Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2008-12-08   PHPepperShop 1.4 - 'shop/Admin/shop_kunden_mgmt.php' Cross-Site Scripting 9 WEB th3.r00k.ieatpork
2008-12-08   PHPepperShop 1.4 - 'shop/kontakt.php' Cross-Site Scripting 9 WEB th3.r00k.ieatpork
2008-12-08   PHPepperShop 1.4 - 'index.php' Cross-Site Scripting 9 WEB th3.r00k.ieatpork
2008-12-08   PrestaShop 1.1 - 'order.php?PATH_INFO' Cross-Site Scripting 9 WEB th3.r00k.ieatpork
2008-12-08   PrestaShop 1.1 - '/admin/login.php?PATH_INFO' Cross-Site Scripting 7 WEB th3.r00k.ieatpork
2008-12-06   TWiki 4.x - 'URLPARAM' Cross-Site Scripting 8 WEB Marc Schoenefeld
2008-12-06   TWiki 4.x - 'SEARCH' Remote Command Execution 8 WEB Troy Bollinge
2014-04-01   Alienvault 4.5.0 - (Authenticated) SQL Injection (Metasploit) 8 WEB Brandon Perry
2008-12-04   PHPSTREET WebBoard 1.0 - 'show.php' SQL Injection 8 WEB CWH Underground
2008-12-04   RevSense 1.0 - SQL Injection / Cross-Site Scripting 8 WEB Pouya_Server
2008-12-03   Yappa-ng - Query String Cross-Site Scripting 8 WEB Pouya_Server
2008-12-03   Yappa-ng - 'index.php?album' Cross-Site Scripting 9 WEB Pouya_Server
2014-04-01   Horde Webmail 5.1 - Open Redirect 8 WEB felipe andrian
2008-12-02   Orkut Clone - 'profile_social.php?id' Cross-Site Scripting 9 WEB d3b4g
2008-12-02   Orkut Clone - 'profile_social.php?id' SQL Injection 8 WEB d3b4g
2008-12-02   Jbook - SQL Injection 8 WEB Pouya_Server
2008-12-02   Z1Exchange 1.0 - 'id' Cross-Site Scripting 8 WEB Pouya_Server
2008-12-02   Z1Exchange 1.0 - 'id' SQL Injection 9 WEB Pouya_Server
2008-12-02   Fantastico - 'index.php' Local File Inclusion 8 WEB Super-Crystal
2008-12-01   IBM Rational ClearCase 7/8 - Cross-Site Scripting 8 WEB IBM
2008-12-01   Pre ASP Job Board - 'emp_login.asp' Cross-Site Scripting 9 WEB Pouya_Server
2008-12-01   ASP Forum Script - 'default.asp' Query String Cross-Site Scripting 12 WEB Pouya_Server
2008-12-01   ASP Forum Script - 'messages.asp?forum_id' Cross-Site Scripting 8 WEB Pouya_Server
2008-12-01   ASP Forum Script - 'new_message.asp?forum_id' Cross-Site Scripting 9 WEB Pouya_Server
2008-12-01   ASP Forum Script - 'messages.asp?message_id' SQL Injection 10 WEB Pouya_Server
2008-12-01   PHP JOBWEBSITE PRO - 'forgot.php' Cross-Site Scripting 11 WEB Pouya_Server
2008-12-01   PHP JOBWEBSITE PRO - 'adname' SQL Injection 7 WEB Pouya_Server
2014-03-31   EMC Cloud Tiering Appliance 10.0 - XML External Entity Arbitrary File Read (Metasploit) 7 WEB Brandon Perry
2014-03-31   WordPress Plugin Ajax Pagination 1.1 - Local File Inclusion 9 WEB Glyn Wintle
2014-03-31   Vanctech File Commander 1.1 iOS - Multiple Vulnerabilities 9 WEB Vulnerability-Lab
2014-03-31   PhotoWIFI Lite 1.0 iOS - Multiple Vulnerabilities 7 WEB Vulnerability-Lab
2008-12-01   Softbiz Classifieds Script - '/admin/index.php?msg' Cross-Site Scripting 8 WEB Pouya_Server
2008-12-01   Softbiz Classifieds Script - '/admin/adminhome.php?msg' Cross-Site Scripting 8 WEB Pouya_Server
2008-12-01   Softbiz Classifieds Script - 'lostpassword.php?msg' Cross-Site Scripting 8 WEB Pouya_Server
2008-12-01   Softbiz Classifieds Script - 'gallery.php?radio' Cross-Site Scripting 8 WEB Pouya_Server
2008-12-01   Softbiz Classifieds Script - '/advertisers/signinform.php?msg' Cross-Site Scripting 9 WEB Pouya_Server
2008-12-01   Softbiz Classifieds Script - 'showcategory.php?radio' Cross-Site Scripting 8 WEB Pouya_Server
2008-12-01   CodeToad ASP Shopping Cart Script - Cross-Site Scripting 8 WEB Pouya_Server
2008-12-01   Pre Classified Listings 1.0 - 'signup.asp' Cross-Site Scripting 9 WEB Pouya_Server
2008-12-01   Pre Classified Listings 1.0 - 'detailad.asp' SQL Injection 10 WEB Pouya_Server
2008-11-28   RakhiSoftware Shopping Cart - PHPSESSID Cookie Manipulation Full Path Disclosure 10 WEB Charalambous Glafkos
2008-11-28   RakhiSoftware Shopping Cart - 'product.php' Multiple Cross-Site Scripting Vulnerabilities 9 WEB Charalambous Glafkos
2008-11-29   Basic-CMS - 'q' Cross-Site Scripting 10 WEB Pouya_Server
2008-11-29   Venalsur Booking Centre 2.01 - Multiple Cross-Site Scripting Vulnerabilities 8 WEB Pouya_Server
2008-11-29   ParsBlogger - 'blog.asp' Cross-Site Scripting 9 WEB Pouya_Server
2008-11-29   Ocean12 Mailing LisManager Gold 2.04 - 'Email' SQL Injection 9 WEB Charalambous Glafkos
2008-11-29   Ocean12 (Multiple Products) - 'Admin_ID' SQL Injection 9 WEB Charalambous Glafkos
2008-11-29   Ocean12 FAQ Manager Pro - 'Keyword' Cross-Site Scripting 10 WEB Charalambous Glafkos
2008-11-27   AssoCIateD 1.4.4 - 'menu' Cross-Site Scripting 11 WEB CWH Underground
2008-11-24   COms - 'dynamic.php' Cross-Site Scripting 9 WEB Pouya_Server
2008-11-23   Pilot Group PG Roommate Finder Solution - SQL Injection 11 WEB ZoRLu
2008-11-20   Softbiz Classifieds Script - Cross-Site Scripting 12 WEB Vahid Ezraeil
2008-11-19   Easyedit CMS - 'news.php?intPageID' SQL Injection 12 WEB d3v1l
2008-11-19   Easyedit CMS - 'page.php?intPageID' SQL Injection 12 WEB d3v1l
2008-11-19   Easyedit CMS - 'subcategory.php?intSubCategoryID' SQL Injection 13 WEB d3v1l
2008-11-18   Kimson CMS - 'id' Cross-Site Scripting 12 WEB md.r00t
2008-11-17   BoutikOne CMS - 'search_query' Cross-Site Scripting 10 WEB d3v1l
2014-03-29   ASP-Nuke 2.0.7 - 'gotourl.asp' Open Redirect 12 WEB felipe andrian
2008-11-11   Sun Java System Identity Manager 6.0/7.x - Multiple Vulnerabilities 12 WEB Richard Brain
2008-11-10   Dizi Portali - 'film.asp' SQL Injection 13 WEB Kaan KAMIS
2008-11-10   IBM Tivoli Netcool Service Quality Manager - Cross-Site Scripting / HTML Injection 12 WEB Francesco Bianchino
2008-11-08   Zeeways Shaadi Clone 2.0 - Authentication Bypass (2) 11 WEB G4N0K
2008-11-09   MoinMoin 1.5.8/1.9 - Cross-Site Scripting / Information Disclosure 13 WEB Xia Shing Zee
2008-11-07   TurnkeyForms Software Directory 1.0 - SQL Injection / Cross-Site Scripting 13 WEB G4N0K
2008-11-06   CuteNews aj-fork - 'path' Remote File Inclusion 14 WEB DeltahackingTEAM
2014-03-28   iStArtApp FileXChange 6.2 iOS - Multiple Vulnerabilities 12 WEB Vulnerability-Lab
2008-11-04   DHCart 3.84 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities 11 WEB Lostmon
2008-11-04   firmCHANNEL Indoor & Outdoor Digital Signage 3.24 - Cross-Site Scripting 10 WEB Brad Antoniewicz
2008-11-02   YourFreeWorld Downline Builder Pro - 'tr.php' SQL Injection 11 WEB Hussin X
2014-03-27   Joomla! Component Kunena 3.0.4 - Persistent Cross-Site Scripting 9 WEB Qoppa
2014-03-27   LinEx - Password Reset 9 WEB N B Sri Harsha
2014-03-27   ePhone Disk 1.0.2 iOS - Multiple Vulnerabilities 11 WEB Vulnerability-Lab
2014-03-27   Easy FileManager 1.1 iOS - Multiple Vulnerabilities 12 WEB Vulnerability-Lab
2014-03-27   Lazybone Studios WiFi Music 1.0 iOS - Multiple Vulnerabilities 11 WEB Vulnerability-Lab
2014-03-27   FTP Drive + HTTP 1.0.4 iOS - Code Execution 9 WEB Vulnerability-Lab
2014-03-27   Dell SonicWALL EMail Security Appliance Application 7.4.5 - Multiple Vulnerabilities 12 WEB Vulnerability-Lab
2008-10-31   SpitFire Photo Pro - 'pages.php' SQL Injection 11 WEB Beenu Arora
2008-10-31   phpWebSite 0.9.3 - 'links.php' SQL Injection 10 WEB Beenu Arora
2008-10-29   Dorsa CMS - 'Default_.aspx' Cross-Site Scripting 10 WEB Pouya_Server
2008-10-29   Extrakt Framework 0.7 - 'index.php' Cross-Site Scripting 11 WEB ShockShadow
2014-03-26   IBM Tealeaf CX 8.8 - Remote OS Command Injection 10 WEB drone
2014-03-26   Allied Telesis AT-RG634A ADSL Broadband Router - Web Shell 9 WEB Groundworks Technologies
2008-10-29   KKE Info Media Kmita Gallery - Multiple Cross-Site Scripting Vulnerabilities 10 WEB cize0f
2008-10-28   KKE Info Media Kmita Catalogue 2 - 'search.php' Cross-Site Scripting 11 WEB cize0f
2008-10-28   Elkagroup Image Gallery 1.0 - 'view.php' SQL Injection 10 WEB G4N0K
2008-10-28   H&H Solutions WebSoccer 2.80 - 'id' SQL Injection 11 WEB d3v1l
2008-10-28   H2O-CMS 3.4 - PHP Code Injection / Cookie Authentication Bypass 9 WEB StAkeR
2008-10-27   Microsoft Internet Explorer 6 - ' ' Address Bar URI Spoofing 10 WEB Amit Klein
2008-10-28   PHP-Nuke Nuke League Module - 'tid' Cross-Site Scripting 12 WEB Ehsan_Hp200
2008-10-27   All In One 1.4 Control Panel - 'cp_polls_results.php' SQL Injection 9 WEB ExSploiters
2008-10-27   bcoos 1.0.13 - 'click.php' SQL Injection 10 WEB DeltahackingTEAM
2008-10-27   MyBB 1.4.2 - 'moderation.php' Cross-Site Scripting 10 WEB Kellanved
2008-10-27   Tandis CMS 2.5 - 'index.php' Multiple SQL Injections 10 WEB G4N0K
2008-10-27   bcoos 1.0.13 - 'common.php' Remote File Inclusion 10 WEB Cru3l.b0y
2008-10-27   phpMyAdmin 3.0.1 - 'pmd_pdf.php' Cross-Site Scripting 10 WEB Hadi Kiamarsi
2008-10-24   iPeGuestbook 1.7/2.0 - 'pg' Cross-Site Scripting 10 WEB Ghost Hacker
2008-10-23   Adam Wright HTMLTidy 0.5 - 'html-tidy-logic.php' Cross-Site Scripting 11 WEB ShockShadow
2008-10-23   ClipShare Pro 4.0 - 'fullscreen.php' Cross-Site Scripting 9 WEB ShockShadow
2008-10-23   Jetbox CMS 2.1 - 'liste' Cross-Site Scripting 9 WEB Omer Singer
2008-10-23   UC Gateway Investment SiteEngine 5.0 - 'announcements.php' SQL Injection 11 WEB xuanmumu
2008-10-23   UC Gateway Investment SiteEngine 5.0 - 'api.php' Open Redirection 9 WEB xuanmumu
2008-10-23   Osprey 1.0a4.1 - 'ListRecords.php' Multiple Remote File Inclusions 8 WEB BoZKuRTSeRDaR
2014-03-26   OpenCart 1.5.6.1 - 'openbay' Multiple SQL Injections 11 WEB Saadi Siddiqui
2014-03-26   InterWorx Control Panel 5.0.13 build 574 - 'xhr.php?i' SQL Injection 10 WEB Eric Flokstra
2014-03-25   qEngine CMS 6.0.0 - Multiple Vulnerabilities 9 WEB LiquidWorm
2014-03-25   Kemana Directory 1.5.6 - 'qvc_init()' Cookie Poisoning CAPTCHA Bypass 11 WEB LiquidWorm
2014-03-25   Kemana Directory 1.5.6 - Database Backup Disclosure 10 WEB LiquidWorm
2014-03-25   Kemana Directory 1.5.6 - 'task.php' Local File Inclusion 10 WEB LiquidWorm
2014-03-25   Kemana Directory 1.5.6 - Remote Code Execution 11 WEB LiquidWorm
2014-03-25   Kemana Directory 1.5.6 - kemana_admin_passwd Cookie User Password Hash Disclosure 9 WEB LiquidWorm
2014-03-25   Cart Engine 3.0.0 - Database Backup Disclosure 10 WEB LiquidWorm
2014-03-25   Cart Engine 3.0.0 - 'task.php' Local File Inclusion 10 WEB LiquidWorm
2014-03-25   Cart Engine 3.0.0 - Remote Code Execution 10 WEB LiquidWorm
2014-03-25   Getsimple CMS 3.3.1 - Persistent Cross-Site Scripting 7 WEB Jeroen - IT Nerdbox
2008-10-21   Bahar Download Script 2.0 - 'aspkat.asp' SQL Injection 8 WEB CyberGrup Lojistik
2008-10-21   PHPhotoGallery 0.92 - 'index.php' SQL Injection 8 WEB KnocKout
2008-10-21   Dizi Portali - 'diziler.asp' SQL Injection 9 WEB CyberGrup Lojistik
2008-10-20   PHP-Nuke Sarkilar Module - 'id' SQL Injection 8 WEB r45c4l
2008-10-20   Jetbox CMS 2.1 - '/admin/cms/nav.php?nav_id' SQL Injection 9 WEB Omer Singer
2008-10-20   Jetbox CMS 2.1 - '/admin/cms/images.php?orderby' SQL Injection 9 WEB Omer Singer
2008-10-17   FlashChat - 'connection.php' Role Filter Security Bypass 10 WEB eLiSiA
2008-10-16   Habari 0.5.1 - 'habari_username' Cross-Site Scripting 10 WEB faithlove
2008-10-14   SweetCMS 1.5.2 - 'index.php' SQL Injection 9 WEB Dapirates
2008-10-14   Elxis CMS 2008.1 - PHPSESSID Variable Session Fixation 7 WEB faithlove
2008-10-14   Elxis CMS 2008.1 - '/modules/mod_language.php' Multiple Cross-Site Scripting Vulnerabilities 9 WEB faithlove