Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2008-09-02   IDevSpot BizDirectory 2.04 - 'page' Cross-Site Scripting 38 WEB Am!r
2008-08-29   Full PHP Emlak Script - 'landsee.php' SQL Injection 36 WEB Hussin X
2008-09-01   GenPortal - 'buscarCat.php' Cross-Site Scripting 40 WEB sl4xUz
2008-09-01   vTiger CRM 5.0.4 - Multiple Cross-Site Scripting Vulnerabilities 42 WEB Fabian Fingerle
2008-08-29   dotProject 2.1.2 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities 39 WEB C1c4Tr1Z
2008-08-27   AbleSpace 1.0 - 'adv_cat.php' Cross-Site Scripting 36 WEB Bug Researchers Group
2008-08-26   Educe ASP Search Engine 1.5.6 - 'search.asp' Cross-Site Scripting 33 WEB JoCk3r
2008-08-26   MatterDaddy Market 1.1 - 'login.php' Cross-Site Scripting 37 WEB Sam Georgiou
2008-08-26   HPSystem Management Homepage (SMH) 2.1.12 - 'message.php' Cross-Site Scripting 37 WEB Luca Carettoni
2008-08-26   Smart Survey 1.0 - 'surveyresults.asp' Cross-Site Scripting 39 WEB Bug Researchers Group
2008-08-25   Bluemoon inc. PopnupBlog 3.30 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 37 WEB Lostmon
2008-08-25   PHP-Ultimate WebBoard 2.0 - 'admindel.php' Multiple Input Validation Vulnerabilities 38 WEB t0pP8uZz
2008-08-23   One-News - Multiple Input Validation Vulnerabilities 40 WEB suN8Hclf
2008-08-22   PicturesPro Photo Cart 3.9 - Search Cross-Site Scripting 38 WEB Tyler Trioxide
2008-08-22   Accellion File Transfer - Multiple Cross-Site Scripting Vulnerabilities 37 WEB Eric Beaulieu
2008-08-21   TimeTrex Time 2.2 and Attendance Module - Multiple Cross-Site Scripting Vulnerabilities 37 WEB Doz
2008-08-21   FAR-PHP 1.0 - 'index.php' Local File Inclusion 39 WEB Beenu Arora
2008-08-20   vBulletin 3.6.10/3.7.2 - '$newpm[title]' Cross-Site Scripting 40 WEB Core Security
2008-08-21   Simasy CMS - 'id' SQL Injection 38 WEB r45c4l
2008-08-21   Scripts4Profit DXShopCart 4.30 - 'pid' SQL Injection 39 WEB Hussin X
2014-03-15   Church Edit - Blind SQL Injection 37 WEB ThatIcyChill
2008-06-19   Folder Lock 5.9.5 - Weak Password Encryption Local Information Disclosure 37 WEB Charalambous Glafkos
2008-08-20   YourFreeWorld Ad-Exchange Script - 'id' SQL Injection 42 WEB Hussin X
2008-08-19   Vanilla 1.1.4 - HTML Injection / Cross-Site Scripting 39 WEB GulfTech Security
2008-08-18   K Web CMS - 'sayfala.asp' SQL Injection 38 WEB baltazar
2008-08-18   itMedia - Multiple SQL Injections 37 WEB baltazar
2014-03-14   Synology DSM 4.3-3827 - 'article.php' Blind SQL Injection 41 WEB Michael Wisniewski
2008-08-18   Ovidentia 6.6.5 - 'index.php' Cross-Site Scripting 35 WEB ThE dE@Th
2008-08-18   NewsHOWLER 1.03 - Cookie Data SQL Injection 43 WEB Khashayar Fereidani
2008-08-18   Freeway 1.4.1.171 - '/templates/Freeway/mainpage_modules/mainpage.php?language' Traversal Local File 49 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/templates/Freeway/boxes/whos_online.php?language' Traversal Local File Inclusi 38 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/templates/Freeway/boxes/loginbox.php?language' Traversal Local File Inclusion 35 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/templates/Freeway/boxes/card1.php?language' Traversal Local File Inclusion 39 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/includes/modules/newsdesk/newsdesk_article_require.php?language' Traversal Loc 42 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/includes/modules/faqdesk/faqdesk_article_require.php?language' Traversal Local 39 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/french/account_newsletters.php?language' Traversal Local File Inclusion 40 WEB Digital Security Research Group
2014-03-14   Fonality trixbox - 'mac' Remote Code Injection 38 WEB i-Hmx
2008-08-18   Freeway 1.4.1.171 - '/english/account.php?language' Traversal Local File Inclusion 44 WEB Digital Security Research Group
2008-08-18   AWStats 6.8 - 'AWStats.pl' Cross-Site Scripting 34 WEB Morgan Todd
2008-08-15   PromoProducts - 'view_product.php' Multiple SQL Injections 34 WEB baltazar
2008-08-15   FipsCMS 2.1 - 'neu.asp' SQL Injection 44 WEB U238
2008-08-15   FlexCMS 2.5 - 'inc-core-admin-editor-previouscolorsjs.php' Cross-Site Scripting 43 WEB Dr.Crash
2008-08-15   Mambo Open Source 4.6.2 - '/mambots/editors/mostlyce/' PHP/connector.php?Query String Cross-Site Scr 41 WEB Khashayar Fereidani
2008-08-15   Mambo Open Source 4.6.2 - '/administrator/popups/index3pop.php?mosConfig_sitename' Cross-Site Script 40 WEB Khashayar Fereidani
2008-08-15   PHPizabi 0.848b C1 HP3 - 'id' Local File Inclusion 42 WEB Lostmon
2008-08-15   mUnky 0.01 - 'index.php' Remote Code Execution 39 WEB Khashayar Fereidani
2008-08-14   Openfire 3.5.2 - 'login.jsp' Cross-Site Scripting 36 WEB Daniel Henninger
2008-08-13   Nortel Networks SRG V16 - 'modules.php?module' Traversal Local File Inclusion 39 WEB CraCkEr
2008-08-13   Nortel Networks SRG V16 - 'admin_modules.php?module' Traversal Local File Inclusion 46 WEB CraCkEr
2008-08-13   Nortel Networks SRG V16 - 'modules.php?module' Cross-Site Scripting 43 WEB CraCkEr
2008-08-13   YapBB 1.2 - 'class_yapbbcooker.php' Remote File Inclusion 43 WEB CraCkEr
2008-08-13   Nukeviet 2.0 - '/admin/login.php' Cookie Authentication Bypass 41 WEB Ciph3r
2008-08-13   PHP-Fusion 4.01 - 'readmore.php' SQL Injection 42 WEB Rake
2008-08-13   PHP Realty - 'dpage.php' SQL Injection 40 WEB CraCkEr
2008-08-13   Freeway 1.4.1 - Multiple Input Validation Vulnerabilities 40 WEB Digital Security Research Group
2014-03-13   Fonality trixbox - SQL Injection 40 WEB Sc4nX
2014-03-13   Ubee EVW3200 - Cross-Site Request Forgery 43 WEB Jeroen - IT Nerdbox
2014-03-13   Ubee EVW3200 - Multiple Persistent Cross-Site Scripting Vulnerabilities 40 WEB Jeroen - IT Nerdbox
2008-08-13   Meet#Web 0.8 - 'RegRightsResource.class.php?root_path' Remote File Inclusion 42 WEB Rakesh S
2008-08-13   Meet#Web 0.8 - 'RegResource.class.php?root_path' Remote File Inclusion 45 WEB Rakesh S
2008-08-13   Meet#Web 0.8 - 'RegForm.class.php?root_path' Remote File Inclusion 40 WEB Rakesh S
2008-08-13   Meet#Web 0.8 - 'ManagerRightsResource.class.php?root_path' Remote File Inclusion 40 WEB Rakesh S
2008-08-13   Meet#Web 0.8 - 'ManagerResource.class.php?root_path' Remote File Inclusion 39 WEB Rakesh S
2008-08-13   Meet#Web 0.8 - 'modules.php?root_path' Remote File Inclusion 41 WEB Rakesh S
2008-08-12   IDevSpot PHPLinkExchange 1.01/1.02 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 39 WEB sl4xUz
2008-08-12   Datafeed Studio 1.6.2 - 'search.php' Cross-Site Scripting 44 WEB Bug Researchers Group
2008-08-12   Datafeed Studio - 'patch.php' Remote File Inclusion 39 WEB Bug Researchers Group
2008-08-11   Kayako SupportSuite 3.x - '/staff/index.php?customfieldlinkid' SQL Injection 43 WEB GulfTech Security
2008-08-11   Kayako SupportSuite 3.x - 'index.php?filter' Cross-Site Scripting 43 WEB GulfTech Security
2008-08-11   Kayako SupportSuite 3.x - '/visitor/index.php?sessionid' Cross-Site Scripting 43 WEB GulfTech Security
2008-08-11   Domain Group Network GooCMS 1.02 - 'index.php' Cross-Site Scripting 43 WEB ahmadbaby
2008-08-08   Linkspider 1.08 - Multiple Remote File Inclusions 44 WEB Rohit Bansal
2008-08-09   RMSOFT Downloads Plus - '/(rmdp) 1.5/1.7 Module for XOOPS down.php?id' Cross-Site Scripting 41 WEB Lostmon
2008-08-09   RMSOFT Downloads Plus - '/(rmdp) 1.5/1.7 Module for XOOPS search.php?key' Cross-Site Scripting 42 WEB Lostmon
2014-03-12   FreePBX 2.11.0 - Remote Command Execution 43 WEB @0x00string
2014-03-12   vTiger CRM 5.4.0/6.0 RC/6.0.0 GA - 'browse.php' Local File Inclusion 45 WEB Portcullis
2014-03-12   Procentia IntelliPen 1.1.12.1520 - 'data.aspx' Blind SQL Injection 42 WEB Portcullis
2014-03-12   LuxCal 3.2.2 - Cross-Site Request Forgery / Blind SQL Injection 40 WEB TUNISIAN CYBER
2014-03-12   GNUPanel 0.3.5_R4 - Multiple Vulnerabilities 37 WEB Necmettin COSKUN
2014-03-12   ZYXEL P-660HN-T1A Router - Authentication Bypass 39 WEB Michael Grifalconi
2008-08-09   Yogurt Social Network 3.2 rc1 Module for XOOPS - 'tribes.php?uid' Cross-Site Scripting 45 WEB Lostmon
2008-08-09   Yogurt Social Network 3.2 rc1 Module for XOOPS - 'index.php?uid' Cross-Site Scripting 46 WEB Lostmon
2008-08-09   Yogurt Social Network 3.2 rc1 Module for XOOPS - 'scrapbook.php?uid' Cross-Site Scripting 43 WEB Lostmon
2008-08-09   Yogurt Social Network 3.2 rc1 Module for XOOPS - 'album.php?uid' Cross-Site Scripting 51 WEB Lostmon
2008-08-09   Yogurt Social Network 3.2 rc1 Module for XOOPS - 'seutubo.php?uid' Cross-Site Scripting 44 WEB Lostmon
2008-08-09   Yogurt Social Network 3.2 rc1 Module for XOOPS - 'friends.php?uid' Cross-Site Scripting 42 WEB Lostmon
2008-08-09   RMSOFT MiniShop 1.0 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities 43 WEB Lostmon
2008-08-06   PHP-Nuke Kleinanzeigen Module - 'lid' SQL Injection 44 WEB Lovebug
2008-08-06   Kshop 2.22 - 'kshop_search.php' Cross-Site Scripting 47 WEB Lostmon
2008-08-06   WebmasterSite (Multiple Products) - Remote Command Execution 41 WEB otmorozok428
2008-08-06   Joomla! / Mambo Component com_utchat 0.2 - Multiple Remote File Inclusions 42 WEB by_casper41
2008-08-06   Quate CMS 0.3.4 - Multiple Cross-Site Scripting Vulnerabilities 47 WEB CraCkEr
2008-08-06   KAPhotoservice - 'search.asp?Filename' Cross-Site Scripting 41 WEB by_casper41
2008-08-06   KAPhotoservice - 'order.asp?page' Cross-Site Scripting 47 WEB by_casper41
2008-08-06   PHPKF-Portal 1.10 - 'anket_yonetim.php?portal_ayarlarportal_dili' Traversal Local File Inclusion 41 WEB KnocKout
2008-08-06   PHPKF-Portal 1.10 - 'baslik.php?tema_dizin' Traversal Local File Inclusion 43 WEB KnocKout
2008-08-06   Battle.net Clan Script 1.5.x - 'index.php' Multiple SQL Injections 49 WEB Khashayar Fereidani
2008-08-06   Chupix CMS Contact Module 0.1 - 'index.php' Multiple Local File Inclusions 47 WEB casper41
2008-08-05   POWERGAP ShopSystem - 's03.php' SQL Injection 41 WEB Rohit Bansal
2008-08-05   Softbiz Image Gallery - 'browsecats.php?msg' Cross-Site Scripting 44 WEB sl4xUz
2008-08-05   Softbiz Image Gallery - 'cleanup.php?msg' Cross-Site Scripting 45 WEB sl4xUz
2008-08-05   Softbiz Image Gallery - 'changepassword.php?msg' Cross-Site Scripting 42 WEB sl4xUz
2008-08-05   Softbiz Image Gallery - 'config.php?msg' Cross-Site Scripting 45 WEB sl4xUz
2008-08-05   Softbiz Image Gallery - 'adminhome.php?msg' Cross-Site Scripting 40 WEB sl4xUz
2008-08-05   Softbiz Image Gallery - 'image_desc.php?latest' Cross-Site Scripting 42 WEB sl4xUz
2008-08-05   Softbiz Image Gallery - 'suggest_image.php' Multiple Cross-Site Scripting Vulnerabilities 45 WEB sl4xUz
2008-08-05   Softbiz Image Gallery - 'images.php' Multiple Cross-Site Scripting Vulnerabilities 42 WEB sl4xUz
2008-08-05   Softbiz Image Gallery - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 42 WEB sl4xUz
2008-08-05   Crafty Syntax Live Help 2.14.6 - 'livehelp_js.php' Cross-Site Scripting 42 WEB CoRSaNTuRK
2008-08-05   Pluck CMS 4.5.2 - Multiple Cross-Site Scripting Vulnerabilities 48 WEB Khashayar Fereidani
2014-03-10   ownCloud 4.0.x/4.5.x - 'upload.php?Filename' Remote Code Execution 41 WEB Portcullis
2014-03-10   Huawei E5331 MiFi Mobile Hotspot 21.344.11.00.414 - Multiple Vulnerabilities 47 WEB SEC Consult
2014-03-10   Kentico CMS 7.0.75 - User Information Disclosure 44 WEB Charlie Campbell & Lyndon Mendoza
2008-08-04   Pcshey Portal - 'kategori.asp' SQL Injection 41 WEB U238
2008-08-04   UNAK-CMS 1.5 - 'connector.php' Local File Inclusion 41 WEB Sina Yazdanmehr
2008-08-04   Meeting Room Booking System (MRBS) 1.2.6 - 'help.php' Cross-Site Scripting 44 WEB sl4xUz
2008-08-04   Meeting Room Booking System (MRBS) 1.2.6 - 'report.php' Cross-Site Scripting 48 WEB sl4xUz
2008-08-04   Meeting Room Booking System (MRBS) 1.2.6 - 'search.php' Cross-Site Scripting 43 WEB sl4xUz
2008-08-04   Meeting Room Booking System (MRBS) 1.2.6 - 'month.php' Cross-Site Scripting 42 WEB sl4xUz
2008-08-04   Meeting Room Booking System (MRBS) 1.2.6 - 'week.php' Cross-Site Scripting 43 WEB sl4xUz
2008-08-04   Meeting Room Booking System (MRBS) 1.2.6 - 'day.php' Cross-Site Scripting 40 WEB sl4xUz
2008-08-04   Keld PHP-MySQL News Script 0.7.1 - 'login.php' SQL Injection 39 WEB crimsoN_Loyd9
2008-08-02   Pligg CMS 9.9.5 - 'CAPTCHA' Registration Automation Security Bypass 42 WEB Micheal Brooks
2008-08-04   Homes 4 Sale - 'results.php' Cross-Site Scripting 49 WEB Ghost Hacker
2008-08-01   PHP-Nuke Book Catalog Module 1.0 - 'catid' SQL Injection 41 WEB H4ckCity Security Team