Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2007-02-26   SQLiteManager 1.2 - 'main.php' Multiple HTML Injection Vulnerabilities 36 WEB Simon Bonnard
2007-02-26   PHPBB2 - 'Admin_Ug_Auth.php' Administrative Bypass 35 WEB Hasadya Raed
2007-02-26   Audins Audiens 3.3 - '/system/index.php?Cookie PHPSESSID' SQL Injection 38 WEB r00t
2007-02-26   Audins Audiens 3.3 - 'setup.php?PATH_INFO' Cross-Site Scripting 36 WEB r00t
2007-02-26   Audins Audiens 3.3 - 'unistall.php' Authentication Bypass 34 WEB r00t
2013-11-18   Kaseya < 6.3.0.2 - Arbitrary File Upload 35 WEB Security-Assessment.com
2013-11-18   ManageEngine Desktop Central 8.0.0 build < 80293 - Arbitrary File Upload 37 WEB Security-Assessment.com
2013-11-18   Dahua DVR 2.608.0000.0/2.608.GV00.0 - Authentication Bypass (Metasploit) 39 WEB Jake Reynolds
2013-11-18   LiveZilla 5.0.1.4 - Remote Code Execution 38 WEB Curesec Research Team
2013-11-18   WordPress Theme Make A Statement (MaS) - Cross-Site Request Forgery 39 WEB DevilScreaM
2013-11-18   WordPress Theme Amplus - Cross-Site Request Forgery 38 WEB DevilScreaM
2013-11-18   WordPress Theme Dimension - Cross-Site Request Forgery 35 WEB DevilScreaM
2013-11-18   WordPress Theme Euclid 1.x - Cross-Site Request Forgery 34 WEB DevilScreaM
2007-02-26   SQLiteManager 1.2 - Local File Inclusion 34 WEB Simon Bonnard
2007-02-26   SolarPay - 'index.php' Local File Inclusion 35 WEB Hasadya Raed
2007-02-24   Docebo CMS 3.0.x - '/modules/htmlframechat/index.php' Multiple Cross-Site Scripting Vulnerabilities 35 WEB r00t
2007-02-24   Docebo CMS 3.0.x - 'index.php?searchkey' Cross-Site Scripting 40 WEB r00t
2007-02-24   PhotoStand 1.2 - 'index.php' Cross-Site Scripting 31 WEB Simon Bonnard
2007-02-24   Active Calendar 1.2 - '/data/mysqlevents.php?css' Cross-Site Scripting 36 WEB Simon Bonnard
2007-02-24   Active Calendar 1.2 - '/data/y_3.php?css' Cross-Site Scripting 33 WEB Simon Bonnard
2007-02-24   Active Calendar 1.2 - '/data/y_2.php?css' Cross-Site Scripting 33 WEB Simon Bonnard
2007-02-24   Active Calendar 1.2 - '/data/m_4.php?css' Cross-Site Scripting 35 WEB Simon Bonnard
2007-02-24   Active Calendar 1.2 - '/data/m_3.php?css' Cross-Site Scripting 30 WEB Simon Bonnard
2007-02-24   Active Calendar 1.2 - '/data/m_2.php?css' Cross-Site Scripting 35 WEB Simon Bonnard
2007-02-24   Active Calendar 1.2 - '/data/js.php?css' Cross-Site Scripting 32 WEB Simon Bonnard
2007-02-24   Active Calendar 1.2 - '/data/flatevents.php?css' Cross-Site Scripting 34 WEB Simon Bonnard
2007-02-24   Active Calendar 1.2 - 'showcode.php' Local File Inclusion 33 WEB Simon Bonnard
2007-02-24   Pickle 0.3 - 'download.php' Local File Inclusion 32 WEB laurent gaffie
2007-02-23   Simple one-file Gallery - 'gallery.php?f' Cross-Site Scripting 33 WEB laurent gaffie
2007-02-23   Simple one-file Gallery - 'gallery.php?f' Traversal Arbitrary File Access 33 WEB laurent gaffie
2007-02-23   XT:Commerce 3.04 - 'index.php' Local File Inclusion 33 WEB laurent gaffie
2007-02-23   Shop Kit Plus - 'StyleCSS.php' Local File Inclusion 31 WEB laurent gaffie
2007-02-22   LoveCMS 1.4 - 'id' Cross-Site Scripting 32 WEB laurent gaffie
2007-02-22   LoveCMS 1.4 - 'load' Traversal Arbitrary File Access 33 WEB laurent gaffie
2007-02-22   LoveCMS 1.4 - 'step' Traversal Arbitrary File Access 34 WEB laurent gaffie
2007-02-22   LoveCMS 1.4 - 'step' Remote File Inclusion 32 WEB laurent gaffie
2007-02-22   Pheap 1.x/2.0 - 'edit.php' Directory Traversal 35 WEB laurent gaffie
2007-02-22   Plantilla - 'list_main_pages.php?nfolder' Traversal Arbitrary File Access 32 WEB laurent gaffie
2013-11-16   Google Gmail IOS Mobile Application - Persistent Cross-Site Scripting 32 WEB Ali Raza
2007-02-22   Pyrophobia 2.1.3.1 - Traversal Arbitrary File Access 32 WEB laurent gaffie
2007-02-22   Pyrophobia 2.1.3.1 - Cross-Site Scripting 34 WEB laurent gaffie
2007-02-21   Magic News Plus 1.0.2 - 'n_layouts.php?link_parameters' Cross-Site Scripting 35 WEB HACKERS PAL
2007-02-21   Magic News Plus 1.0.2 - 'news.php?&link_parameters' Cross-Site Scripting 35 WEB HACKERS PAL
2007-02-21   Magic News Plus 1.0.2 - 'preview.php?PHP_script_path' Remote File Inclusion 36 WEB HACKERS PAL
2007-02-21   phpTrafficA 1.4.1 - 'banref.php?lang' Traversal Local File Inclusion 35 WEB Hamid Ebadi
2007-02-21   phpTrafficA 1.4.1 - 'plotStat.php?File' Traversal Local File Inclusion 32 WEB Hamid Ebadi
2007-02-21   CedStat 1.31 - 'index.php' Cross-Site Scripting 34 WEB sn0oPy
2007-02-21   Google Desktop - Cross-Site Scripting 34 WEB Yair Amit
2007-02-20   Design4Online - 'Userpages2 Page.asp' SQL Injection 35 WEB xoron
2007-02-20   AbleDesign MyCalendar 2.20.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 31 WEB sn0oPy
2007-02-19   Powerschool 4.3.6/5.1.2 - JavaScript File Request Information Disclosure 37 WEB gheetotank
2013-11-15   WBR-3406 Wireless Broadband NAT Router - Web-Console Password Change Bypass / Cross-Site Request For 35 WEB Yakir Wizman
2007-02-16   Turuncu Portal 1.0 - 'H_Goster.asp' SQL Injection 34 WEB chernobiLe
2007-02-16   Ezboo Webstats 3.03 - Administrative Authentication Bypass 33 WEB sn0oPy
2007-02-16   Meganoide's News 1.1.1 - 'Include.php' Remote File Inclusion 36 WEB KaRTaL
2007-02-16   CedStat 1.31 - 'index.php?hier' Cross-Site Scripting 33 WEB sn0oPy
2007-02-15   Calendar Express - 'search.php' Cross-Site Scripting 33 WEB BL4CK
2007-02-15   Deskpro 1.1 - 'faq.php' Cross-Site Scripting 37 WEB BLacK ZeRo
2007-02-15   ibProArcade 2.5.9+ - 'Arcade.php' SQL Injection 34 WEB sp00k
2007-02-14   WebTester 5.0.20060927 - 'typeID' SQL Injection 31 WEB Moran Zavdi
2007-02-13   Fullaspsite ASP Hosting Site - 'listmain.asp?cat' SQL Injection 32 WEB ShaFuck31
2007-02-13   Fullaspsite ASP Hosting Site - 'listmain.asp?cat' Cross-Site Scripting 33 WEB ShaFuck31
2007-02-13   TaskFreak! 0.5.5 - 'error.php' Cross-Site Scripting 32 WEB Spiked
2007-02-12   WordPress Core 1.x/2.0.x - 'Templates.php' Cross-Site Scripting 35 WEB PsychoGun
2007-02-12   Community Server - 'SearchResults.aspx' Cross-Site Scripting 34 WEB BL4CK
2007-02-12   EWay 4 - Default.APSX Cross-Site Scripting 31 WEB BLacK ZeRo
2007-02-12   Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/wordfilter.php?Admin' Remote File Inclusion 32 WEB K-159
2007-02-12   Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/updatefilter.php?Admin' Remote File Inclusion 36 WEB K-159
2007-02-12   Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/updateconf.php?Admin' Remote File Inclusion 32 WEB K-159
2007-02-12   Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/readconf.php?Admin' Remote File Inclusion 34 WEB K-159
2007-02-12   Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/index.php?adminpath' Remote File Inclusion 32 WEB K-159
2007-02-12   Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/verify.php?configpath' Remote File Inclusion 34 WEB K-159
2007-02-12   Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/manageTagmins.php?configpath' Remote File Inclusion 33 WEB K-159
2007-02-12   Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/editTag.php?configpath' Remote File Inclusion 33 WEB K-159
2007-02-12   Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/editTagmin.php?configpath' Remote File Inclusion 36 WEB K-159
2007-02-12   Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/delTag.php?configpath' Remote File Inclusion 36 WEB K-159
2007-02-12   Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/delTagmin.php?configpath' Remote File Inclusion 33 WEB K-159
2007-02-12   Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/ban_watch.php?configpath' Remote File Inclusion 35 WEB K-159
2007-02-12   Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/addTagmin.php?configpath' Remote File Inclusion 35 WEB K-159
2007-02-12   Tagit! Tagit2b 2.1.B Build 2 - '/CONFIG/errmsg.inc.php?configpath' Remote File Inclusion 35 WEB K-159
2007-02-12   Tagit! Tagit2b 2.1.B Build 2 - 'tag_process.php' Multiple Remote File Inclusions 38 WEB K-159
2007-02-12   Tagit! Tagit2b 2.1.B Build 2 - 'tagviewer.php' Multiple Remote File Inclusions 38 WEB K-159
2007-02-09   Atlassian JIRA 3.7.3 - BrowseProject.JSPA Cross-Site Scripting 39 WEB BL4CK
2007-02-09   eXtreme File Hosting - Arbitrary '.RAR' File Upload 31 WEB hamed bazargani
2007-02-08   cPanel 11 - PassWDMySQL Cross-Site Scripting 35 WEB s3rv3r_hack3r
2007-02-07   SYSCP 1.2.15 - System Control Panel CronJob Arbitrary Code Execution 34 WEB Daniel Schulte
2013-11-13   TOSHIBA e-Studio 232/233/282/283 - Cross-Site Request Forgery (Change Admin Password) 35 WEB Hubert Gradek
2007-02-06   MySQLNewsEngine - 'Affichearticles.php3' Remote File Inclusion 35 WEB Blaster
2007-02-05   Coppermine Photo Gallery 1.4.10 - Multiple Local/Remote File Inclusions 33 WEB anonymous
2007-02-05   Adobe ColdFusion 6/7 - User_Agent Error Page Cross-Site Scripting 35 WEB digi7al64
2007-02-03   PortailPHP 2 - '/mod_search/index.php?chemin' Remote File Inclusion 36 WEB laurent gaffie
2007-02-03   PortailPHP 2 - '/mod_news/goodies.php?chemin' Remote File Inclusion 36 WEB laurent gaffie
2007-02-03   PortailPHP 2 - '/mod_news/index.php?chemin' Remote File Inclusion 34 WEB laurent gaffie
2007-02-03   PortailPHP 2 - '/mod_news/goodies.php?chemin' Traversal Arbitrary File Access 38 WEB laurent gaffie
2007-02-03   PortailPHP 2 - '/mod_news/index.php?chemin' Traversal Arbitrary File Access 39 WEB laurent gaffie
2007-02-02   Uebimiau 2.7.10 - 'index.php' Cross-Site Scripting 37 WEB Doz
2007-02-02   PHPProbid 5.24 - 'Lang.php' Remote File Inclusion 39 WEB Hasadya Raed
2007-02-02   EasyMoblog 0.5.1 - Multiple Input Validation Vulnerabilities 35 WEB Tal Argoni
2007-01-31   OpenEMR 2.8.2 - 'Login_Frame.php' Cross-Site Scripting 35 WEB Michael Melewski
2007-01-31   OpenEMR 2.8.2 - 'Import_XML.php' Remote File Inclusion 35 WEB trzindan
2013-11-12   Juniper Junos J-Web - Privilege Escalation 37 WEB Sense of Security
2007-01-30   EncapsCMS 0.3.6 - 'common_foot.php' Remote File Inclusion 36 WEB Tr_ZiNDaN
2007-01-27   MDPro 1.0.76 - 'index.php' SQL Injection 33 WEB adexior
2007-01-27   SpoonLabs Vivvo Article Management CMS 3.40 - 'Show_Webfeed.php' SQL Injection 34 WEB St[at]rExT
2007-01-27   AdMentor - Admin Login SQL Injection 37 WEB Cr@zy_King
2007-01-26   FD Script 1.3.x - 'FName' Information Disclosure 33 WEB ajann
2007-01-26   PHP Membership Manager 1.5 - 'admin.php' Cross-Site Scripting 39 WEB Doz
2013-11-10   WordPress Theme Highlight Premium - Cross-Site Request Forgery / Arbitrary File Upload 35 WEB DevilScreaM
2007-01-24   WordPress Core 1.x/2.0.x - Pingback SourceURI Denial of Service / Information Disclosure 39 WEB Blake Matheny
2007-01-24   Virtual Host Administrator 0.1 - Modules_Dir Remote File Inclusion 37 WEB Dr Max Virus
2013-11-08   Horde Groupware Web Mail Edition 5.1.2 - Cross-Site Request Forgery (2) 36 WEB Marcela Benetrix
2013-11-08   Sagemcom F@st 3184 2.1.11 - Multiple Vulnerabilities 37 WEB Oz Elisyan
2013-11-08   Project'Or RIA 3.4.0 - 'objectDetail.php?objectId' SQL Injection 35 WEB Vicente Aguilera Diaz
2013-11-08   Vivotek IP Cameras - RTSP Authentication Bypass 35 WEB Core Security
2013-11-08   Flatpress 1.0 - Remote Code Execution 36 WEB Wireghoul
2013-11-08   appRain 3.0.2 - Blind SQL Injection 37 WEB High-Tech Bridge SA
2013-11-08   Vanilla Forums 2.0 < 2.0.18.5 - 'class.utilitycontroller.php' PHP Object Injection 39 WEB EgiX
2007-01-23   Vote! Pro 4.0 - Multiple PHP Code Execution Vulnerabilities 35 WEB r0ut3r
2007-01-22   212Cafe Guestbook 4.00 - 'show.php' Cross-Site Scripting 34 WEB Linux_Drox
2007-01-22   Bitweaver 1.3.1 Articles and Blogs - Multiple Cross-Site Scripting Vulnerabilities 37 WEB CorryL
2007-01-22   212Cafe Board 0.08 Beta / 6.30 Beta - Multiple Cross-Site Scripting Vulnerabilities 37 WEB Linux_Drox
2007-01-22   Unique Ads - 'Banner.php' SQL Injection 36 WEB Linux_Drox
2013-11-08   RASPcalendar 1.01 (ASP) - Admin Login 36 WEB Hackeri-AL UAH-Crew
2007-01-20   SMF 1.1 - 'index.php' HTML Injection 33 WEB Aria-Security Team
2007-01-20   Easebay Resources Login Manager - Multiple Input Validation Vulnerabilities 33 WEB Doz