|
2007-05-17
|
|
WordPress Theme Redoable 1.2 - 'header.php?s' Cross-Site Scripting
|
4 |
WEB
|
John Martinelli
|
|
2007-05-17
|
|
VP-ASP Shopping Cart 6.50 - 'ShopContent.asp' Cross-Site Scripting
|
5 |
WEB
|
John Martinelli
|
|
2007-05-16
|
|
vBulletin 3.6.6 - 'calendar.php' HTML Injection
|
5 |
WEB
|
laurent gaffie
|
|
2007-05-15
|
|
Jetbox CMS 2.1 - view/supplynews Multiple Cross-Site Scripting Vulnerabilities
|
5 |
WEB
|
Mikhail Markin
|
|
2007-05-15
|
|
Jetbox CMS 2.1 - '/view/search/?path' Cross-Site Scripting
|
4 |
WEB
|
Mikhail Markin
|
|
2007-05-15
|
|
Jetbox CMS 2.1 Email - 'FormMail.php' Input Validation
|
5 |
WEB
|
Jesper Jurcenoks
|
|
2007-05-14
|
|
WordPress Plugin Akismet 2.1.3 - Cross-Site Scripting
|
4 |
WEB
|
David Kierznowski
|
|
2007-05-14
|
|
SonicBB 1.0 - Multiple SQL Injections
|
5 |
WEB
|
Jesper Jurcenoks
|
|
2013-12-04
|
|
Imagam iFiles 1.16.0 iOS - Multiple Web Vulnerabilities
|
5 |
WEB
|
Vulnerability-Lab
|
|
2007-05-14
|
|
SonicBB 1.0 - 'search.php' Cross-Site Scripting
|
4 |
WEB
|
Jesper Jurcenoks
|
|
2007-05-12
|
|
EQdkp 1.3.1 - Cross-Site Scripting
|
4 |
WEB
|
kefka
|
|
2007-05-12
|
|
CommuniGate Pro 5.1.8 - Web Mail HTML Injection
|
4 |
WEB
|
Alla Bezroutchko
|
|
2007-05-10
|
|
PHP Multi User Randomizer 2006.09.13 - 'Configure_Plugin.TPL.php' Cross-Site Scripting
|
4 |
WEB
|
the_Edit0r
|
|
2007-05-08
|
|
Advanced Guestbook 2.4.2 - 'Lang' Cookie Local File Inclusion
|
4 |
WEB
|
netVigilance
|
|
2013-12-03
|
|
Dokeos 2.2 RC2 - 'index.php?language' SQL Injection
|
4 |
WEB
|
High-Tech Bridge SA
|
|
2013-12-03
|
|
Chamilo Lms 1.9.6 - 'profile.php?password' SQL Injection
|
4 |
WEB
|
High-Tech Bridge SA
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'LocalizerLanguage.php?g_documentRoot' Remote File Inclusion
|
5 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'LocalizerConfig.php?g_documentRoot' Remote File Inclusion
|
4 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - '/implementation/Management/db_connect.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - '/implementation/Management/configuration.php?g_documentRoot' Remote File Inclusion
|
4 |
WEB
|
anonymous
|
|
2013-12-02
|
|
WordPress Plugin Formcraft - SQL Injection
|
3 |
WEB
|
Ashiyane Digital Security Team
|
|
2013-12-02
|
|
Photo Transfer Wifi 1.4.4 iOS - Multiple Web Vulnerabilities
|
4 |
WEB
|
Vulnerability-Lab
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'UserType.php?g_documentRoot' Remote File Inclusion
|
4 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'user.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'UrlType.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'topic.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'TimeUnit.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'template.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'SystemPref.php?g_documentRoot' Remote File Inclusion
|
2 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'SubscriptionSection.php?g_documentRoot' Remote File Inclusion
|
2 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'SubscriptionDefaultTime.php?g_documentRoot' Remote File Inclusion
|
2 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'Subscription.php?g_documentRoot' Remote File Inclusion
|
2 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'ShortURL.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'Section.php?g_documentRoot' Remote File Inclusion
|
2 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'Publication.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'LoginAttempts.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'Log.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'Language.php?g_documentRoot' Remote File Inclusion
|
2 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'IssuePublish.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'issue.php?g_documentRoot' Remote File Inclusion
|
2 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'image.php?g_documentRoot' Remote File Inclusion
|
2 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'IPAccess.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'Event.php?g_documentRoot' Remote File Inclusion
|
2 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'DatabaseObject.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'Country.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'ArticleTypeField.php?g_documentRoot' Remote File Inclusion
|
2 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'ArticleType.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'ArticleTopic.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'ArticlePublish.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'ArticleIndex.php?g_documentRoot' Remote File Inclusion
|
2 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'ArticleImage.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'ArticleData.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'ArticleComment.php?g_documentRoot' Remote File Inclusion
|
3 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'ArticleAttachment.php?g_documentRoot' Remote File Inclusion
|
4 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'article.php?g_documentRoot' Remote File Inclusion
|
4 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Campsite 2.6.1 - 'Alias.php?g_documentRoot' Remote File Inclusion
|
5 |
WEB
|
anonymous
|
|
2007-05-08
|
|
Advanced Guestbook 2.4.2 - 'picture.php' Cross-Site Scripting
|
4 |
WEB
|
Jesper Jurcenoks
|
|
2007-05-07
|
|
Kayako eSupport 3.0.90 - 'index.php' Cross-Site Scripting
|
5 |
WEB
|
Red_Casper
|
|
2007-05-07
|
|
OTRS 2.0.4 - index.pl Cross-Site Scripting
|
5 |
WEB
|
ciri
|
|
2007-05-07
|
|
SunShop Shopping Cart 4.0 - 'index.php?l' Cross-Site Scripting
|
4 |
WEB
|
John Martinelli
|
|
2007-05-07
|
|
SunShop Shopping Cart 4.0 - 'index.php' Multiple SQL Injections
|
4 |
WEB
|
John Martinelli
|
|
2013-12-01
|
|
TVT TD-2308SS-B DVR - Directory Traversal
|
4 |
WEB
|
Cesar Neira
|
|
2007-05-07
|
|
FipsCMS 2.1 - 'pid' SQL Injection
|
3 |
WEB
|
ilker Kandemir
|
|
2007-05-02
|
|
ObieWebsite Mini Web Shop 2 - 'Sendmail.php?PATH_INFO' Cross-Site Scripting
|
5 |
WEB
|
CorryL
|
|
2007-05-02
|
|
ObieWebsite Mini Web Shop 2 - 'order_form.php?PATH_INFO' Cross-Site Scripting
|
4 |
WEB
|
CorryL
|
|
2007-05-07
|
|
WF-Quote 1.0 Xoops Module - 'index.php' SQL Injection
|
5 |
WEB
|
Bulan
|
|
2007-05-07
|
|
PHP Content Architect 0.9 pre 1.2 - 'MFA_Theme.php' Remote File Inclusion
|
5 |
WEB
|
kezzap66345
|
|
2013-12-01
|
|
Multiple WordPress Orange Themes - Cross-Site Request Forgery (Arbitrary File Upload)
|
4 |
WEB
|
Jje Incovers
|
|
2007-05-03
|
|
PHPSecurityAdmin 4.0.2 - 'Logout.php' Remote File Inclusion
|
4 |
WEB
|
ilker Kandemir
|
|
2007-05-02
|
|
CMS Made Simple 1.0.5 - 'Stylesheet.php' SQL Injection
|
4 |
WEB
|
Daniel Lucq
|
|
2007-04-30
|
|
E-Annu - 'home.php' SQL Injection
|
5 |
WEB
|
ilkerkandemir
|
|
2013-11-30
|
|
MyBB 1.6.11 - Remote Code Execution
|
5 |
WEB
|
BlackDream
|
|
2007-04-30
|
|
Gazi Download Portal - 'Down_Indir.asp' SQL Injection
|
3 |
WEB
|
ertuqrul
|
|
2007-04-26
|
|
Burak Yilmaz Blog 1.0 - 'BRY.asp' SQL Injection
|
4 |
WEB
|
RMx
|
|
2013-11-30
|
|
Scientific-Atlanta_ Inc. DPR2320R2 - Multiple Cross-Site Request Forgery Vulnerabilities
|
4 |
WEB
|
sajith
|
|
2013-11-30
|
|
TP-Link TD-8840t - Cross-Site Request Forgery
|
5 |
WEB
|
mohammed al-saggaf
|
|
2013-11-30
|
|
Zend-Framework - Full Information Disclosure
|
5 |
WEB
|
Ariel Orellana
|
|
2013-11-30
|
|
Ametys CMS 3.5.2 - 'lang' XPath Injection
|
5 |
WEB
|
LiquidWorm
|
|
2013-11-30
|
|
FlashComs Chat 6.5 - Arbitrary File Upload
|
5 |
WEB
|
Miya Chung
|
|
2007-04-26
|
|
MoinMoin 1.5.x - 'index.php' Cross-Site Scripting
|
5 |
WEB
|
En Douli
|
|
2007-04-26
|
|
Doruk100Net - 'Info.php' Remote File Inclusion
|
4 |
WEB
|
Ali7
|
|
2007-04-25
|
|
Active PHP BookMarks 1.0 - 'APB.php' Remote File Inclusion
|
5 |
WEB
|
Ali & Saeid
|
|
2007-04-25
|
|
DynaTracker 1.5.1 - 'action.php?base_path' Remote File Inclusion
|
5 |
WEB
|
alijsb
|
|
2007-04-25
|
|
DynaTracker 1.5.1 - 'includes_handler.php?base_path' Remote File Inclusion
|
5 |
WEB
|
alijsb
|
|
2007-04-25
|
|
HTMLEditBox 2.2 - 'config.php' Remote File Inclusion
|
5 |
WEB
|
alijsb
|
|
2007-04-25
|
|
HYIP Manager Pro - Multiple Remote File Inclusions
|
4 |
WEB
|
alijsb
|
|
2007-04-25
|
|
SunShop Shopping Cart 3.5/4.0 - Multiple Remote File Inclusions
|
4 |
WEB
|
s3rv3r_hack3r
|
|
2007-04-25
|
|
Comus 2.0 - 'Accept.php' Remote File Inclusion
|
4 |
WEB
|
alijsb
|
|
2006-04-25
|
|
CafeLog B2 0.6.1 Weblog and News Publishing Tool - 'b2mail.php?b2inc' Remote File Inclusion
|
5 |
WEB
|
alijsb
|
|
2006-04-25
|
|
CafeLog B2 0.6.1 Weblog and News Publishing Tool - 'b2categories.php?b2inc' Remote File Inclusion
|
4 |
WEB
|
alijsb
|
|
2006-04-25
|
|
CafeLog B2 0.6.1 Weblog and News Publishing Tool - 'b2archives.php?b2inc' Remote File Inclusion
|
3 |
WEB
|
alijsb
|
|
2007-04-25
|
|
Ahhp Portal - 'page.php' Multiple Remote File Inclusions
|
5 |
WEB
|
CodeXpLoder'tq
|
|
2007-04-25
|
|
PHPMyTGP 1.4 - 'AddVIP.php' Remote File Inclusion
|
5 |
WEB
|
alijsb
|
|
2007-04-25
|
|
MyNewsGroups 0.6 - 'Include.php' Remote File Inclusion
|
5 |
WEB
|
Ali & Saeid
|
|
2007-04-25
|
|
plesk 8.1.1 - 'login.php3' Directory Traversal
|
4 |
WEB
|
anonymous
|
|
2007-04-24
|
|
phpMyAdmin 2.9.1 - Multiple Cross-Site Scripting Vulnerabilities
|
5 |
WEB
|
sp3x@securityreason.com
|
|
2007-04-23
|
|
Phorum 5.1.20 - 'admin.php' Groups Module Edit/Add Group Field SQL Injection
|
4 |
WEB
|
Janek Vind
|
|
2007-04-23
|
|
Phorum 5.1.20 - 'admin.php' badwords/banlist Module SQL Injection
|
3 |
WEB
|
Janek Vind
|
|
2007-04-23
|
|
Phorum 5.1.20 - 'pm.php' Recipient Name SQL Injection
|
4 |
WEB
|
Janek Vind
|
|
2007-04-23
|
|
Phorum 5.1.20 - '/include/admin/banlist.php?delete' Cross-Site Request Forgery Banlist Deletion
|
4 |
WEB
|
Janek Vind
|
|
2007-04-23
|
|
Phorum 5.1.20 - 'admin.php?module[]' Full Path Disclosure
|
4 |
WEB
|
Janek Vind
|
|
2007-04-23
|
|
Phorum 5.1.20 - '/include/controlcenter/users.php' Multiple Method Privilege Escalations
|
4 |
WEB
|
Janek Vind
|
|
2007-04-23
|
|
Phorum 5.1.20 - 'admin.php?modsettings Module smiley_id' Cross-Site Scripting
|
5 |
WEB
|
Janek Vind
|
|
2007-04-23
|
|
Phorum 5.1.20 - 'admin.php?Groups Module group_id' Cross-Site Scripting
|
5 |
WEB
|
Janek Vind
|
|
2007-04-23
|
|
Lms 1.5.x - 'RTMessageAdd.php' Remote File Inclusion
|
5 |
WEB
|
InyeXion
|
|
2007-04-23
|
|
Claroline 1.x - RootSys Remote File Inclusion
|
4 |
WEB
|
MoHaNdKo
|
|
2007-04-23
|
|
ACVSWS - 'Transport.php' Remote File Inclusion
|
5 |
WEB
|
MoHaNdKo
|
|
2007-04-23
|
|
PHPMySpace Gold 8.10 - 'article.php' SQL Injection
|
4 |
WEB
|
John Martinelli
|
|
2007-04-23
|
|
File117 - Multiple Remote File Inclusions
|
5 |
WEB
|
InyeXion
|
|
2007-04-23
|
|
PHPMyBibli 1.32 - 'Init.Inc.php' Remote File Inclusion
|
4 |
WEB
|
MoHaNdKo
|
|
2007-04-23
|
|
Allfaclassifieds 6.04 - 'Level2.php' Remote File Inclusion
|
5 |
WEB
|
Dr.RoVeR
|
|
2007-04-23
|
|
Ripe Website Manager 0.8.4 - '/contact/index.php?ripeformpost' SQL Injection
|
4 |
WEB
|
John Martinelli
|
|
2007-04-23
|
|
TJSChat 0.95 - 'You.php' Cross-Site Scripting
|
5 |
WEB
|
the_Edit0r
|
|
2007-04-20
|
|
PHP Turbulence 0.0.1 - 'Turbulence.php' Remote File Inclusion
|
3 |
WEB
|
Omni
|
|
2007-04-20
|
|
Exponent CMS 0.96.5/0.96.6 - 'iconspopup.php?icodir' Traversal Arbitrary Directory Listing
|
4 |
WEB
|
Hamid Ebadi
|
|
2007-04-20
|
|
Exponent CMS 0.96.5/0.96.6 - 'magpie_slashbox.php?rss_url' Cross-Site Scripting
|
4 |
WEB
|
Hamid Ebadi
|
|
2007-04-20
|
|
Exponent CMS 0.96.5/0.96.6 - 'magpie_debug.php?url' Cross-Site Scripting
|
4 |
WEB
|
Hamid Ebadi
|
|
2007-04-19
|
|
Fully Modded PHPBB2 - 'phpbb_root_path' Remote File Inclusion
|
5 |
WEB
|
HACKERS PAL
|
|
2007-04-18
|
|
NuclearBB Alpha 1 - Multiple SQL Injections
|
4 |
WEB
|
John Martinelli
|
|
2007-04-17
|
|
PHP-Nuke 8.0.3.3b - SQL Injection Protection Bypass / Multiple SQL Injections
|
4 |
WEB
|
Aleksandar
|
|
2007-04-17
|
|
Wabbit Gallery Script 0.9 - 'showpic.php' Multiple Cross-Site Scripting Vulnerabilities
|
5 |
WEB
|
the_Edit0r
|
|
2007-04-16
|
|
MyBlog 0.9.8 - 'Settings.php' Authentication Bypass
|
5 |
WEB
|
BlackHawk
|
|
2007-04-16
|
|
Actionpoll 1.1 - 'Actionpoll.php' Remote File Inclusion
|
4 |
WEB
|
SekoMirza
|
|
2007-04-16
|
|
Web Service Deluxe News Manager 1.0.1 Deluxe - 'footer.php' Local File Inclusion
|
5 |
WEB
|
BeyazKurt
|
|
2013-11-27
|
|
Palo Alto Networks Pan-OS 5.0.8 - Multiple Vulnerabilities
|
5 |
WEB
|
Thomas Pollet
|
