|
2006-03-17
|
|
Invision Power Board (IP.Board) 2.0.4 - Help Action 'HID' Cross-Site Scripting
|
36 |
WEB
|
Mr.SNAKE
|
|
2006-03-17
|
|
Invision Power Board (IP.Board) 2.0.4 - Mail Action 'MID' Cross-Site Scripting
|
38 |
WEB
|
Mr.SNAKE
|
|
2006-03-17
|
|
Invision Power Board (IP.Board) 2.0.4 - Print Action 't' Cross-Site Scripting
|
36 |
WEB
|
Mr.SNAKE
|
|
2006-03-17
|
|
Invision Power Board (IP.Board) 2.0.4 - Calendar Action Multiple Cross-Site Scripting Vulnerabilitie
|
38 |
WEB
|
Mr.SNAKE
|
|
2006-03-17
|
|
Invision Power Board (IP.Board) 2.0.4 - 'index.php?st' Cross-Site Scripting
|
39 |
WEB
|
Mr.SNAKE
|
|
2006-03-17
|
|
Invision Power Board (IP.Board) 2.0.4 - Search Action Multiple Cross-Site Scripting Vulnerabilities
|
38 |
WEB
|
Mr.SNAKE
|
|
2006-03-16
|
|
phpMyAdmin 2.8.1 - Set_Theme Cross-Site Scripting
|
40 |
WEB
|
Ali Asad
|
|
2006-03-16
|
|
Oxynews - 'index.php' SQL Injection
|
39 |
WEB
|
R00T3RR0R
|
|
2013-08-08
|
|
BigTree CMS 4.0 RC2 - Multiple Vulnerabilities
|
39 |
WEB
|
High-Tech Bridge SA
|
|
2013-08-08
|
|
PHPFox 3.6.0 (build3) - Multiple SQL Injections
|
36 |
WEB
|
Matias Fontanini
|
|
2006-03-16
|
|
Contrexx CMS 1.0.x - 'index.php' Cross-Site Scripting
|
36 |
WEB
|
Soot
|
|
2006-03-15
|
|
DSDownload 1.0 - Multiple SQL Injections
|
37 |
WEB
|
Aliaksandr Hartsuyeu
|
|
2006-03-14
|
|
DSCounter 1.2 - 'index.php' SQL Injection
|
35 |
WEB
|
Aliaksandr Hartsuyeu
|
|
2006-03-14
|
|
CyBoards PHP Lite 1.21/1.25 - 'post.php' SQL Injection
|
39 |
WEB
|
Aliaksandr Hartsuyeu
|
|
2006-03-13
|
|
Vegas Forum 1.0 - 'Forumlib.php' SQL Injection
|
38 |
WEB
|
Aliaksandr Hartsuyeu
|
|
2006-03-10
|
|
WMNews - 'wmcomments.php?ArtID' Cross-Site Scripting
|
37 |
WEB
|
R00T3RR0R
|
|
2006-03-10
|
|
WMNews - 'footer.php?ctrrowcol' Cross-Site Scripting
|
38 |
WEB
|
R00T3RR0R
|
|
2006-03-10
|
|
WMNews - 'wmview.php?ArtCat' Cross-Site Scripting
|
35 |
WEB
|
R00T3RR0R
|
|
2006-03-11
|
|
vCard 2.8/2.9 - 'create.php' Multiple Cross-Site Scripting Vulnerabilities
|
35 |
WEB
|
Linux_Drox
|
|
2006-03-10
|
|
Core News 2.0.1 - 'index.php' Remote Code Execution
|
39 |
WEB
|
botan
|
|
2006-03-10
|
|
QwikiWiki 1.4/1.5 - 'recentchanges.php?help' Cross-Site Scripting
|
36 |
WEB
|
Kiki
|
|
2006-03-10
|
|
QwikiWiki 1.4/1.5 - 'pageindex.php?help' Cross-Site Scripting
|
37 |
WEB
|
Kiki
|
|
2006-03-10
|
|
QwikiWiki 1.4/1.5 - 'login.php' Multiple Cross-Site Scripting Vulnerabilities
|
39 |
WEB
|
Kiki
|
|
2006-03-10
|
|
QwikiWiki 1.4/1.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
|
35 |
WEB
|
Kiki
|
|
2006-03-09
|
|
txtForum 1.0.3/1.0.4 - Remote PHP Script Code Injection
|
38 |
WEB
|
enji@infosys.tuwien.ac.at
|
|
2013-08-07
|
|
McAfee SuperScan 4.0 - Cross-Site Scripting
|
36 |
WEB
|
Trustwave's SpiderLabs
|
|
2013-08-07
|
|
Joomla! Component com_sectionex 2.5.96 - SQL Injection
|
38 |
WEB
|
Matias Fontanini
|
|
2013-08-07
|
|
WordPress Plugin Usernoise 3.7.8 - Persistent Cross-Site Scripting
|
38 |
WEB
|
RogueCoder
|
|
2013-08-07
|
|
Hikvision IP Cameras 4.1.0 b130111 - Multiple Vulnerabilities
|
38 |
WEB
|
Core Security
|
|
2013-08-07
|
|
WordPress Plugin Booking Calendar 4.1.4 - Cross-Site Request Forgery
|
39 |
WEB
|
Dylan Irzi
|
|
2013-08-07
|
|
Pluck CMS 4.7 - HTML Code Injection
|
34 |
WEB
|
Yashar shahinzadeh
|
|
2006-03-09
|
|
txtForum 1.0.3/1.0.4 - Multiple Cross-Site Scripting Vulnerabilities
|
37 |
WEB
|
Nenad Jovanovic
|
|
2006-03-09
|
|
DCP-Portal 3.7/4.x/5.x/6.x - 'mycontents.php' Multiple Cross-Site Scripting Vulnerabilities
|
39 |
WEB
|
Nenad Jovanovic
|
|
2006-03-09
|
|
DCP-Portal 3.7/4.x/5.x/6.x - 'lostpassword.php' Multiple Cross-Site Scripting Vulnerabilities
|
33 |
WEB
|
Nenad Jovanovic
|
|
2006-03-09
|
|
DCP-Portal 3.7/4.x/5.x/6.x - 'inbox.php' Multiple Cross-Site Scripting Vulnerabilities
|
36 |
WEB
|
Nenad Jovanovic
|
|
2006-03-09
|
|
DCP-Portal 3.7/4.x/5.x/6.x - 'forums.php' Multiple Cross-Site Scripting Vulnerabilities
|
37 |
WEB
|
Nenad Jovanovic
|
|
2006-03-09
|
|
DCP-Portal 3.7/4.x/5.x/6.x - 'calendar.php' Multiple Cross-Site Scripting Vulnerabilities
|
37 |
WEB
|
Nenad Jovanovic
|
|
2006-03-09
|
|
DCP-Portal 3.7/4.x/5.x/6.x - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
|
36 |
WEB
|
Nenad Jovanovic
|
|
2006-03-09
|
|
MyBloggie 2.1.2/2.1.3 - 'del.php' Cross-Site Scripting
|
36 |
WEB
|
enji@infosys.tuwien.ac.at
|
|
2006-03-09
|
|
MyBloggie 2.1.2/2.1.3 - 'delcat.php' Cross-Site Scripting
|
37 |
WEB
|
enji@infosys.tuwien.ac.at
|
|
2006-03-09
|
|
MyBloggie 2.1.2/2.1.3 - 'trackback_url' Cross-Site Scripting
|
37 |
WEB
|
enji@infosys.tuwien.ac.at
|
|
2006-03-09
|
|
MyBloggie 2.1.2/2.1.3 - 'editcat.php' Cross-Site Scripting
|
40 |
WEB
|
enji@infosys.tuwien.ac.at
|
|
2006-03-09
|
|
MyBloggie 2.1.2/2.1.3 - 'adduser.php' Cross-Site Scripting
|
38 |
WEB
|
enji@infosys.tuwien.ac.at
|
|
2006-03-09
|
|
MyBloggie 2.1.2/2.1.3 - 'edituser.php' Cross-Site Scripting
|
40 |
WEB
|
enji@infosys.tuwien.ac.at
|
|
2006-03-09
|
|
MyBloggie 2.1.2/2.1.3 - 'addcat.php' Cross-Site Scripting
|
35 |
WEB
|
enji@infosys.tuwien.ac.at
|
|
2006-03-09
|
|
MyBloggie 2.1.2/2.1.3 - 'deluser.php' Cross-Site Scripting
|
34 |
WEB
|
enji@infosys.tuwien.ac.at
|
|
2006-03-09
|
|
MyBloggie 2.1.2/2.1.3 - 'delcomment.php' Cross-Site Scripting
|
39 |
WEB
|
enji@infosys.tuwien.ac.at
|
|
2006-03-09
|
|
MyBloggie 2.1.2/2.1.3 - 'upload.php' Cross-Site Scripting
|
38 |
WEB
|
enji@infosys.tuwien.ac.at
|
|
2006-03-09
|
|
ADP Forum 2.0.x - 'Subject' HTML Injection
|
36 |
WEB
|
liz0
|
|
2013-08-07
|
|
FTP OnConnect 1.4.11 iOS - Multiple Vulnerabilities
|
37 |
WEB
|
Vulnerability-Lab
|
|
2006-03-09
|
|
sBlog 0.7.2 - 'comments_do.php' Multiple POST Cross-Site Scripting Vulnerabilities
|
39 |
WEB
|
Kiki
|
|
2006-03-09
|
|
sBlog 0.7.2 - 'search.php?keyword' POST Method Cross-Site Scripting
|
39 |
WEB
|
Kiki
|
|
2006-03-08
|
|
TextFileBB 1.0 - Multiple Cross-Site Scripting Vulnerabilities
|
39 |
WEB
|
Retard
|
|
2006-03-06
|
|
HitHost 1.0 - 'viewuser.php?hits' Cross-Site Scripting
|
36 |
WEB
|
Retard
|
|
2006-03-06
|
|
HitHost 1.0 - 'deleteuser.php?user' Cross-Site Scripting
|
36 |
WEB
|
Retard
|
|
2006-03-07
|
|
LoudBlog 0.41 - 'backend_settings.php' Traversal Arbitrary File Access
|
37 |
WEB
|
tzitaroth
|
|
2006-03-07
|
|
LoudBlog 0.41 - 'index.php?template' Traversal Arbitrary File Access
|
38 |
WEB
|
tzitaroth
|
|
2006-03-07
|
|
LoudBlog 0.41 - 'podcast.php' SQL Injection
|
36 |
WEB
|
tzitaroth
|
|
2006-03-07
|
|
Link Bank - 'Iframe.php' Cross-Site Scripting
|
39 |
WEB
|
Retard
|
|
2006-03-06
|
|
Game-Panel 2.6 - 'login.php' Cross-Site Scripting
|
39 |
WEB
|
Retard
|
|
2006-03-06
|
|
PHORUM 3.x/5.x - 'Common.php' Remote File Inclusion
|
37 |
WEB
|
ERNE
|
|
2006-03-06
|
|
Bitweaver 1.1/1.2 - 'Title' HTML Injection
|
38 |
WEB
|
Kiki
|
|
2006-03-06
|
|
Invision Power Board 2.1.5 - showtopic SQL Injection
|
36 |
WEB
|
Mr.SNAKE
|
|
2006-03-06
|
|
RunCMS 1.x - 'Bigshow.php' Cross-Site Scripting
|
40 |
WEB
|
Roozbeh Afrasiabi
|
|
2006-03-06
|
|
DVGuestbook 1.0/1.2.2 - 'dv_gbook.php?f' Cross-Site Scripting
|
40 |
WEB
|
Liz0ziM
|
|
2006-03-06
|
|
DVGuestbook 1.0/1.2.2 - 'index.php?page' Cross-Site Scripting
|
41 |
WEB
|
Liz0ziM
|
|
2006-03-04
|
|
Simplog 1.0.2 - Information Disclosure
|
39 |
WEB
|
Retard
|
|
2006-03-04
|
|
CutePHP CuteNews 1.4.1 - 'index.php' Cross-Site Scripting
|
37 |
WEB
|
Roozbeh Afrasiabi
|
|
2006-03-04
|
|
Woltlab Burning Board 2.3.4 - 'misc.php' Cross-Site Scripting
|
38 |
WEB
|
r57shell
|
|
2006-03-04
|
|
Easy Forum 2.5 - New User Image File HTML Injection
|
39 |
WEB
|
Aliaksandr Hartsuyeu
|
|
2006-03-04
|
|
VBZooM Forum 1.11 - 'contact.php?UserID' Cross-Site Scripting
|
39 |
WEB
|
Mr.SNAKE
|
|
2006-03-04
|
|
VBZooM Forum 1.11 - 'comment.php?UserID' Cross-Site Scripting
|
39 |
WEB
|
Mr.SNAKE
|
|
2006-03-04
|
|
VBZoom Forum 1.11 - 'show.php' MainID SQL Injection
|
38 |
WEB
|
Mr.SNAKE
|
|
2006-03-02
|
|
LogIT 1.3/1.4 - Remote File Inclusion
|
35 |
WEB
|
botan
|
|
2006-03-02
|
|
NZ eCommerce System - 'index.php' Multiple SQL Injections
|
36 |
WEB
|
r0t
|
|
2006-03-02
|
|
vBulletin 3.0/3.5 - 'profile.php?Email' HTML Injection
|
40 |
WEB
|
imei
|
|
2006-03-02
|
|
PluggedOut Nexus 0.1 - 'forgotten_password.php' SQL Injection
|
37 |
WEB
|
Hamid Ebadi
|
|
2006-03-02
|
|
DCI-Designs Dawaween 1.03 - 'Poems.php' SQL Injection
|
38 |
WEB
|
sherba
|
|
2006-03-01
|
|
SMBlog 1.2 - Arbitrary PHP Command Execution
|
35 |
WEB
|
botan
|
|
2006-02-28
|
|
PEHEPE Membership Management System 3.0 - Remote PHP Script Code Injection
|
38 |
WEB
|
Yunus Emre Yilmaz
|
|
2006-02-26
|
|
PEHEPE Membership Management System 3.0 - 'Sol_menu.php' Cross-Site Scripting
|
37 |
WEB
|
Yunus Emre Yilmaz
|
|
2006-02-28
|
|
Mozilla Thunderbird 1.5 - Multiple Remote Information Disclosure Vulnerabilities
|
36 |
WEB
|
Crashfr
|
|
2006-02-28
|
|
EJ3 TOPo 2.2.178 - 'Inc_header.php' Cross-Site Scripting
|
38 |
WEB
|
Yunus Emre Yilmaz
|
|
2006-02-28
|
|
QwikiWiki 1.4 - 'index.php' Cross-Site Scripting
|
41 |
WEB
|
Dr^Death
|
|
2006-02-27
|
|
n8cms 1.1/1.2 - 'mailto.php?userid' Cross-Site Scripting
|
39 |
WEB
|
Liz0ziM
|
|
2006-02-27
|
|
n8cms 1.1/1.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
|
34 |
WEB
|
Liz0ziM
|
|
2006-02-27
|
|
n8cms 1.1/1.2 - 'index.php' Multiple SQL Injections
|
38 |
WEB
|
Liz0ziM
|
|
2006-02-25
|
|
D3Jeeb Pro 3 - 'catogary.php?catid' SQL Injection
|
35 |
WEB
|
SAUDI
|
|
2006-02-25
|
|
D3Jeeb Pro 3 - 'fastlinks.php?catid' SQL Injection
|
37 |
WEB
|
SAUDI
|
|
2006-02-27
|
|
Archangel Weblog 0.90.2 - Authentication Bypass
|
41 |
WEB
|
KingOfSka
|
|
2006-02-27
|
|
Woltlab Burning Board 1.1.1/2.x - 'galerie_onfly.php' Cross-Site Scripting
|
40 |
WEB
|
botan
|
|
2006-02-27
|
|
Woltlab Burning Board 1.1.1/2.x - 'galerie_index.php?Username' Cross-Site Scripting
|
40 |
WEB
|
botan
|
|
2006-02-27
|
|
Fantastic News 2.1.1 - SQL Injection
|
37 |
WEB
|
SAUDI
|
|
2006-02-25
|
|
Thomson SpeedTouch 500 Series - LocalNetwork Page 'name' Cross-Site Scripting
|
37 |
WEB
|
Preben Nylokken
|
|
2006-02-25
|
|
PHP-Nuke 7.8 - 'Mainfile.php' SQL Injection
|
40 |
WEB
|
waraxe
|
|
2013-08-03
|
|
RiteCMS 1.0.0 - Multiple Vulnerabilities
|
37 |
WEB
|
Yashar shahinzadeh
|
|
2006-02-25
|
|
DCI-Taskeen 1.03 - 'cat.php' Multiple SQL Injections
|
42 |
WEB
|
Linux_Drox
|
|
2006-02-25
|
|
DCI-Taskeen 1.03 - 'basket.php' Multiple SQL Injections
|
36 |
WEB
|
Linux_Drox
|
|
2006-02-25
|
|
FreeHostShop Website Generator 3.3 - Arbitrary File Upload
|
38 |
WEB
|
NSA Group
|
|
2006-02-25
|
|
SPiD 1.3.1 - 'Scan_Lang_Insert.php' Local File Inclusion
|
39 |
WEB
|
NSA Group
|
|
2006-02-25
|
|
Battleaxe Software BttlxeForum 2.0 - 'Failure.asp' Cross-Site Scripting
|
35 |
WEB
|
rUnViRuS
|
|
2006-02-22
|
|
myPHPNuke 1.8.8 - 'download.php' Cross-Site Scripting
|
36 |
WEB
|
Mustafa Can Bjorn
|
|
2006-02-22
|
|
myPHPNuke 1.8.8 - 'reviews.php' Cross-Site Scripting
|
38 |
WEB
|
Mustafa Can Bjorn
|
|
2006-02-23
|
|
JGS-Gallery 4.0 - 'Board jgs_galerie_scroll.php?userid' Cross-Site Scripting
|
40 |
WEB
|
nuker
|
|
2006-02-23
|
|
JGS-Gallery 4.0 - 'jgs_galerie_slideshow.php' Multiple Cross-Site Scripting Vulnerabilities
|
39 |
WEB
|
nuker
|
|
2006-02-23
|
|
PHPX 3.5.9 - XCode Tag HTML Injection
|
36 |
WEB
|
Thomas Pollet
|
|
2006-02-23
|
|
CubeCart 3.0.x - Arbitrary File Upload
|
38 |
WEB
|
NSA Group
|
|
2006-02-23
|
|
Oi! Email Marketing System 3.0 - 'index.php' SQL Injection
|
39 |
WEB
|
h4cky0u
|
|
2006-02-23
|
|
NOCC 1.0 - 'html_bottom_table.php' Multiple Cross-Site Scripting Vulnerabilities
|
36 |
WEB
|
rgod
|
|
2006-02-23
|
|
NOCC 1.0 - 'no_mail.php?html_no_mail' Cross-Site Scripting
|
38 |
WEB
|
rgod
|
|
2006-02-23
|
|
NOCC 1.0 - 'filter_prefs.php?html_filter_select' Cross-Site Scripting
|
36 |
WEB
|
rgod
|
|
2006-02-23
|
|
NOCC 1.0 - 'error.php?html_error_occurred' Cross-Site Scripting
|
36 |
WEB
|
rgod
|
|
2006-02-23
|
|
Web Calendar Pro - 'Dropbase.php' SQL Injection
|
36 |
WEB
|
ReZEN
|
|
2013-08-02
|
|
Oracle Hyperion 11 - Directory Traversal
|
33 |
WEB
|
Richard Warren
|
|
2013-08-02
|
|
WordPress Plugin Better WP Security 3.4.8/3.4.9/3.4.10/3.5.2/3.5.3 - Persistent Cross-Site Scripting
|
39 |
WEB
|
Richard Warren
|
|
2013-08-02
|
|
TP-Link TL-SC3171 IP Cameras - Multiple Vulnerabilities
|
39 |
WEB
|
Core Security
|
|
2013-08-02
|
|
Western Digital My Net Wireless Routers - Password Disclosure
|
38 |
WEB
|
Kyle Lovett
|
|
2013-08-02
|
|
Cotonti 0.9.13 - SQL Injection
|
42 |
WEB
|
High-Tech Bridge SA
|
|
2013-08-02
|
|
MiCasaVerde VeraLite 1.5.408 - Multiple Vulnerabilities
|
41 |
WEB
|
Trustwave's SpiderLabs
|
|
2013-08-02
|
|
INSTEON Hub 2242-222 - Lack of Web and API Authentication
|
39 |
WEB
|
Trustwave's SpiderLabs
|
|
2013-08-02
|
|
D-Link DIR-645 1.03B08 - Multiple Vulnerabilities
|
39 |
WEB
|
Roberto Paleari
|
|
2013-08-02
|
|
Telmanik CMS Press 1.01b - 'pages.php?page_name' SQL Injection
|
40 |
WEB
|
Anarchy Angel
|
|
2013-08-02
|
|
vTiger CRM 5.4.0 SOAP - Multiple Vulnerabilities
|
40 |
WEB
|
EgiX
|
|
2013-08-02
|
|
BigACE 2.7.8 - Cross-Site Request Forgery (Add Admin)
|
40 |
WEB
|
Yashar shahinzadeh
|
|
2013-08-02
|
|
FunGamez - Arbitrary File Upload
|
37 |
WEB
|
cr4wl3r
|
