-04-21
|
|
SMF 1.1.4 - Audio CAPTCHA Security Bypass
|
3 |
WEB
|
Michael Brooks
|
|
2008-04-21
|
|
Advanced Electron Forum 1.0.6 - 'beg' Cross-Site Scripting
|
3 |
WEB
|
ZoRLu
|
|
2008-04-20
|
|
Host Directory PRO - Cookie Security Bypass
|
2 |
WEB
|
Crackers_Child
|
|
2008-04-19
|
|
XOOPS Recette 2.2 - 'detail.php' SQL Injection
|
3 |
WEB
|
S@BUN
|
|
2008-04-18
|
|
Azureus HTML WebUI 0.7.6 - Cross-Site Request Forgery
|
2 |
WEB
|
th3.r00k
|
|
2008-04-18
|
|
μTorrent (uTorrent) WebUI 0.310 Beta 2 - Cross-Site Request Forgery
|
3 |
WEB
|
th3.r00k
|
|
2008-04-18
|
|
TorrentFlux 2.3 - 'admin.php' Cross-Site Request Forgery (Add Admin)
|
3 |
WEB
|
Michael Brooks
|
|
2008-04-18
|
|
WordPress Core 2.3.3 - 'cat' Directory Traversal
|
3 |
WEB
|
Gerendi Sandor Attila
|
|
2008-04-18
|
|
Wikepage Opus 13 2007.2 - 'wiki' Cross-Site Scripting
|
3 |
WEB
|
Gerendi Sandor Attila
|
|
2008-04-18
|
|
TLM CMS 3.1 - Multiple SQL Injections
|
3 |
WEB
|
ZoRLu
|
|
2008-04-17
|
|
Cobalt 2.0 - 'adminler.asp' SQL Injection
|
3 |
WEB
|
U238
|
|
2008-04-17
|
|
EsContacts 1.0 - 'search.php?msg' Cross-Site Scripting
|
3 |
WEB
|
ZoRLu
|
|
2008-04-17
|
|
EsContacts 1.0 - 'login.php?msg' Cross-Site Scripting
|
3 |
WEB
|
ZoRLu
|
|
2008-04-17
|
|
EsContacts 1.0 - 'importer.php?msg' Cross-Site Scripting
|
3 |
WEB
|
ZoRLu
|
