Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2014-01-14   PHPJabbers Appointment Scheduler 2.0 - Multiple Vulnerabilities 3 WEB HackXBack
2014-01-14   PHPJabbers Job Listing Script - Multiple Vulnerabilities 3 WEB HackXBack
2014-01-14   Auto Classifieds Script 2.0 - Cross-Site Request Forgery (Add Admin) 3 WEB HackXBack
2014-01-14   Feixun Wireless Router FWR-604H - Remote Code Execution 3 WEB Arash Abedian
2007-12-18   Mambo 4.6.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Beenu Arora
2007-12-17   PHP Security Framework - Multiple Input Validation Vulnerabilities 3 WEB DarkFig
2007-12-17   Neuron News 1.0 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities 3 WEB hadihadi & black.shadowes
2007-12-09   Flyspray 0.9.9 - Multiple Cross-Site Scripting Vulnerabilities 2 WEB KAWASHIMA Takahiro
2007-12-14   Black Sheep Web Software Form Tools 1.5 - Multiple Remote File Inclusions 4 WEB RoMaNcYxHaCkEr
2007-12-15   WordPress Core 2.3.1 - Unauthorized Post Access 2 WEB Michael Brooks
2007-12-15   phpRPG 0.8 - '/tmp' Directory PHPSESSID Cookie Session Hijacking 2 WEB Michael Brooks
2007-12-15   phPay 2.2.1 - Windows Installations Local File Inclusion 3 WEB Michael Brooks
2007-12-13   MKPortal 1.1 Gallery Module - SQL Injection 3 WEB Sw33t h4cK3r
2007-11-12   XOOPS 2.2.5 - 'register.php' Cross-Site Scripting 3 WEB Omer Singer
2007-11-10   PHP-Nuke 8.0 - 'autohtml.php' Local File Inclusion 3 WEB d3v1l
2007-11-10   Bitweaver 1.x/2.0 - '/search/index.php?highlight' SQL Injection 3 WEB Doz
2007-11-10   Bitweaver 1.x/2.0 - 'search/index.php' Cross-Site Scripting 3 WEB Doz
2007-11-10   Bitweaver 1.x/2.0 - 'users/register.php' Cross-Site Scripting 3 WEB Doz
2007-11-10   Roundcube Webmail 0.1 - CSS Expression Input Validation 3 WEB Tomas Kuliavas
2007-11-10   Falcon Series One 1.4.3 stable - Multiple Input Validation Vulnerabilities 4 WEB MhZ91
2007-12-10   E-Xoops 1.0.5/1.0.8 - '/modules/arcade/index.php?gid' SQL Injection 3 WEB Lostmon
2007-12-10   E-Xoops 1.0.5/1.0.8 - '/modules/banners/click.php?bid' SQL Injection 4 WEB Lostmon
2007-12-10   E-Xoops 1.0.5/1.0.8 - '/myalbum/ratephoto.php?lid' SQL Injection 3 WEB Lostmon
2014-01-13   DomPHP 0.83 - SQL Injection 3 WEB Houssamix
2014-01-12   DomPHP 0.83 - Local Directory Traversal 3 WEB Houssamix
2007-12-10   E-Xoops 1.0.5/1.0.8 - '/mysections/ratefile.php?lid' SQL Injection 3 WEB Lostmon
2007-12-10   E-Xoops 1.0.5/1.0.8 - '/mydownloads/ratefile.php?lid' SQL Injection 3 WEB Lostmon
2007-12-10   E-Xoops 1.0.5/1.0.8 - '/adresses/ratefile.php?lid' SQL Injection 3 WEB Lostmon
2007-12-10   E-Xoops 1.0.5/1.0.8 - '/mylinks/ratelink.php?lid' SQL Injection 3 WEB Lostmon
2007-12-10   bttlxe Forum 2.0 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities 2 WEB Mormoroth
2007-12-10   SquirrelMail G/PGP Encryption Plugin 2.0/2.1 - Access Validation / Input Validation 2 WEB Tomas Kuliavas
2007-12-10   webSPELL 4.1.2 - 'calendar.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Brainhead
2007-12-10   webSPELL 4.1.2 - 'usergallery.php?galleryID' Cross-Site Scripting 3 WEB Brainhead
2007-12-07   WebDoc 3.0 - Multiple SQL Injections 3 WEB Chrysalid
2007-12-15   wwwstats 3.21 - 'Clickstats.php' Multiple HTML Injection Vulnerabilities 2 WEB Jesus Olmos Gonzalez
2007-12-06   OpenNewsletter 2.5 - 'Compose.php' Cross-Site Scripting 2 WEB Manu
2007-12-06   Kayako SupportSuite 3.0.32 - 'PHP_SELF Trigger_Error' Function Cross-Site Scripting 3 WEB imei
2007-12-05   VisualShapers EZContents 1.4.5 - File Disclosure 3 WEB p4imi0
2007-12-05   Joomla! Component com_search 1.5 RC3 - 'index.php' Multiple SQL Injections 3 WEB beenudel1986
2007-12-05   Joomla! Component Content 1.5 RC3 - 'view' SQL Injection 3 WEB beenudel1986
2007-12-04   phpMyChat 0.14.5 - '/chat/users_popupL.php3' Multiple Cross-Site Scripting Vulnerabilities 3 WEB beenudel1986
2007-12-04   phpMyChat 0.14.5 - 'chat/deluser.php3?LIMIT' Cross-Site Scripting 3 WEB beenudel1986
2007-12-04   Absolute News Manager .NET 5.1 - 'getpath.aspx' Direct Request Error Message Information 3 WEB Adrian Pastor
2007-12-04   Absolute News Manager .NET 5.1 - '/pages/default.aspx?template' Cross-Site Scripting 2 WEB Adrian Pastor
2007-12-04   Absolute News Manager .NET 5.1 - 'xlaabsolutenm.aspx?rmore' Cross-Site Scripting 3 WEB Adrian Pastor
2007-12-04   Absolute News Manager .NET 5.1 - 'xlaabsolutenm.aspx' Multiple SQL Injections 3 WEB Adrian Pastor
2007-12-04   Absolute News Manager .NET 5.1 - '/pages/default.aspx?template' Remote File Access 3 WEB Adrian Pastor
2007-11-30   bcoos 1.0.10 - 'ratefile.php' SQL Injection 3 WEB Lostmon
2007-11-30   Ossigeno CMS 2.2_pre1 - '/ossigeno_modules/ossigeno-catalogo/xax/ossigeno/catalogo/common.php?ossige 3 WEB ShAy6oOoN
2007-11-30   Ossigeno CMS 2.2_pre1 - '/upload/xax/ossigeno/admin/uninstall_module.php?level' Remote File Inclusio 3 WEB ShAy6oOoN
2007-11-30   Ossigeno CMS 2.2_pre1 - '/upload/xax/ossigeno/admin/install_module.php?level' Remote File Inclusion 3 WEB ShAy6oOoN
2007-11-30   Ossigeno CMS 2.2_pre1 - '/upload/xax/admin/patch/index.php?level' Remote File Inclusion 3 WEB ShAy6oOoN
2007-11-30   Ossigeno CMS 2.2_pre1 - '/upload/xax/admin/modules/uninstall_module.php?level' Remote File Inclusion 3 WEB ShAy6oOoN
2007-11-30   Ossigeno CMS 2.2_pre1 - '/upload/xax/admin/modules/install_module.php?level' Remote File Inclusion 3 WEB ShAy6oOoN
2007-11-28   bcoos 1.0.10 - 'ratelink.php' SQL Injection 3 WEB Lostmon
2007-11-28   bcoos 1.0.10 - 'ratephoto.php' SQL Injection 3 WEB Lostmon
2007-11-28   BEA AquaLogic Interaction 6.0/6.1 Plumtree Portal - Multiple Information Disclosure Vulnerabilities 3 WEB Adrian Pastor
2007-11-27   p.mapper 3.2 beta3 - '/plugins/export/mc_table.php?_SESSION[PM_INCPHP]' Remote File Inclusion 4 WEB ShAy6oOoN
2007-11-27   p.mapper 3.2 beta3 - '/incPHP/globals.php?_SESSION[PM_INCPHP]' Remote File Inclusion 2 WEB ShAy6oOoN
2007-11-27   ht://Dig 3.2 - Htsearch Cross-Site Scripting 3 WEB Michael Skibbe
2007-11-27   Liferay Portal 4.3.1 - Forgot-Password Cross-Site Scripting 3 WEB Joshua Morin
2007-11-26   Tilde 4.0 - 'Aarstal' Cross-Site Scripting 3 WEB KiNgOfThEwOrLd
2007-11-26   FMDeluxe 2.1 - 'index.php' Cross-Site Scripting 3 WEB JosS
2007-11-26   SimpleGallery 0.1.3 - 'index.php' Cross-Site Scripting 3 WEB JosS
2007-11-26   Proverbs Web Calendar 1.1 - 'Password' SQL Injection 3 WEB JosS
2007-11-26   GWExtranet 3.0 - 'Scp.dll' Multiple HTML Injection Vulnerabilities 3 WEB Doz
2007-11-26   GOUAE DWD Realty - 'Password' SQL Injection 3 WEB Aria-Security Team
2007-11-26   PHPSlideShow 0.9.9 - 'Directory' Cross-Site Scripting 3 WEB Jose Luis Gongora Fernandez
2007-11-24   VBTube 1.1 - Search Cross-Site Scripting 3 WEB Crackers_Child
2007-11-24   CoolShot E-Lite POS 1.0 - Login SQL Injection 3 WEB Aria-Security Team
2007-11-23   Bandersnatch 0.4 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Tim Brown
2007-11-23   FooSun - 'Api_Response.asp' SQL Injection 2 WEB flyh4t
2007-11-22   MySpace Scripts Poll Creator - 'index.php' HTML Injection 3 WEB Doz
2007-11-21   E-vanced Solutions E-vents 5.0 - Multiple Input Validation Vulnerabilities 3 WEB joseph.giron13
2007-11-21   GWExtranet - Multiple Directory Traversal Vulnerabilities 3 WEB joseph.giron13
2007-11-21   VUNET Case Manager 3.4 - 'default.asp' SQL Injection 4 WEB The-0utl4w
2007-11-21   VUNET Mass Mailer - 'default.asp' SQL Injection 3 WEB Aria-Security Team
2007-11-21   Underground CMS 1.x - 'Search.Cache.Inc.php' Backdoor Access 2 WEB D4m14n
2014-01-07   Cubic CMS - Multiple Vulnerabilities 3 WEB Eugenio Delfa
2014-01-07   Middle School Homework Page 1.3 Beta 1 - Multiple Vulnerabilities 3 WEB AtT4CKxT3rR0r1ST
2007-11-19   Click&BaneX - 'Details.asp' SQL Injection 3 WEB Aria-Security Team
2007-11-19   Citrix Netscaler 8.0 build 47.8 - Generic_API_Call.pl Cross-Site Scripting 3 WEB nnposter
2007-11-17   JiRo's Banner System 2.0 - 'login.asp' Multiple SQL Injections 3 WEB Aria-Security Team
2007-11-16   Liferay Portal 4.1 Login Script - Cross-Site Scripting 3 WEB Adrian Pastor
2007-11-14   AIDA Web - Frame.HTML Multiple Unauthorized Access Vulnerabilities 3 WEB MC Iglo
2007-11-14   CONTENTCustomizer 3.1 - 'Dialog.php' Unauthorized Access 3 WEB d3hydr8
2007-11-13   WordPress Plugin WP-SlimStat 0.9.2 - Cross-Site Scripting 3 WEB Fracesco Vaj
2007-11-13   VTLS Web Gateway 48.1 - 'Searchtype' Cross-Site Scripting 3 WEB Jesus Olmos Gonzalez
2007-11-12   X7 Chat 2.0.4 - 'upgradev1.php' Cross-Site Scripting 3 WEB ShAy6oOoN
2007-11-12   X7 Chat 2.0.4 - 'frame.php' Cross-Site Scripting 3 WEB ShAy6oOoN
2007-08-27   AutoIndex PHP Script 2.2.2 - 'PHP_SELF index.php' Cross-Site Scripting 3 WEB L4teral
2007-11-12   Miro Broadcast Machine 0.9.9 - 'login.php' Cross-Site Scripting 3 WEB Hanno Boeck
2007-11-12   PHP-Nuke Advertising Module 0.9 - 'modules.php' SQL Injection 4 WEB 0x90
2007-11-09   XOOPS 2.0.17.1 Mylinks Module - 'Brokenlink.php' SQL Injection 3 WEB root@hanicker.it
2007-11-08   Rapid Classified - 'AgencyCatResult.asp' SQL Injection 3 WEB The-0utl4w
2007-11-07   Computer Associates SiteMinder - Web Agent Smpwservices.FCC Cross-Site Scripting 3 WEB Giuseppe Gottardi
2007-11-06   Weblord.it MS-TopSites - Unauthorized Access / HTML Injection 3 WEB 0x90
2007-11-05   i-Gallery 3.4 - 'igallery.asp' Remote Information Disclosure 3 WEB hackerbinhphuoc
2007-11-05   easyGB 2.1.1 - 'index.php' Local File Inclusion 3 WEB h4ck3r
2007-11-05   JLMForo System - 'Buscado.php' Cross-Site Scripting 3 WEB Jose Luis Gongora Fernandez
2007-11-05   E-Vendejo 0.2 - 'Articles.php' SQL Injection 3 WEB r00t
2007-11-05   Galmeta Post 0.2 - 'Upload_Config.php' Remote File Inclusion 3 WEB arfis project
2007-11-03   PHP Helpdesk 0.6.16 - 'index.php' Local File Inclusion 3 WEB joseph.giron13
2007-11-02   Helios Calendar 1.1/1.2 - 'admin/index.php' Cross-Site Scripting 3 WEB Ivan Sanchez
2007-10-17   phpMyAdmin 2.11.1 - 'Server_Status.php' Cross-Site Scripting 1 WEB Omer Singer
2007-11-01   CONTENTCustomizer 3.1 - 'Dialog.php' Information Disclosure 3 WEB d3hydr8
2007-11-01   Synergiser 1.2 - 'index.php' Local File Inclusion 3 WEB KiNgOfThEwOrLd
2014-01-06   Seagate BlackArmor NAS sg2000-2000.1331 - Multiple Persistent Cross-Site Scripting Vulnerabilities 3 WEB Jeroen - IT Nerdbox
2014-01-06   Seagate BlackArmor NAS sg2000-2000.1331 - Cross-Site Request Forgery 3 WEB Jeroen - IT Nerdbox
2014-01-06   Seagate BlackArmor NAS sg2000-2000.1331 - Remote Command Execution 3 WEB Jeroen - IT Nerdbox
2014-01-06   Seagate BlackArmor NAS - Privilege Escalation 3 WEB Jeroen - IT Nerdbox
2007-10-29   Saxon 5.4 - 'Example.php' SQL Injection 3 WEB netVigilance
2007-10-29   Saxon 5.4 - 'Menu.php' Cross-Site Scripting 3 WEB netVigilance
2007-10-29   Omnistar Live - 'KB.php' Cross-Site Scripting 3 WEB Doz
2007-10-29   Smart-Shop - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 3 WEB Doz
2007-10-29   WordPress Core 2.3 - 'Edit-Post-Rows.php' Cross-Site Scripting 3 WEB waraxe
2007-10-25   Multi-Forums - 'Directory.php' Multiple SQL Injections 3 WEB KiNgOfThEwOrLd
2007-10-25   Aleris Web Publishing Server 3.0 - 'Page.asp' SQL Injection 3 WEB joseph.giron13
2007-10-24   PHPbasic basicFramework 1.0 - 'Includes.php' Remote File Inclusion 3 WEB Alucar
2007-10-24   CodeWidgets Web Based Alpha Tabbed Address Book - 'index.asp' SQL Injection 2 WEB Aria-Security Team
2007-10-23   Korean GHBoard - 'Component/upload.jsp' Arbitrary File Upload 3 WEB Xcross87
2007-10-23   Korean GHBoard FlashUpload Component - 'download.jsp?name' Arbitrary File Access 3 WEB Xcross87
2007-10-23   Japanese PHP Gallery Hosting - Arbitrary File Upload 3 WEB Pete Houston
2007-10-22   Jeebles Technology Jeebles Directory 2.9.60 - 'download.php' Local File Inclusion 2 WEB hack2prison
2007-10-22   deeemm CMS (dmcms) 0.7 - 'index.php' SQL Injection 2 WEB Aria-Security Team