|
2006-12-01
|
|
Invision Gallery 2.0.7 - 'index.php?IMG' SQL Injection
|
36 |
WEB
|
infection
|
|
2006-11-30
|
|
Woltlab Burning Board 2.3.x - 'register.php' Cross-Site Scripting
|
22 |
WEB
|
blueshisha
|
|
2006-11-30
|
|
Seditio1.10 / Land Down 8.0 Under - 'polls.php' SQL Injection
|
23 |
WEB
|
ajann
|
|
2006-11-16
|
|
b2evolution 1.8.2/1.9 - '_referer_spam.page.php' Multiple Cross-Site Scripting Vulnerabilities
|
24 |
WEB
|
lotto fischer
|
|
2006-11-16
|
|
b2evolution 1.8.2/1.9 - '_410_stats_gone.page.php?app_name' Cross-Site Scripting
|
26 |
WEB
|
lotto fischer
|
|
2006-11-16
|
|
b2evolution 1.8.2/1.9 - '_404_not_found.page.php' Multiple Cross-Site Scripting Vulnerabilities
|
23 |
WEB
|
lotto fischer
|
|
2006-11-27
|
|
Evolve Shopping Cart - 'products.asp' SQL Injection
|
27 |
WEB
|
Aria-Security Team
|
|
2006-11-27
|
|
uPhotoGallery 1.1 - 'thumbnails.asp?ci' SQL Injection
|
20 |
WEB
|
Aria-Security Team
|
|
2006-11-27
|
|
uPhotoGallery 1.1 - 'Slideshow.asp?ci' SQL Injection
|
22 |
WEB
|
Aria-Security Team
|
|
2006-11-27
|
|
Click Gallery - Multiple Input Validation Vulnerabilities
|
25 |
WEB
|
Aria-Security Team
|
|
2006-11-27
|
|
Clickblog - 'Displaycalendar.asp' SQL Injection
|
24 |
WEB
|
Aria-Security Team
|
|
2006-11-27
|
|
ClickContact - 'default.asp' Multiple SQL Injections
|
33 |
WEB
|
Aria-Security Team
|
|
2006-11-25
|
|
fipsShop - Multiple SQL Injections
|
30 |
WEB
|
Aria-Security Team
|
|
2006-11-25
|
|
cPanel WebHost Manager 3.1 - 'park?ndomain' Cross-Site Scripting
|
20 |
WEB
|
Aria-Security Team
|
|
2006-11-25
|
|
cPanel WebHost Manager 3.1 - 'dofeaturemanager?feature' Cross-Site Scripting
|
23 |
WEB
|
Aria-Security Team
|
|
2006-11-25
|
|
cPanel WebHost Manager 3.1 - 'editzone?domain' Cross-Site Scripting
|
26 |
WEB
|
Aria-Security Team
|
|
2006-11-25
|
|
cPanel WebHost Manager 3.1 - 'domts2?domain' Cross-Site Scripting
|
21 |
WEB
|
Aria-Security Team
|
|
2006-11-25
|
|
cPanel WebHost Manager 3.1 - 'editpkg?pkg' Cross-Site Scripting
|
20 |
WEB
|
Aria-Security Team
|
|
2006-11-25
|
|
cPanel WebHost Manager 3.1 - 'addon_configsupport.cgi?supporturl' Cross-Site Scripting
|
26 |
WEB
|
Aria-Security Team
|
|
2006-11-25
|
|
cPanel WebHost Manager 3.1 - 'dochangeemail?email' Cross-Site Scripting
|
22 |
WEB
|
Aria-Security Team
|
|
2006-11-25
|
|
cPanel 11 Beta - Multiple Cross-Site Scripting Vulnerabilities
|
23 |
WEB
|
Aria-Security Team
|
|
2006-11-25
|
|
SIAP CMS - 'login.asp' SQL Injection
|
23 |
WEB
|
nagazakig74
|
|
2006-11-24
|
|
Fixit iDms Pro Image Gallery - 'showfile.asp?fid' SQL Injection
|
28 |
WEB
|
Aria-Security Team
|
|
2006-11-24
|
|
Fixit iDms Pro Image Gallery - 'filelist.asp' Multiple SQL Injections
|
29 |
WEB
|
Aria-Security Team
|
|
2006-11-24
|
|
MMGallery 1.55 - 'Thumbs.php' Cross-Site Scripting
|
21 |
WEB
|
Al7ejaz Hacker
|
|
2006-11-24
|
|
ASP ListPics 5.0 - 'Listpics.asp' SQL Injection
|
18 |
WEB
|
Aria-Security Team
|
|
2006-11-24
|
|
Simple PHP Gallery 1.1 - 'System SP_Index.php' Cross-Site Scripting
|
20 |
WEB
|
Al7ejaz Hacker
|
|
2006-11-24
|
|
MidiCart ASP - 'Item_Show.asp?ID2006quant' SQL Injection
|
24 |
WEB
|
Aria-Security Team
|
|
2006-11-23
|
|
Active PHP BookMarks 1.1.2 - Multiple Remote File Inclusions
|
21 |
WEB
|
ThE-LoRd-Of-CrAcKiNg
|
|
2006-11-22
|
|
PMOS Help Desk 2.3 - 'ticket.php?email' Cross-Site Scripting
|
23 |
WEB
|
SwEET-DeViL
|
|
2006-11-22
|
|
PMOS Help Desk 2.3 - 'ticketview.php' Multiple Cross-Site Scripting Vulnerabilities
|
23 |
WEB
|
SwEET-DeViL
|
|
2006-11-21
|
|
My Little Weblog 2006.11.21 - 'Weblog.php' Cross-Site Scripting
|
22 |
WEB
|
the_Edit0r
|
|
2006-11-21
|
|
CuteNews 1.4.5 - 'rss_title' Cross-Site Scripting
|
24 |
WEB
|
Alireza Hassani
|
|
2006-11-21
|
|
CuteNews 1.4.5 - 'show_news.php' Cross-Site Scripting
|
19 |
WEB
|
Alireza Hassani
|
|
2006-11-21
|
|
Seditio 1.10 - 'Users.Profile.Inc.php' SQL Injection
|
20 |
WEB
|
Mustafa Can Bjorn
|
|
2006-11-21
|
|
CreaDirectory 1.2 - 'search.asp?search' Cross-Site Scripting
|
22 |
WEB
|
laurent gaffie
|
|
2006-11-21
|
|
CreaDirectory 1.2 - 'addlisting.asp?cat' Cross-Site Scripting
|
20 |
WEB
|
laurent gaffie
|
|
2006-11-21
|
|
CreaDirectory 1.2 - 'search.asp?category' SQL Injection
|
24 |
WEB
|
laurent gaffie
|
|
2006-11-21
|
|
JiRos Link Manager 1.0 - 'viewlinks.asp?categoryId' SQL Injection
|
28 |
WEB
|
laurent gaffie
|
|
2006-11-21
|
|
JiRos Link Manager 1.0 - 'openlink.asp?LinkID' SQL Injection
|
25 |
WEB
|
laurent gaffie
|
|
2006-11-21
|
|
Link Exchange Lite 1.0 - Multiple SQL Injections
|
23 |
WEB
|
laurent gaffie
|
|
2013-10-24
|
|
WordPress Theme SAICO 1.0 < 1.0.2 - Arbitrary File Upload
|
23 |
WEB
|
Byakuya Kouta
|
|
2006-11-20
|
|
Wabbit PHP Gallery 0.9 - 'Dir' Directory Traversal
|
25 |
WEB
|
the_Edit0r
|
|
2006-11-20
|
|
Klf-Realty 2.0 - 'detail.asp?property_id' SQL Injection
|
23 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Klf-Realty 2.0 - 'search_listing.asp' Multiple SQL Injections
|
30 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
The Classified Ad System 3.0 - 'default.asp' Multiple Cross-Site Scripting Vulnerabilities
|
30 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Rapid Classified 3.1 - 'advsearch.asp' Cross-Site Scripting
|
21 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Rapid Classified 3.1 - 'reply.asp' Cross-Site Scripting
|
24 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Rapid Classified 3.1 - 'search.asp' Cross-Site Scripting
|
31 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Rapid Classified 3.1 - 'view_print.asp' Cross-Site Scripting
|
21 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Rapid Classified 3.1 - 'viewad.asp' SQL Injection
|
23 |
WEB
|
laurent gaffie
|
|
2013-10-22
|
|
ARRIS DG860A - NVRAM Backup Password Disclosure
|
20 |
WEB
|
Justin Oberdorf
|
|
2006-11-20
|
|
Vikingboard 0.1.2 - 'admin.php?act' Traversal Arbitrary File Access
|
25 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Gnews Publisher - Multiple SQL Injections
|
23 |
WEB
|
Aria-Security Team
|
|
2006-11-20
|
|
Enthrallweb eHomes - 'result.asp' Multiple Cross-Site Scripting Vulnerabilities
|
24 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Enthrallweb eHomes - 'result.asp' Multiple SQL Injections
|
23 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Enthrallweb eHomes - 'compareHomes.asp' Multiple SQL Injections
|
17 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Enthrallweb eHomes - 'homeDetail.asp?AD_ID' SQL Injection
|
23 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Enthrallweb eClassifieds - 'dirSub.asp?sid' SQL Injection
|
23 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Enthrallweb eClassifieds - 'dircat.asp?cid' SQL Injection
|
26 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Enthrallweb eClassifieds - 'ad.asp' Multiple SQL Injections
|
24 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Grandora Rialto 1.6 - 'forminfo.asp?refno' Cross-Site Scripting
|
23 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Grandora Rialto 1.6 - 'searchmain.asp?cat' Cross-Site Scripting
|
25 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Grandora Rialto 1.6 - 'searchkey.asp?Keyword' Cross-Site Scripting
|
21 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Grandora Rialto 1.6 - 'listmain.asp?cat' Cross-Site Scripting
|
21 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Grandora Rialto 1.6 - 'searchoption.asp' Multiple SQL Injections
|
26 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Grandora Rialto 1.6 - 'searchmain.asp' Multiple SQL Injections
|
24 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Grandora Rialto 1.6 - 'searchkey.asp' Multiple SQL Injections
|
25 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Grandora Rialto 1.6 - 'printmain.asp?ID' SQL Injection
|
23 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Grandora Rialto 1.6 - 'listmain.asp?cat' SQL Injection
|
22 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Grandora Rialto 1.6 - 'listfull.asp?ID' SQL Injection
|
19 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
Grandora Rialto 1.6 - '/admin/default.asp' Multiple SQL Injections
|
18 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
vSpin Classified System 2004 - 'search.asp?minprice' Cross-Site Scripting
|
24 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
vSpin Classified System 2004 - 'cat.asp?catname' Cross-Site Scripting
|
20 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
vSpin Classified System 2004 - 'search.asp' Multiple SQL Injections
|
26 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
vSpin Classified System 2004 - 'cat.asp?cat' SQL Injection
|
23 |
WEB
|
laurent gaffie
|
|
2006-11-20
|
|
BirdBlog 1.4 - '/admin/logs.php?page' Cross-Site Scripting
|
25 |
WEB
|
the_Edit0r
|
|
2006-11-20
|
|
BirdBlog 1.4 - '/admin/entries.php?month' Cross-Site Scripting
|
23 |
WEB
|
the_Edit0r
|
|
2006-11-20
|
|
BirdBlog 1.4 - '/admin/comments.php?month' Cross-Site Scripting
|
23 |
WEB
|
the_Edit0r
|
|
2006-11-20
|
|
BirdBlog 1.4 - '/admin/admincore.php?msg' Cross-Site Scripting
|
26 |
WEB
|
the_Edit0r
|
|
2006-11-20
|
|
Boonex 2.0 Dolphin - 'index.php' Remote File Inclusion
|
24 |
WEB
|
S.W.A.T.
|
|
2006-11-18
|
|
Blog:CMS 4.1.3 - 'list.php' Cross-Site Scripting
|
25 |
WEB
|
Katatafish
|
|
2006-11-18
|
|
Texas Rankem - 'tournament_id' SQL Injection
|
25 |
WEB
|
Aria-Security Team
|
|
2006-11-18
|
|
Texas Rankem - 'selPlayer' SQL Injection
|
22 |
WEB
|
Aria-Security Team
|
|
2013-10-20
|
|
ZonPHP 2.25 - Remote Code Execution
|
23 |
WEB
|
Halim Cruzito
|
|
2006-11-18
|
|
ActiveNews Manager - 'articleId' SQL Injection (2)
|
26 |
WEB
|
laurent gaffie
|
|
2006-11-18
|
|
Active News Manager - 'catID' SQL Injection
|
23 |
WEB
|
laurent gaffie
|
|
2006-11-18
|
|
ActiveNews Manager - 'query' Cross-Site Scripting
|
23 |
WEB
|
laurent gaffie
|
|
2006-11-18
|
|
ActiveNews Manager - 'page' SQL Injection
|
23 |
WEB
|
laurent gaffie
|
|
2006-11-18
|
|
ActiveNews Manager - 'articleId' SQL Injection (1)
|
22 |
WEB
|
laurent gaffie
|
|
2006-11-18
|
|
Alan Ward A-CART 2.0 - 'category.asp?catcode' SQL Injection (1)
|
21 |
WEB
|
laurent gaffie
|
|
2006-11-18
|
|
A-Cart Pro 2.0 - 'product.asp?ProductID' SQL Injection
|
20 |
WEB
|
laurent gaffie
|
|
2006-11-17
|
|
BestWebApp Dating Site - 'login_form.asp?msg' Cross-Site Scripting
|
27 |
WEB
|
laurent gaffie
|
|
2006-11-17
|
|
BestWebApp Dating Site Login Component - Multiple Field SQL Injections
|
23 |
WEB
|
laurent gaffie
|
|
2006-11-17
|
|
vBulletin 3.6.x - Admin Control Panel Multiple Cross-Site Scripting Vulnerabilities
|
23 |
WEB
|
insanity
|
|
2006-11-17
|
|
20/20 Applications Data Shed 1.0 - 'listings.asp' Multiple SQL Injections
|
21 |
WEB
|
laurent gaffie
|
|
2006-11-17
|
|
20/20 Applications Data Shed 1.0 - 'f-email.asp?itemID' SQL Injection
|
22 |
WEB
|
laurent gaffie
|
|
2006-11-17
|
|
20/20 Auto Gallery 3.2 - Multiple SQL Injections
|
25 |
WEB
|
laurent gaffie
|
|
2006-11-17
|
|
20/20 Real Estate 3.2 - Multiple SQL Injections
|
21 |
WEB
|
laurent gaffie
|
|
2006-11-17
|
|
ASPCart 4.5 - Multiple SQL Injections
|
22 |
WEB
|
laurent gaffie
|
|
2006-11-17
|
|
PHP Upload Tool 1.0 - Arbitrary File Upload / Directory Traversal
|
23 |
WEB
|
Craig Heffner
|
|
2006-11-17
|
|
cPanel 10 - DNSlook.HTML Cross-Site Scripting
|
24 |
WEB
|
Aria-Security Team
|
|
2013-10-19
|
|
WordPress Theme Area53 - Arbitrary File Upload
|
21 |
WEB
|
Byakuya Kouta
|
|
2013-10-19
|
|
WHMCompleteSolution (WHMCS) 5.2.8 - SQL Injection
|
23 |
WEB
|
g00n
|
|
2006-11-16
|
|
Xtreme ASP Photo Gallery 2.0 - 'displaypic.asp?catname' Cross-Site Scripting
|
19 |
WEB
|
Aria-Security Team
|
|
2006-11-16
|
|
Xtreme ASP Photo Gallery 2.0 - 'displaypic.asp?sortorder' SQL Injection
|
23 |
WEB
|
Aria-Security Team
|
|
2006-09-15
|
|
phpMyAdmin 2.x - Multiple Script Array Handling Full Path Disclosures
|
25 |
WEB
|
laurent gaffie
|
|
2006-09-15
|
|
phpMyAdmin 2.x - 'sql.php?pos' Cross-Site Scripting
|
24 |
WEB
|
laurent gaffie
|
|
2006-09-15
|
|
phpMyAdmin 2.x - 'querywindow.php' Multiple Cross-Site Scripting Vulnerabilities
|
22 |
WEB
|
laurent gaffie
|
|
2006-09-15
|
|
phpMyAdmin 2.x - 'db_operations.php' Multiple Cross-Site Scripting Vulnerabilities
|
24 |
WEB
|
laurent gaffie
|
|
2006-09-15
|
|
phpMyAdmin 2.x - 'db_create.php?db' Cross-Site Scripting
|
21 |
WEB
|
laurent gaffie
|
|
2006-11-16
|
|
Image Gallery with Access Database - 'default.asp' Multiple SQL Injections
|
25 |
WEB
|
Aria-Security Team
|
|
2006-11-16
|
|
Image Gallery with Access Database - 'dispimage.asp?id' SQL Injection
|
22 |
WEB
|
Aria-Security Team
|
|
2006-11-16
|
|
Sphpblog 0.8 - Multiple Cross-Site Scripting Vulnerabilities
|
22 |
WEB
|
the_Edit0r
|
|
2006-11-16
|
|
Odysseus Blog 1.0 - 'blog.php' Cross-Site Scripting
|
20 |
WEB
|
the_Edit0r
|
|
2006-11-16
|
|
BlogTorrent Preview 0.92 - 'Announce.php' Cross-Site Scripting
|
20 |
WEB
|
the_Edit0r
|
|
2006-11-16
|
|
i-Gallery 3.4 - 'igallery.asp' Multiple Cross-Site Scripting Vulnerabilities
|
29 |
WEB
|
Aria-Security Team
|
|
2006-11-15
|
|
Hot Links - Perl PHP Information Disclosure
|
28 |
WEB
|
hack2prison
|
|
2006-11-15
|
|
ASPIntranet 2.1 - Multiple SQL Injections
|
23 |
WEB
|
Aria-Security Team
|
|
2006-11-15
|
|
Dragon Internet Events Listing 2.0.01 - 'admin_login.asp' Multiple Field SQL Injections
|
21 |
WEB
|
Benjamin Moss
|
|
2006-11-15
|
|
Dragon Internet Events Listing 2.0.01 - 'event_searchdetail.asp?ID' SQL Injection
|
20 |
WEB
|
Benjamin Moss
|
|
2006-11-15
|
|
Dragon Internet Events Listing 2.0.01 - 'venue_detail.asp?VenueID' SQL Injection
|
19 |
WEB
|
Benjamin Moss
|
|
2006-11-15
|
|
Yetihost Helm 3.2.10 - Multiple Cross-Site Scripting Vulnerabilities
|
21 |
WEB
|
Aria-Security Team
|
|
2006-11-14
|
|
High Performance Computers Solutions Shopping Cart - Multiple SQL Injections
|
23 |
WEB
|
laurent gaffie
|
|
2006-11-15
|
|
CandyPress Store 3.5.2 14 - 'prodList.asp?brand' SQL Injection
|
22 |
WEB
|
laurent gaffie
|
