|
2006-04-25
|
|
CafeLog B2 0.6.1 Weblog and News Publishing Tool - 'b2archives.php?b2inc' Remote File Inclusion
|
34 |
WEB
|
alijsb
|
|
2007-04-25
|
|
Ahhp Portal - 'page.php' Multiple Remote File Inclusions
|
32 |
WEB
|
CodeXpLoder'tq
|
|
2007-04-25
|
|
PHPMyTGP 1.4 - 'AddVIP.php' Remote File Inclusion
|
34 |
WEB
|
alijsb
|
|
2007-04-25
|
|
MyNewsGroups 0.6 - 'Include.php' Remote File Inclusion
|
32 |
WEB
|
Ali & Saeid
|
|
2007-04-25
|
|
plesk 8.1.1 - 'login.php3' Directory Traversal
|
33 |
WEB
|
anonymous
|
|
2007-04-24
|
|
phpMyAdmin 2.9.1 - Multiple Cross-Site Scripting Vulnerabilities
|
34 |
WEB
|
sp3x@securityreason.com
|
|
2007-04-23
|
|
Phorum 5.1.20 - 'admin.php' Groups Module Edit/Add Group Field SQL Injection
|
32 |
WEB
|
Janek Vind
|
|
2007-04-23
|
|
Phorum 5.1.20 - 'admin.php' badwords/banlist Module SQL Injection
|
33 |
WEB
|
Janek Vind
|
|
2007-04-23
|
|
Phorum 5.1.20 - 'pm.php' Recipient Name SQL Injection
|
33 |
WEB
|
Janek Vind
|
|
2007-04-23
|
|
Phorum 5.1.20 - '/include/admin/banlist.php?delete' Cross-Site Request Forgery Banlist Deletion
|
32 |
WEB
|
Janek Vind
|
|
2007-04-23
|
|
Phorum 5.1.20 - 'admin.php?module[]' Full Path Disclosure
|
35 |
WEB
|
Janek Vind
|
|
2007-04-23
|
|
Phorum 5.1.20 - '/include/controlcenter/users.php' Multiple Method Privilege Escalations
|
32 |
WEB
|
Janek Vind
|
|
2007-04-23
|
|
Phorum 5.1.20 - 'admin.php?modsettings Module smiley_id' Cross-Site Scripting
|
32 |
WEB
|
Janek Vind
|
|
2007-04-23
|
|
Phorum 5.1.20 - 'admin.php?Groups Module group_id' Cross-Site Scripting
|
32 |
WEB
|
Janek Vind
|
|
2007-04-23
|
|
Lms 1.5.x - 'RTMessageAdd.php' Remote File Inclusion
|
34 |
WEB
|
InyeXion
|
|
2007-04-23
|
|
Claroline 1.x - RootSys Remote File Inclusion
|
33 |
WEB
|
MoHaNdKo
|
|
2007-04-23
|
|
ACVSWS - 'Transport.php' Remote File Inclusion
|
36 |
WEB
|
MoHaNdKo
|
|
2007-04-23
|
|
PHPMySpace Gold 8.10 - 'article.php' SQL Injection
|
33 |
WEB
|
John Martinelli
|
|
2007-04-23
|
|
File117 - Multiple Remote File Inclusions
|
35 |
WEB
|
InyeXion
|
|
2007-04-23
|
|
PHPMyBibli 1.32 - 'Init.Inc.php' Remote File Inclusion
|
33 |
WEB
|
MoHaNdKo
|
|
2007-04-23
|
|
Allfaclassifieds 6.04 - 'Level2.php' Remote File Inclusion
|
33 |
WEB
|
Dr.RoVeR
|
|
2007-04-23
|
|
Ripe Website Manager 0.8.4 - '/contact/index.php?ripeformpost' SQL Injection
|
34 |
WEB
|
John Martinelli
|
|
2007-04-23
|
|
TJSChat 0.95 - 'You.php' Cross-Site Scripting
|
34 |
WEB
|
the_Edit0r
|
|
2007-04-20
|
|
PHP Turbulence 0.0.1 - 'Turbulence.php' Remote File Inclusion
|
32 |
WEB
|
Omni
|
|
2007-04-20
|
|
Exponent CMS 0.96.5/0.96.6 - 'iconspopup.php?icodir' Traversal Arbitrary Directory Listing
|
33 |
WEB
|
Hamid Ebadi
|
|
2007-04-20
|
|
Exponent CMS 0.96.5/0.96.6 - 'magpie_slashbox.php?rss_url' Cross-Site Scripting
|
34 |
WEB
|
Hamid Ebadi
|
|
2007-04-20
|
|
Exponent CMS 0.96.5/0.96.6 - 'magpie_debug.php?url' Cross-Site Scripting
|
32 |
WEB
|
Hamid Ebadi
|
|
2007-04-19
|
|
Fully Modded PHPBB2 - 'phpbb_root_path' Remote File Inclusion
|
35 |
WEB
|
HACKERS PAL
|
|
2007-04-18
|
|
NuclearBB Alpha 1 - Multiple SQL Injections
|
32 |
WEB
|
John Martinelli
|
|
2007-04-17
|
|
PHP-Nuke 8.0.3.3b - SQL Injection Protection Bypass / Multiple SQL Injections
|
33 |
WEB
|
Aleksandar
|
|
2007-04-17
|
|
Wabbit Gallery Script 0.9 - 'showpic.php' Multiple Cross-Site Scripting Vulnerabilities
|
31 |
WEB
|
the_Edit0r
|
|
2007-04-16
|
|
MyBlog 0.9.8 - 'Settings.php' Authentication Bypass
|
33 |
WEB
|
BlackHawk
|
|
2007-04-16
|
|
Actionpoll 1.1 - 'Actionpoll.php' Remote File Inclusion
|
34 |
WEB
|
SekoMirza
|
|
2007-04-16
|
|
Web Service Deluxe News Manager 1.0.1 Deluxe - 'footer.php' Local File Inclusion
|
35 |
WEB
|
BeyazKurt
|
|
2013-11-27
|
|
Palo Alto Networks Pan-OS 5.0.8 - Multiple Vulnerabilities
|
33 |
WEB
|
Thomas Pollet
|
|
2007-04-14
|
|
Flowers - 'Cas.php' Cross-Site Scripting
|
36 |
WEB
|
the_Edit0r
|
|
2007-04-14
|
|
BloofoxCMS 0.2.2 - 'Img_Popup.php' Cross-Site Scripting
|
34 |
WEB
|
the_Edit0r
|
|
2007-04-13
|
|
Doop Content Management System 1.3.x - Multiple Input Validation Vulnerabilities
|
34 |
WEB
|
KaBuS
|
|
2007-04-13
|
|
MailBee WebMail Pro 3.4 - 'Check_login.asp' Cross-Site Scripting
|
32 |
WEB
|
David Vieira-Kurz
|
|
2007-04-12
|
|
ToendaCMS 1.5.3 - GET / POST Forms HTML Injection
|
36 |
WEB
|
Hanno Boeck
|
|
2007-04-12
|
|
TuMusika Evolution 1.6 - 'index.php' Cross-Site Scripting
|
33 |
WEB
|
the_Edit0r
|
|
2007-04-07
|
|
PHPwebnews 0.1 - 'bukutamu.php' Cross-Site Scripting
|
32 |
WEB
|
the_Edit0r
|
|
2007-04-07
|
|
PHPwebnews 0.1 - 'index.php' Cross-Site Scripting
|
31 |
WEB
|
the_Edit0r
|
|
2007-04-07
|
|
PHPwebnews 0.1 - 'iklan.php' Cross-Site Scripting
|
33 |
WEB
|
the_Edit0r
|
|
2007-04-11
|
|
Cosign 2.0.1/2.9.4a - CGI Register Command Remote Authentication Bypass
|
32 |
WEB
|
Jon Oberheide
|
|
2007-04-11
|
|
Cosign 2.0.1/2.9.4a - CGI Check Cookie Command Remote Authentication Bypass
|
35 |
WEB
|
Jon Oberheide
|
|
2007-04-11
|
|
PHPFaber TopSites 3 - 'admin/index.php' Directory Traversal
|
34 |
WEB
|
Dr.RoVeR
|
|
2007-04-11
|
|
DotClear 1.2.x - '/tools/thememng/index.php?tool_url' Cross-Site Scripting
|
32 |
WEB
|
nassim
|
|
2007-04-11
|
|
DotClear 1.2.x - '/ecrire/trackback.php?post_id' Cross-Site Scripting
|
32 |
WEB
|
nassim
|
|
2013-11-26
|
|
WordPress Plugin dzs-videogallery - Arbitrary File Upload
|
37 |
WEB
|
link_satisi
|
|
2007-04-10
|
|
DropAFew 0.2 - 'editlogcal.php?save Action calories' SQL Injection
|
31 |
WEB
|
Alexander Klink
|
|
2007-04-10
|
|
DropAFew 0.2 - 'search.php?delete Action id' SQL Injection
|
30 |
WEB
|
Alexander Klink
|
|
2007-04-10
|
|
DropAFew 0.2 - 'newaccount2.php' Arbitrary Account Creation
|
30 |
WEB
|
Alexander Klink
|
|
2007-04-10
|
|
MyNews 4.2.2 - 'Week_Events.php' Remote File Inclusion
|
31 |
WEB
|
hackberry
|
|
2007-04-10
|
|
Einfacher Passworschutz - 'index.php' Cross-Site Scripting
|
31 |
WEB
|
hackberry
|
|
2007-04-09
|
|
DeskPro 2.0.1 - 'login.php' HTML Injection
|
34 |
WEB
|
John Martinelli
|
|
2007-04-09
|
|
eCardMAX HotEditor 4.0 - 'Keyboard.php' Local File Inclusion
|
32 |
WEB
|
Liz0ziM
|
|
2007-04-09
|
|
UBBCentral UBB.Threads 6.1.1 - 'UBBThreads.php' SQL Injection
|
32 |
WEB
|
John Martinelli
|
|
2007-04-09
|
|
QuizShock 1.6.1 - 'auth.php' HTML Injection
|
36 |
WEB
|
John Martinelli
|
|
2007-04-06
|
|
Livor 2.5 - 'index.php' Cross-Site Scripting
|
34 |
WEB
|
Arham Muhammad
|
|
2007-04-04
|
|
Gazi Okul Sitesi 2007 - 'Fotokategori.asp' SQL Injection
|
37 |
WEB
|
CoNqUeRoR
|
|
2007-04-02
|
|
Atlassian JIRA 3.4.2 - IssueNavigator.JSPA Cross-Site Scripting
|
39 |
WEB
|
syniack
|
|
2007-03-31
|
|
PHP-Fusion 6.1.5 Mod Calendar_Panel - 'Show_Event.php' SQL Injection
|
34 |
WEB
|
UNIQUE-KEY
|
|
2007-03-30
|
|
Drake CMS 0.3.7 - '404.php' Local File Inclusion
|
33 |
WEB
|
HACKERS PAL
|
|
2013-11-25
|
|
TP-Link WR740N/WR740ND - Multiple Cross-Site Request Forgery Vulnerabilities
|
34 |
WEB
|
Samandeep Singh
|
|
2013-11-24
|
|
MyBB Ajaxfs 2 Plugin - SQL Injection
|
34 |
WEB
|
IeDb ir
|
|
2013-11-24
|
|
Pirelli Discus DRG A125g - Remote Change WiFi Password
|
36 |
WEB
|
Sebastián Magof
|
|
2013-11-24
|
|
Pirelli Discus DRG A125g - Local Password Disclosure
|
34 |
WEB
|
Sebastián Magof
|
|
2013-11-24
|
|
Pirelli Discus DRG A125g - Remote Change SSID Value
|
36 |
WEB
|
Sebastián Magof
|
|
2013-11-23
|
|
ImpressPages CMS 3.8 - Persistent Cross-Site Scripting
|
36 |
WEB
|
sajith
|
|
2013-11-23
|
|
LimeSurvey 2.00+ (build 131107) - Multiple Vulnerabilities
|
34 |
WEB
|
LiquidWorm
|
|
2007-03-14
|
|
aBitWhizzy - 'whizzylink.php?d' Traversal Arbitrary Directory Listing
|
33 |
WEB
|
Lostmon
|
|
2007-03-26
|
|
Fizzle 0.5 - RSS Feed HTML Injection
|
34 |
WEB
|
CrYpTiC MauleR
|
|
2007-11-26
|
|
Satel Lite - 'Satellite.php' Local File Inclusion
|
34 |
WEB
|
rUnViRuS
|
|
2007-03-26
|
|
Mephisto Blog 0.7.3 - Search Function Cross-Site Scripting
|
35 |
WEB
|
The[Boss]
|
|
2007-03-26
|
|
CcCounter 2.0 - 'index.php' Cross-Site Scripting
|
33 |
WEB
|
Crackers_Child
|
|
2007-03-26
|
|
Image_Upload Script 2.0 - Multiple Remote File Inclusions
|
35 |
WEB
|
Crackers_Child
|
|
2007-03-24
|
|
Free File Hosting System 1.1 - 'register.php?AD_BODY_TEMP' Remote File Inclusion
|
30 |
WEB
|
IbnuSina
|
|
2007-03-24
|
|
Free File Hosting System 1.1 - 'login.php?AD_BODY_TEMP' Remote File Inclusion
|
35 |
WEB
|
IbnuSina
|
|
2007-03-24
|
|
Free File Hosting System 1.1 - 'contact.php?AD_BODY_TEMP' Remote File Inclusion
|
35 |
WEB
|
IbnuSina
|
|
2007-03-20
|
|
W-Agora 4.2.1 - 'change_password.php?userid' Cross-Site Scripting
|
37 |
WEB
|
laurent gaffie
|
|
2007-03-20
|
|
W-Agora 4.2.1 - 'search.php?search_user' Cross-Site Scripting
|
33 |
WEB
|
laurent gaffie
|
|
2007-03-20
|
|
W-Agora 4.2.1 - 'profile.php?showuser' Cross-Site Scripting
|
37 |
WEB
|
laurent gaffie
|
|
2007-03-20
|
|
W-Agora 4.2.1 - Multiple Arbitrary File Upload Vulnerabilities
|
34 |
WEB
|
laurent gaffie
|
|
2007-03-20
|
|
Web Wiz Forums 8.05 - String Filtering SQL Injection
|
34 |
WEB
|
Ivan Fratric
|
|
2007-03-19
|
|
LedgerSMB1.0/1.1 / SQL-Ledger 2.6.x - 'Login' Local File Inclusion / Authentication Bypass
|
32 |
WEB
|
Chris Travers
|
|
2007-03-19
|
|
PHPX 3.5.15/3.5.16 - 'gallery.php' SQL Injection
|
35 |
WEB
|
laurent gaffie
|
|
2007-03-19
|
|
PHPX 3.5.15/3.5.16 - 'news.php' SQL Injection
|
34 |
WEB
|
laurent gaffie
|
|
2007-03-19
|
|
PHPX 3.5.15/3.5.16 - 'users.php' SQL Injection
|
35 |
WEB
|
laurent gaffie
|
|
2007-03-19
|
|
PHPX 3.5.15/3.5.16 - 'forums.php' SQL Injection
|
33 |
WEB
|
laurent gaffie
|
|
2007-03-19
|
|
PHPX 3.5.15/3.5.16 - 'print.php' SQL Injection
|
32 |
WEB
|
laurent gaffie
|
|
2007-03-19
|
|
Guesbara 1.2 - Administrator Password Change
|
33 |
WEB
|
Kacper
|
|
2007-03-19
|
|
WordPress Core < 2.1.2 - 'PHP_Self' Cross-Site Scripting
|
34 |
WEB
|
Alexander Concha
|
|
2007-03-17
|
|
phpStats 0.1.9 - 'PHP-Stats-options.php' Remote Code Execution
|
34 |
WEB
|
rgod
|
|
2007-03-16
|
|
phpStats 0.1.9 - Multiple SQL Injections
|
36 |
WEB
|
rgod
|
|
2007-03-16
|
|
Holtstraeter Rot 13 - 'Enkrypt.php' Directory Traversal
|
34 |
WEB
|
h4ck3r
|
|
2007-03-16
|
|
DirectAdmin 1.292 - 'CMD_USER_STATS' Cross-Site Scripting
|
37 |
WEB
|
Mandr4ke
|
|
2007-03-15
|
|
Horde Framework 3.1.3 - 'login.php' Cross-Site Scripting
|
37 |
WEB
|
Moritz Naumann
|
|
2007-03-15
|
|
Viper Web Portal 0.1 - 'index.php' Remote File Inclusion
|
35 |
WEB
|
Abdus Samad
|
|
2007-03-15
|
|
Horde IMP Webmail 4.0.4 Client - Multiple Input Validation Vulnerabilities
|
37 |
WEB
|
Immerda Project Group
|
|
2007-03-13
|
|
Weekly Drawing Contest 0.0.1 - 'Check_Vote.php' Local File Inclusion
|
35 |
WEB
|
h4ck3r
|
|
2007-03-12
|
|
ClipShare 1.5.3 - 'ADODB-Connection.Inc.php' Remote File Inclusion
|
30 |
WEB
|
RaeD Hasadya
|
|
2013-11-20
|
|
PHP-Nuke 8.2.4 - Multiple Vulnerabilities
|
33 |
WEB
|
Sojobo dev team
|
|
2007-03-10
|
|
SoftNews 4.1/5.5 - '/engine/Ajax/editnews.php?root_dir' Remote File Inclusion
|
34 |
WEB
|
Hasadya Raed
|
|
2007-03-10
|
|
SoftNews 4.1/5.5 - '/engine/init.php?root_dir' Remote File Inclusion
|
31 |
WEB
|
Hasadya Raed
|
|
2007-03-10
|
|
Premod SubDog 2 - '/includes/logger_engine.php?phpbb_root_path' Remote File Inclusion
|
33 |
WEB
|
Hasadya Raed
|
|
2007-03-10
|
|
Premod SubDog 2 - '/includes/themen_portal_mitte.php?phpbb_root_path' Remote File Inclusion
|
34 |
WEB
|
Hasadya Raed
|
|
2007-03-10
|
|
Premod SubDog 2 - '/includes/functions_kb.php?phpbb_root_path' Remote File Inclusion
|
33 |
WEB
|
Hasadya Raed
|
|
2007-03-09
|
|
Duyuru Scripti - 'Goster.asp' SQL Injection
|
32 |
WEB
|
Cr@zy_King
|
|
2007-03-09
|
|
JCCorp URLShrink Free 1.3.1 - 'CreateURL.php' Remote File Inclusion
|
36 |
WEB
|
Hasadya Raed
|
|
2007-03-05
|
|
EPortfolio 1.0 - Client-Side Input Validation
|
38 |
WEB
|
Stefan Friedli
|
|
2013-11-19
|
|
Ruckus Wireless Zoneflex 2942 Wireless Access Point - Authentication Bypass
|
34 |
WEB
|
myexploit
|
|
2007-02-26
|
|
Tyger Bug Tracking System 1.1.3 - 'register.php?PATH_INFO' Cross-Site Scripting
|
35 |
WEB
|
CorryL
|
|
2007-02-26
|
|
Tyger Bug Tracking System 1.1.3 - 'login.php?PATH_INFO' Cross-Site Scripting
|
34 |
WEB
|
CorryL
|
|
2007-02-26
|
|
Tyger Bug Tracking System 1.1.3 - 'ViewBugs.php?s' SQL Injection
|
35 |
WEB
|
CorryL
|
|
2007-03-02
|
|
WordPress Core 2.1.1 - '/wp-includes/theme.php?iz' Arbitrary Command Execution
|
34 |
WEB
|
Ivan Fratric
|
|
2007-03-02
|
|
WordPress Core 2.1.1 - Arbitrary Command Execution
|
32 |
WEB
|
Ivan Fratric
|
|
2007-03-02
|
|
Woltlab Burning Board 2.3.6 - Multiple HTML Injection Vulnerabilities
|
31 |
WEB
|
Samenspender
|
|
2007-03-01
|
|
Built2go News Manager 1.0 Blog - 'rating.php?nid' Cross-Site Scripting
|
33 |
WEB
|
the_Edit0r
|
|
2007-03-01
|
|
Built2go News Manager 1.0 Blog - 'news.php' Multiple Cross-Site Scripting Vulnerabilities
|
32 |
WEB
|
the_Edit0r
|
|
2007-03-01
|
|
aWebNews 1.1 - 'listing.php?path_to_news' Remote File Inclusion
|
36 |
WEB
|
mostafa_ragab
|
|
2007-03-01
|
|
S9Y Serendipity 1.1.1 - 'index.php' SQL Injection
|
34 |
WEB
|
Samenspender
|
|
2007-02-27
|
|
WordPress Core 2.1.1 - Multiple Cross-Site Scripting Vulnerabilities
|
36 |
WEB
|
Stefan Friedli
|
|
2007-02-26
|
|
WordPress Core 2.1.1 - 'post.php' Cross-Site Scripting
|
37 |
WEB
|
Samenspender
|
|
2007-02-26
|
|
Pagesetter 6.2/6.3.0 - 'index.php' Local File Inclusion
|
32 |
WEB
|
D. Matscheko
|
