Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2014-02-05   IBM Business Process Manager - User Account Reconfiguration 1 WEB 0in
2014-02-05   Booking Calendar - Multiple Vulnerabilities 1 WEB AtT4CKxT3rR0r1ST
2014-02-05   Eventy Online Scheduler 1.8 - Multiple Vulnerabilities 1 WEB AtT4CKxT3rR0r1ST
2014-02-05   TopicsViewer 3.0 Beta 1 - Multiple Vulnerabilities 0 WEB AtT4CKxT3rR0r1ST
2014-02-05   Job Site 1.0 - Multiple Vulnerabilities 1 WEB AtT4CKxT3rR0r1ST
2008-03-18   webSPELL 4.1.2 - 'index.php' Cross-Site Scripting 1 WEB n3w7u
2008-03-18   eForum 0.4 - 'busca.php' Multiple Cross-Site Scripting Vulnerabilities 1 WEB Omni
2008-03-18   phpStats 0.1_alpha - 'phpStats.php' Cross-Site Scripting 1 WEB Hanno Boeck
2008-03-17   Imperva SecureSphere 5.0 - Cross-Site Scripting 1 WEB Berezniski
2008-03-17   RSA WebID 5.3 - 'IISWebAgentIF.dll' Cross-Site Scripting 1 WEB quentin.berdugo
2008-03-17   Joomla! / Mambo Component com_guide - 'category' SQL Injection 1 WEB The-0utl4w
2008-03-17   Cfnetgs 0.24 - 'index.php' Cross-Site Scripting 1 WEB ZoRLu
2008-03-17   SNewsCMS 2.x - 'search.php' Cross-Site Scripting 1 WEB medprostuda.ru
2008-03-13   Virtual Support Office XP 2 - 'MyIssuesView.asp' SQL Injection 1 WEB The-0utl4w
2008-03-12   eWeather - 'chart' Cross-Site Scripting 1 WEB NetJackal
2008-03-12   Acyhost - 'index.php' Remote File Inclusion 1 WEB U238
2008-03-12   XOOPS MyTutorials Module 2.1 - 'printpage.php' SQL Injection 1 WEB S@BUN
2008-03-12   Jeebles Directory 2.9.60 - Multiple Cross-Site Scripting Vulnerabilities 1 WEB ZoRLu
2008-03-12   MAXdev My eGallery Module 3.04 - For Xoops 'gid' SQL Injection 1 WEB S@BUN
2008-03-12   Chris LaPointe Download Center 1.2 - 'search' Cross-Site Scripting 1 WEB ZoRLu
2008-03-12   Chris LaPointe Download Center 1.2 - 'category' Cross-Site Scripting 1 WEB ZoRLu
2008-03-12   Chris LaPointe Download Center 1.2 - login Action Multiple Cross-Site Scripting Vulnerabilities 1 WEB ZoRLu
2008-03-12   Travelsized CMS 0.4.1 - 'index.php' Multiple Local File Inclusions 1 WEB muuratsalo
2008-03-12   Uberghey CMS 0.3.1 - 'index.php' Multiple Local File Inclusions 1 WEB muuratsalo
2008-03-11   PHP-Nuke zClassifieds Module - 'cat' SQL Injection 2 WEB Lovebug
2008-03-11   PHP-Nuke NukeC30 3.0 Module - 'id_catg' SQL Injection 1 WEB Houssamix
2008-03-11   Joomla! / Mambo Component ensenanzas - 'id' SQL Injection 1 WEB The-0utl4w
2008-03-10   EncapsGallery 1.11.2 - 'catalog_watermark.php?file' Cross-Site Scripting 1 WEB ZoRLu
2008-03-10   EncapsGallery 1.11.2 - 'watermark.php?File' Cross-Site Scripting 1 WEB ZoRLu
2008-03-10   PHP-Nuke Hadith Module - 'cat' SQL Injection 1 WEB Lovebug
2008-03-10   Drake CMS 0.4.11 RC8 - 'd_root' Local File Inclusion 1 WEB THE_MILLER
2008-03-12   EasyImageCatalogue 1.31 - 'addcomment.php?d' Cross-Site Scripting 1 WEB ZoRLu
2008-03-12   EasyImageCatalogue 1.31 - 'describe.php?d' Cross-Site Scripting 1 WEB ZoRLu
2008-03-12   EasyImageCatalogue 1.31 - 'thumber.php?dir' Cross-Site Scripting 2 WEB ZoRLu
2008-03-12   EasyImageCatalogue 1.31 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 1 WEB ZoRLu
2008-03-10   Gallarific - Multiple Script Direct Request Authentication Bypass 1 WEB ZoRLu
2008-03-10   Gallarific - 'search.php?query' Cross-Site Scripting 1 WEB ZoRLu
2008-03-10   PHP-Nuke 4nAlbum Module 0.92 - 'pid' SQL Injection 1 WEB meloulisi
2008-03-09   Batchelor Media BM Classifieds - Multiple SQL Injections 1 WEB xcorpitx
2008-03-08   Alkacon OpenCMS 7.0.3 - 'logfileViewSettings.jsp?filePath.0' Arbitrary File Access 1 WEB nnposter
2008-03-08   Alkacon OpenCMS 7.0.3 - 'logfileViewSettings.jsp?filePath' Cross-Site Scripting 1 WEB nnposter
2008-03-07   Specimen Image Database - 'taxonservice.php?dir' Remote File Inclusion 1 WEB ZoRLu
2008-03-07   WordPress Core 2.3.2 - '/wp-admin/invites.php?to' Cross-Site Scripting 1 WEB Doz
2008-03-07   WordPress Core 2.3.2 - '/wp-admin/users.php?inviteemail' Cross-Site Scripting 1 WEB Doz
2008-03-07   ImageVue 1.7 - 'dirxml.php?path' Cross-Site Scripting 1 WEB ZoRLu
2008-03-07   ImageVue 1.7 - 'upload.php?path' Cross-Site Scripting 1 WEB ZoRLu
2008-03-07   ImageVue 1.7 - 'dir2.php?path' Cross-Site Scripting 2 WEB ZoRLu
2008-03-07   ImageVue 1.7 - 'popup.php?path' Cross-Site Scripting 2 WEB ZoRLu
2008-03-06   PHP-Nuke 4nChat Module 0.91 - 'roomid' SQL Injection 1 WEB meloulisi
2014-02-03   CiMe Citas Médicas - Multiple Vulnerabilities 2 WEB vinicius777
2008-03-06   PHP-Nuke KutubiSitte Module - 'kid' SQL Injection 1 WEB r080cy90r
2008-03-06   Yap Blog 1.1 - 'index.php' Remote File Inclusion 1 WEB THE_MILLER
2008-03-05   PHP-Nuke Yellow_Pages Module - 'cid' SQL Injection 0 WEB ZoRLu
2007-06-25   WebCT 4.1.5 - Email and Discussion Board Messages HTML Injection 1 WEB Lupton
2008-03-04   MG2 - 'list' Cross-Site Scripting 1 WEB Jose Carlos Norte
2008-03-04   PHP-Nuke 'Seminars' Module - 'Filename' Local File Inclusion 1 WEB The-0utl4w
2008-03-04   PHP-Nuke eGallery 3.0 Module - 'pid' SQL Injection 1 WEB Aria-Security Team
2014-02-01   MediaWiki 1.22.1 PdfHandler - Remote Code Execution 1 WEB @u0x
2008-03-03   TorrentTrader 1.08 - 'msg' HTML Injection 1 WEB Dominus
2008-03-03   Flyspray 0.9.9 - Information Disclosure/HTML Injection / Cross-Site Scripting 1 WEB Digital Security Research Group
2008-03-03   KC Wiki 1.0 - '/simplest/wiki.php?page' Remote File Inclusion 1 WEB muuratsalo
2008-03-03   KC Wiki 1.0 - '/minimal/wiki.php?page' Remote File Inclusion 1 WEB muuratsalo
2008-03-01   PHP-Nuke Johannes Hass 'Gaestebuch 2.2 Module - 'id' SQL Injection 1 WEB TurkishWarriorr
2008-03-01   Heathco Software h2desk - Multiple Information Disclosure Vulnerabilities 1 WEB joseph.giron13
2008-02-29   PHPMyTourney 2 - '/tourney/index.php' Remote File Inclusion 1 WEB HACKERS PAL
2008-02-29   Simple PHP Scripts Gallery 0.x - 'index.php' Cross-Site Scripting 1 WEB ZoRLu
2008-02-29   Centreon 1.4.2.3 - 'index.php' Local File Inclusion 1 WEB JosS
2008-02-29   NetOffice Dwins 1.3 - Authentication Bypass / Arbitrary File Upload 1 WEB RawSecurity.org
2008-02-28   XRms 1.99.2 - CRM 'msg' Cross-Site Scripting 1 WEB vijayv
2008-02-28   Flicks Software AuthentiX 6.3b1 - 'Username' Multiple Cross-Site Scripting Vulnerabilities 2 WEB William Hicks
2008-02-28   Juniper Networks Secure Access 2000 Web - Root Full Path Disclosure 1 WEB Richard Brain
2008-02-21   Plume CMS 1.2.2 - '/manager/xmedia.php' Cross-Site Scripting 1 WEB Omer Singer
2008-02-25   Joomla! / Mambo Component com_inter - 'id' SQL Injection 1 WEB The-0utl4w
2008-02-25   Alkacon OpenCMS 7.0.3 - 'tree_files.jsp' Cross-Site Scripting 2 WEB nnposter
2008-02-25   PHP-Nuke Sell Module - 'cid' SQL Injection 1 WEB Aria-Security Team
2008-02-25   Galore Simple Shop 3.1 - 'section' SQL Injection 1 WEB S@BUN
2008-02-25   Joomla! / Mambo Component com_wines 1.0 - 'id' SQL Injection 1 WEB S@BUN
2008-02-25   Softbiz Jokes and Funny Pictures Script - 'sbcat_id' SQL Injection 1 WEB -=Mizo=-
2008-02-25   Gary's Cookbook 3.0 - 'id' SQL Injection 1 WEB S@BUN
2008-02-25   Joomla! / Mambo Component com_blog - 'pid' SQL Injection 1 WEB Aria-Security Team
2008-02-25   Joomla! / Mambo Component com_publication - 'pid' SQL Injection 1 WEB Aria-Security Team
2008-02-23   AuraCMS 2.2 - 'lihatberita' Module SQL Injection 1 WEB S@BUN
2008-02-23   PHP-Nuke Gallery 1.3 Module - 'artid' SQL Injection 1 WEB S@BUN
2008-02-23   Joomla! / Mambo Component com_hello_world - 'id' SQL Injection 1 WEB S@BUN
2008-02-23   PHP-Nuke Recipe Module 1.3 - 'recipeid' SQL Injection 1 WEB S@BUN
2008-02-22   Citrix Metaframe Web Manager - 'login.asp' Cross-Site Scripting 1 WEB Handrix
2008-02-21   XOOPS 'prayerlist' Module - 'cid' SQL Injection 2 WEB S@BUN
2008-02-21   PHP-Nuke Downloads Module - 'sid' SQL Injection 2 WEB S@BUN
2008-02-21   XOOPS Tiny Event 1.01 - 'print' Option SQL Injection 1 WEB S@BUN
2008-02-21   PHP-Nuke Classifieds Module - 'Details' SQL Injection 1 WEB S@BUN
2008-02-21   Joomla! / Mambo Component Referenzen - 'id' SQL Injection 1 WEB S@BUN
2008-02-21   Eagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 - 'GradebookStuScores.asp?GrdBk' SQ 1 WEB Arsalan Emamjomehkashan
2008-02-21   Eagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 - 'ClassList.asp?Term' SQL Injectio 2 WEB Arsalan Emamjomehkashan
2008-02-21   Eagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 - 'Labels.asp?Term' SQL Injection 1 WEB Arsalan Emamjomehkashan
2008-02-21   Eagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 - 'Comments.asp?FC' SQL Injection 1 WEB Arsalan Emamjomehkashan
2008-02-21   Joomla! / Mambo Component com_asortyment - 'katid' SQL Injection 1 WEB S@BUN
2008-02-21   Joomla! / Mambo Component com_most - 'secid' SQL Injection 1 WEB S@BUN
2008-02-20   Joomla! / Mambo Component com_Joomlavvz - 'id' SQL Injection 0 WEB S@BUN
2007-02-19   Spyce 2.1.3 - spyce/examples/automaton.spy Direct Request Error Message Information Disclosure 1 WEB Richard Brain
2007-02-19   Spyce 2.1.3 - '/spyce/examples/formtag.spy' Multiple Cross-Site Scripting Vulnerabilities 1 WEB Richard Brain
2007-02-19   Spyce 2.1.3 - 'spyce/examples/getpost.spy?Name' Cross-Site Scripting 1 WEB Richard Brain
2007-02-19   Spyce 2.1.3 - 'spyce/examples/request.spy?name' Cross-Site Scripting 0 WEB Richard Brain
2007-02-19   Spyce 2.1.3 - 'docs/examples/handlervalidate.spy?x' Cross-Site Scripting 1 WEB Richard Brain
2007-02-19   Spyce 2.1.3 - '/docs/examples/redirect.spy' Multiple Cross-Site Scripting Vulnerabilities 1 WEB Richard Brain
2014-01-29   pfSense 2.1 build 20130911-1816 - Directory Traversal 1 WEB @u0x
2014-01-29   ManageEngine Support Center Plus 7916 - Directory Traversal 1 WEB xistence
2014-01-29   A10 Networks Loadbalancer - Directory Traversal 1 WEB xistence
2014-01-29   SimplyShare 1.4 iOS - Multiple Vulnerabilities 1 WEB Vulnerability-Lab
2014-01-29   LinPHA 1.3.4 - Multiple Vulnerabilities 0 WEB killall-9
2008-02-19   PHP-Nuke Web_Links Module - 'cid' SQL Injection 1 WEB S@BUN
2008-02-19   XOOPS 'badliege' Module - 'id' SQL Injection 1 WEB S@BUN
2008-02-19   XOOPS 'seminars' Module - 'id' SQL Injection 1 WEB S@BUN
2008-02-19   XOOPS 'events' Module - 'id' SQL Injection 1 WEB S@BUN
2008-02-19   XOOPS 'vacatures' Module - 'cid' SQL Injection 1 WEB S@BUN
2008-02-19   Joomla! Component iJoomla! com_magazine - 'pageid' SQL Injection 0 WEB S@BUN
2008-02-19   Joomla! / Mambo Component com_genealogy - 'id' SQL Injection 0 WEB S@BUN
2008-02-19   Joomla! / Mambo Component com_formtool - 'catid' SQL Injection 0 WEB S@BUN
2008-02-19   Joomla! / Mambo Component com_iigcatalog - 'cat' SQL Injection 0 WEB S@BUN
2008-02-19   Joomla! / Mambo Component com_team - SQL Injection 0 WEB S@BUN
2008-02-19   Facile Forms 1.x - 'catid' SQL Injection 0 WEB S@BUN
2008-02-19   PHP-Nuke Sections Module - 'artid' SQL Injection 0 WEB S@BUN
2008-02-19   SmarterTools SmarterMail 4.3 - 'Subject' HTML Injection 0 WEB Juan Pablo Lopez Yacubian
2008-02-19   Google Hack Honeypot File Upload Manager 1.3 - 'delall' Unauthorized File Access 0 WEB Mr-m07
2008-02-19   Jinzora 2.7.5 - 'popup.php' Multiple Cross-Site Scripting Vulnerabilities 0 WEB Alexandr Polyakov
2008-02-19   Jinzora 2.7.5 - 'slim.php' Multiple Cross-Site Scripting Vulnerabilities 1 WEB Alexandr Polyakov