Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2006-04-29   PlanetGallery - 'Gallery_admin.php' Authentication Bypass 20 WEB tugr@
2006-04-29   W-Agora 4.2 - BBCode Script Injection 18 WEB r0xes
2006-04-29   TextFileBB 1.0.16 - Multiple Tag Script Injection Vulnerabilities 22 WEB r0xes
2006-04-29   4Images 1.7.1 - 'member.php?sessionid' SQL Injection 19 WEB CrAzY.CrAcKeR
2006-04-29   4Images 1.7.1 - 'top.php?sessionid' SQL Injection 18 WEB CrAzY.CrAcKeR
2006-04-29   Advanced Guestbook 2.x - 'Addentry.php' Remote File Inclusion 19 WEB [Oo]
2013-08-22   DeWeS 0.4.2 - Directory Traversal 19 WEB High-Tech Bridge SA
2013-08-22   Foreman (RedHat OpenStack/Satellite) - users/create Mass Assignment (Metasploit) 20 WEB Metasploit
2013-08-22   Netgear ProSafe - Information Disclosure 21 WEB Juan J. Guelfo
2013-08-22   CBHotel Hotel Software and Booking system 1.8 - Multiple Vulnerabilities 17 WEB Dylan Irzi
2013-08-22   Ovidentia 7.9.4 - Multiple Vulnerabilities 19 WEB LiquidWorm
2006-04-29   Blog 0.2.3/0.2.4 Mod - 'Weblog_posting.php' SQL Injection 19 WEB Qex
2006-04-28   CoolMenus 4.0 - 'index.php' Remote File Inclusion 18 WEB botan
2006-04-28   Artmedic Event - 'index.php' Remote File Inclusion 21 WEB botan
2006-04-28   I-RATER Platinum - 'Config_settings.TPL.php' Remote File Inclusion 17 WEB O.U.T.L.A.W
2006-04-28   NeoMail - 'NeoMail.pl?sessionid' Cross-Site Scripting 17 WEB O.U.T.L.A.W
2006-04-28   DUclassified - 'detail.asp' SQL Injection 18 WEB sadegh.sarshogh
2013-08-21   Sitecom N300/N600 Devices - Multiple Vulnerabilities 16 WEB Roberto Paleari
2013-08-21   Adobe ColdFusion 9 - Administrative Authentication Bypass 20 WEB Scott Buckel
2013-08-21   Samsung DVR Firmware 1.10 - Authentication Bypass 19 WEB Andrea Fabrizi
2013-08-21   WordPress Plugin ThinkIT 0.1 - Multiple Vulnerabilities 18 WEB Yashar shahinzadeh
2013-08-21   Bitbot (C2 Web Panel) - 'gate2.php' Multiple Vulnerabilities 22 WEB bwall
2006-04-04   MySmartBB 1.1.2/1.1.3 - Multiple Input Validation Vulnerabilities 16 WEB BoNy-m
2006-04-26   DevBB 1.0 - 'member.php' Cross-Site Scripting 24 WEB Qex
2006-04-26   Farsinews 2.5.3 - Multiple Cross-Site Scripting Vulnerabilities 17 WEB O.U.T.L.A.W.
2006-04-26   CuteNews 1.4.1 - Multiple Cross-Site Scripting Vulnerabilities 17 WEB outlaw.dll
2006-04-25   Instant Photo Gallery 1.0 - 'portfolio_photo_popup.php?id' Cross-Site Scripting 21 WEB Qex
2006-04-25   Instant Photo Gallery 1.0 - 'portfolio.php?cat_id' Cross-Site Scripting 15 WEB Qex
2006-04-25   Instant Photo Gallery 1.0 - 'member.php?member' Cross-Site Scripting 21 WEB Qex
2006-05-25   Invision Power Board 2.0/2.1 - 'index.php?CK' SQL Injection 19 WEB IceShaman
2006-04-25   PHPWebFTP 2.3 - Multiple Cross-Site Scripting Vulnerabilities 19 WEB arko.dhar
2006-04-25   NextAge Shopping Cart - Multiple HTML Injection Vulnerabilities 18 WEB R@1D3N
2006-04-25   PhotoKorn 1.53/1.54 - 'print.php?cat' SQL Injection 23 WEB Dr.Jr7
2006-04-25   PhotoKorn 1.53/1.54 - 'id' SQL Injection 18 WEB Dr.Jr7
2006-04-25   PhotoKorn 1.53/1.54 - 'index.php' Multiple SQL Injections 19 WEB Dr.Jr7
2006-04-24   Scry Gallery 1.1 - 'index.php' Cross-Site Scripting 20 WEB mayank
2006-04-24   Blender 2.36 - '.BVF' File Import Python Code Execution 20 WEB Joxean Koret
2006-04-22   Simplog 0.9.3 - 'ImageList.php' Cross-Site Scripting 18 WEB nukedx
2006-04-22   MKPortal 1.1 - Multiple Input Validation Vulnerabilities 22 WEB Mustafa Can Bjorn IPEKCI
2006-04-21   Scry Gallery - Directory Traversal 22 WEB Morocco Security Team
2006-04-21   phpLDAPadmin 0.9.8 - 'template_engine.php' Cross-Site Scripting 19 WEB r0t
2006-04-21   phpLDAPadmin 0.9.8 - 'search.php' Cross-Site Scripting 19 WEB r0t
2006-04-21   phpLDAPadmin 0.9.8 - 'rename_form.php' Cross-Site Scripting 23 WEB r0t
2006-04-21   phpLDAPadmin 0.9.8 - 'copy_form.php' Cross-Site Scripting 19 WEB r0t
2006-04-21   phpLDAPadmin 0.9.8 - 'compare_form.php' Cross-Site Scripting 19 WEB r0t
2006-04-20   Manic Web MWGuest 2.1 - 'MWguest.php' HTML Injection 22 WEB Aliaksandr Hartsuyeu
2006-04-20   Portal Pack 6.0 - Multiple Cross-Site Scripting Vulnerabilities 22 WEB r0t
2006-04-20   ThWboard 3.0 - 'index.php' Cross-Site Scripting 21 WEB CrAzY CrAcKeR
2006-04-20   W2B Online Banking - 'SID' Cross-Site Scripting 18 WEB r0t
2006-04-20   4homepages 4Images 1.7 - 'member.php' Cross-Site Scripting 21 WEB Qex
2006-04-20   I-RATER Platinum - 'Common.php' Remote File Inclusion 18 WEB r0t
2006-04-20   Net Clubs Pro 4.0 - 'login.cgi?Password' Cross-Site Scripting 19 WEB r0t
2006-04-20   Net Clubs Pro 4.0 - 'imessage.cgi?Username' Cross-Site Scripting 18 WEB r0t
2006-04-20   Net Clubs Pro 4.0 - 'sendim.cgi' Multiple Cross-Site Scripting Vulnerabilities 19 WEB r0t
2006-04-19   AWStats 4.0/5.x/6.x - AWStats.pl Multiple Cross-Site Scripting Vulnerabilities 21 WEB r0t
2006-04-19   otalCalendar - 'about.php?inc_dir' Remote File Inclusion 20 WEB VietMafia
2006-04-19   Plexum PlexCart X5 - Multiple SQL Injections 20 WEB r0t
2006-04-19   xFlow 5.46.11 - 'index.cgi' Multiple Cross-Site Scripting Vulnerabilities 20 WEB r0t
2006-04-19   xFlow 5.46.11 - 'index.cgi' Multiple SQL Injections 21 WEB r0t
2006-04-19   BannerFarm 2.3 - Multiple Cross-Site Scripting Vulnerabilities 22 WEB r0t
2006-04-19   ContentBoxx - 'login.php' Cross-Site Scripting 18 WEB botan
2006-04-19   ThWboard 2.8 - 'showtopic.php' SQL Injection 19 WEB Qex
2006-04-19   IntelliLink Pro 5.06 - 'edit.cgi' Multiple Cross-Site Scripting Vulnerabilities 20 WEB r0t
2006-04-19   IntelliLink Pro 5.06 - 'addlink_lwp.cgi?url' Cross-Site Scripting 19 WEB r0t
2006-04-19   Cisco Wireless Lan Solution Engine - ArchiveApplyDisplay.jsp Cross-Site Scripting 20 WEB Adam Pointon
2006-04-19   CommuniMail 1.2 - 'templates.cgi?form_id' Cross-Site Scripting 22 WEB r0t
2006-04-19   CommuniMail 1.2 - 'mailadmin.cgi?list_id' Cross-Site Scripting 19 WEB r0t
2006-04-19   Visale 1.0 - 'pblsmb.cgi?listno' Cross-Site Scripting 16 WEB r0t
2006-04-19   Visale 1.0 - 'pblscg.cgi?catsubno' Cross-Site Scripting 20 WEB r0t
2006-04-19   Visale 1.0 - 'pbpgst.cgi?keyval' Cross-Site Scripting 19 WEB r0t
2006-04-19   ModernBill 4.3 - 'user.php' SQL Injection 17 WEB r0t
2006-04-19   Article Publisher 1.0.1 Pro - Multiple SQL Injections 18 WEB r0t
2006-04-19   CutePHP CuteNews 1.4.1 Editnews Module - Cross-Site Scripting 21 WEB LoK-Crew
2006-04-18   PHPLister 0.4.1 - 'index.php' Cross-Site Scripting 18 WEB botan
2006-04-18   RechnungsZentrale 2 1.1.3 - 'Authent.php4' SQL Injection 19 WEB GroundZero Security
2006-04-18   PHPLinks 2.1.2/2.1.3 - 'index.php' Cross-Site Scripting 18 WEB r0t
2006-04-18   axoverzicht.CGI - Cross-Site Scripting 19 WEB Qex
2006-04-17   Coppermine 1.4.4 - 'index.php' Local File Inclusion 21 WEB imei
2006-04-17   MyBB 1.1 - Global Variable Overwrite 17 WEB imei
2006-04-17   Manila 9.0.1 - Multiple Cross-Site Scripting Vulnerabilities 20 WEB Aaron Kaplan
2006-04-17   Calendarix 0.7 - 'YearCal.php' Cross-Site Scripting 20 WEB botan
2006-04-17   Jax Guestbook 3.50 - 'Page' Cross-Site Scripting 21 WEB ALMOKANN3
2006-04-17   DbbS 2.0 - Multiple Input Validation Vulnerabilities 20 WEB rgod
2006-04-17   Blursoft Blur6ex 0.3.462 - 'index.php' Local File Inclusion 23 WEB Hamid Ebadi
2006-04-17   TinyPHPForum 3.6 - Multiple Cross-Site Scripting Vulnerabilities (1) 21 WEB Hessam-x
2006-04-17   Monster Top List 1.4 - 'functions.php' Remote File Inclusion 19 WEB r0t
2006-04-17   PHPFaber TopSites - 'index.php' Cross-Site Scripting 19 WEB botan
2006-04-15   PHPGuestbook 0.0.2/1.0 - HTML Injection 20 WEB Qex
2013-08-17   Photo Transfer Upload 1.0 iOS - Multiple Vulnerabilities 17 WEB Vulnerability-Lab
2013-08-17   Copy to WebDAV 1.1 iOS - Multiple Vulnerabilities 19 WEB Vulnerability-Lab
2013-08-17   Quack Chat 1.0 - Multiple Vulnerabilities 23 WEB Dylan Irzi
2006-04-15   Tiny Web Gallery 1.4 - 'index.php' Cross-Site Scripting 23 WEB Qex
2006-04-14   Farsinews 2.1/2.5 - 'search.php' Cross-Site Scripting 17 WEB amin emami
2006-04-14   MODx CMS 0.9.1 - 'index.php' Directory Traversal 21 WEB Rusydi Hasan
2006-04-14   MODx CMS 0.9.1 - 'index.php' Cross-Site Scripting 17 WEB Rusydi Hasan
2006-04-14   Papoo 2.1.x - 'print.php' Cross-Site Scripting 20 WEB Rusydi Hasan
2006-04-13   LifeType 1.0.3 - 'index.php' Cross-Site Scripting 20 WEB Rusydi Hasan
2006-04-13   PowerClan 1.14 - 'member.php' SQL Injection 18 WEB d4igoro
2006-04-13   PlanetSearch + - 'Planetsearchplus.php' Cross-Site Scripting 24 WEB d4igoro
2006-04-15   PHPAlbum 0.2.2/0.2.3/4.1 - 'Language.php' File Inclusion 18 WEB rgod
2006-04-14   AR-Blog 5.2 - 'print.php' Cross-Site Scripting 20 WEB ALMOKANN3
2006-04-13   SimpleBBS 1.0.6/1.0.7/1.1 - Arbitrary Command Execution 19 WEB rUnViRuS
2006-04-12   PatroNet CMS - 'index.php' Cross-Site Scripting 20 WEB Soothackers
2006-04-12   MyBB 1.10 - 'member.php' Cross-Site Scripting 22 WEB o.y.6
2005-10-31   phpMyAdmin 2.7 - 'sql.php' Cross-Site Scripting 24 WEB p0w3r
2006-04-12   Interaktiv.shop 4/5 - Multiple Cross-Site Scripting Vulnerabilities 18 WEB r0t
2006-04-12   Chipmunk Guestbook 1.3 - 'index.php' SQL Injection 19 WEB Dr.Jr7
2006-04-11   SWSoft Confixx 3.0.6/3.0.8/3.1.2 - 'index.php' SQL Injection 20 WEB LoK-Crew
2006-04-11   Tritanium Bulletin Board 1.2.3 - Multiple Cross-Site Scripting Vulnerabilities 18 WEB d4igoro
2006-04-11   Indexu 5.0 - Multiple Remote File Inclusions 20 WEB SnIpEr_SA
2006-04-11   PHPKIT 1.6.1 R2 - 'Include.php' SQL Injection 17 WEB Hamid Ebadi
2006-04-11   SWSoft Confixx 3.1.2 - 'Jahr' Cross-Site Scripting 18 WEB Snake_23
2006-04-11   Dokeos 1.x - 'viewtopic.php' SQL Injection 19 WEB Alvaro Olavarria
2006-04-11   Clever Copy 3.0 - 'Connect.INC' Information Disclosure 17 WEB M.Hasran Addahroni
2006-04-11   Microsoft FrontPage - Server Extensions Cross-Site Scripting 21 WEB Esteban Martinez Fayo
2006-04-11   JetPhoto 1.0/2.0/2.1 - 'detail.php?page' Cross-Site Scripting 18 WEB 0o_zeus_o0
2006-04-11   JetPhoto 1.0/2.0/2.1 - 'Slideshow.php?name' Cross-Site Scripting 17 WEB 0o_zeus_o0
2006-04-11   JetPhoto 1.0/2.0/2.1 - 'gallery.php?page' Cross-Site Scripting 15 WEB 0o_zeus_o0
2006-04-11   JetPhoto 1.0/2.0/2.1 - 'thumbnail.php?page' Cross-Site Scripting 21 WEB 0o_zeus_o0
2006-04-11   AzDGVote - Remote File Inclusion 18 WEB SnIpEr_SA
2006-04-10   ShopWeezle 2.0 - 'memo.php?itemID' SQL Injection 19 WEB r0t
2006-04-10   ShopWeezle 2.0 - 'index.php' Multiple SQL Injections 21 WEB r0t
2006-04-10   ShopWeezle 2.0 - 'login.php?itemID' SQL Injection 17 WEB r0t
2013-08-15   Alibaba Clone Tritanium Version - 'news_desc.html' SQL Injection 17 WEB IRAQ_JAGUAR
2013-08-15   w-CMS 2.0.1 - Remote Code Execution 25 WEB ICheer_No0M