Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2005-12-21   Scoop 1.1 RC1 - Missing Story Error Cross-Site Scripting 37 WEB r0t3d3Vil
2005-12-21   Scoop 1.1 RC1 Search Module - Multiple Cross-Site Scriptings 37 WEB r0t3d3Vil
2005-12-21   ComputerOil Redakto CMS 3.2 - Multiple Cross-Site Scripting Vulnerabilities 36 WEB r0t3d3Vil
2005-12-21   ProjectApp 3.3 - 'default.asp?skin_number' Cross-Site Scripting 43 WEB r0t
2005-12-21   ProjectApp 3.3 - 'login.asp?ret_page' Cross-Site Scripting 39 WEB r0t
2005-12-21   ProjectApp 3.3 - 'pmprojects.asp?projectid' Cross-Site Scripting 41 WEB r0t
2005-12-21   ProjectApp 3.3 - 'links.asp?keywords' Cross-Site Scripting 44 WEB r0t
2005-12-21   ProjectApp 3.3 - 'cat.asp?keywords' Cross-Site Scripting 41 WEB r0t
2005-12-21   ProjectApp 3.3 - 'search_employees.asp?keywords' Cross-Site Scripting 44 WEB r0t
2005-12-21   ProjectApp 3.3 - 'forums.asp?keywords' Cross-Site Scripting 42 WEB r0t
2005-12-21   IntranetApp 3.3 - 'content.asp' Multiple Cross-Site Scripting Vulnerabilities 38 WEB r0t
2005-12-21   IntranetApp 3.3 - 'login.asp?ret_page' Cross-Site Scripting 47 WEB r0t
2005-12-21   SiteEnable 3.3 - 'login.asp' Cross-Site Scripting 41 WEB r0t
2005-12-21   PortalApp 3.3/4.0 - 'login.asp' Cross-Site Scripting 37 WEB r0t
2005-12-21   Papaya CMS 4.0.4 - Cross-Site Scripting 37 WEB r0t3d3Vil
2005-12-21   OpenEdit 4.0 - Results.HTML Cross-Site Scripting 38 WEB r0t3d3Vil
2005-12-21   Beehive Forum 0.6.2 - Multiple HTML Injection Vulnerabilities 44 WEB Alireza Hassani
2005-12-21   Tolva 0.1 - 'Usermods.php' Remote File Inclusion 40 WEB xbefordx
2005-12-20   Quick Square Development Honeycomb Archive 3.0 - 'CategoryResults.cfm' Multiple SQL Injections 36 WEB r0t3d3Vil
2005-12-20   AbleDesign D-Man 3.0 - 'Title' Cross-Site Scripting 51 WEB $um$id
2005-12-20   Plogger Beta 2 - Remote File Inclusion 39 WEB Security .Net Information
2005-12-20   LiveJournal - Cleanhtml.pl HTML Injection 42 WEB Andrew Farmer
2005-12-20   Enterprise Connector 1.0.2 - 'main.php' SQL Injection 42 WEB Attila Gerendi
2005-12-20   Extensis Portfolio Netpublish Server 7.0 - Server.NP Directory Traversal 40 WEB Andy Davis
2005-12-19   Mercury CMS 4.0 - Multiple Input Validation Vulnerabilities 39 WEB r0t3d3Vil
2005-12-19   Komodo CMS 2.1 - Multiple Input Validation Vulnerabilities 41 WEB r0t3d3Vil
2005-12-19   E-Publish 2.0 - Multiple Input Validation Vulnerabilities 44 WEB r0t3d3Vil
2005-12-19   Community Enterprise 4.x - Multiple Input Validation Vulnerabilities 41 WEB r0t3d3Vil
2005-12-19   Bitweaver 1.1.1 - 'my.php?sort_mode' Cross-Site Scripting 38 WEB r0t
2005-12-19   Bitweaver 1.1.1 - 'message_box.php?sort_mode' Cross-Site Scripting 36 WEB r0t
2005-12-19   Bitweaver 1.1.1 - 'view.php?blog_id' Cross-Site Scripting 43 WEB r0t
2005-12-19   Bitweaver 1.1.1 - 'view_post.php?post_id' Cross-Site Scripting 41 WEB r0t
2005-12-19   Bitweaver 1.1.1 Beta - 'list_galleries.php?sort_mode' Cross-Site Scripting 39 WEB r0t
2005-12-19   Baseline CMS 1.95 - Multiple Input Validation Vulnerabilities 46 WEB r0t
2005-12-19   Miraserver 1.0 RC4 - 'article.php?cat' SQL Injection 40 WEB r0t
2005-12-19   Miraserver 1.0 RC4 - 'newsitem.php?id' SQL Injection 39 WEB r0t
2005-12-19   Miraserver 1.0 RC4 - 'index.php?page' SQL Injection 41 WEB r0t
2005-12-19   Marwel 2.7 - 'index.php' SQL Injection 40 WEB r0t
2005-12-19   ODFaq 2.1 - 'faq.php' SQL Injection 36 WEB r0t
2005-12-19   Direct News 4.9 - 'index.php' SQL Injection 44 WEB r0t
2005-12-19   ContentServ 3.0/3.1/4.0 - 'index.php' SQL Injection 40 WEB r0t
2005-12-19   Magnolia Search Module 2.1 - Cross-Site Scripting 37 WEB r0t3d3Vil
2013-07-16   Saurus CMS 4.7.1 - Multiple Vulnerabilities 40 WEB waraxe
2013-07-16   Dell Kace 1000 SMA 5.4.70402 - Persistent Cross-Site Scripting 39 WEB Vulnerability-Lab
2013-07-16   Olive File Manager 1.0.1 iOS - Multiple Vulnerabilities 35 WEB Vulnerability-Lab
2013-07-16   FTP Sprite 1.2.1 iOS - Persistent Cross-Site Scripting 34 WEB Vulnerability-Lab
2005-12-19   Lighthouse CMS 1.1 - Search Cross-Site Scripting 37 WEB r0t3d3Vil
2005-12-19   Liferay Portal Enterprise 3.6.1 - Multiple Cross-Site Scripting Vulnerabilities 37 WEB r0t3d3Vil
2005-12-19   Libertas Enterprise CMS 3.0 - 'index.php' Cross-Site Scripting 37 WEB r0t3d3Vil
2005-12-19   Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting 35 WEB r0t3d3Vil
2005-12-19   FLIP 0.9.0.1029 - 'forum.php?frame' Cross-Site Scripting 38 WEB r0t3d3Vil
2005-12-19   FLIP 0.9.0.1029 - 'text.php?name' Cross-Site Scripting 34 WEB r0t3d3Vil
2005-12-19   Cofax 2.0 - search.htm Cross-Site Scripting 38 WEB r0t3d3Vil
2005-12-19   Caravel CMS 3.0 Beta 1 - Multiple Cross-Site Scripting Vulnerabilities 39 WEB r0t3d3Vil
2005-12-19   Box UK Amaxus CMS 3.0 - Cross-Site Scripting 33 WEB r0t3d3Vil
2005-12-19   allinta CMS 2.3.2 - 'search.asp?searchQuery' Cross-Site Scripting 36 WEB r0t3d3Vil
2005-12-19   allinta CMS 2.3.2 - 'faq.asp?s' Cross-Site Scripting 33 WEB r0t3d3Vil
2005-12-19   Acidcat CMS 2.1.13 - 'acidcat.mdb' Remote Information Disclosure 37 WEB admin@hamid.ir
2005-12-19   Acidcat CMS 2.1.13 - 'ID' SQL Injection 34 WEB admin@hamid.ir
2005-12-19   PHP-Fusion 6.0 - 'members.php' Cross-Site Scripting 39 WEB krasza
2005-12-19   PlaySms 0.8 - 'index.php' Cross-Site Scripting 35 WEB mohajali2k4
2005-12-19   Advanced Guestbook 2.x - Multiple Cross-Site Scripting Vulnerabilities 37 WEB Handrix
2005-12-19   jPORTAL 2.2.1/2.3 Forum - 'forum.php' SQL Injection 37 WEB Zbigniew
2005-12-19   PHP Fusebox 3.0 - 'index.php' Cross-Site Scripting 32 WEB bogel & lukman
2005-12-17   Round Cube Webmail 0.1 -20051021 - Full Path Disclosure 36 WEB king_purba
2005-12-16   WebCal 3.0 4 - 'webcal.cgi' Multiple Cross-Site Scripting Vulnerabilities 33 WEB Stan Bubrouski
2005-12-16   WebGlimpse 2.x - Cross-Site Scripting 38 WEB r0t3d3Vil
2005-12-16   ScareCrow 2.13 - 'post.cgi?forum' Cross-Site Scripting 38 WEB r0t3d3Vil
2005-12-16   ScareCrow 2.13 - 'profile.cgi?user' Cross-Site Scripting 37 WEB r0t3d3Vil
2005-12-16   ScareCrow 2.13 - 'forum.cgi?forum' Cross-Site Scripting 35 WEB r0t3d3Vil
2005-12-16   Binary Board System 0.2.5 - 'toc.pl?board' Cross-Site Scripting 36 WEB r0t3d3Vil
2005-12-16   Binary Board System 0.2.5 - 'stats.pl' Multiple Cross-Site Scripting Vulnerabilities 40 WEB r0t3d3Vil
2005-12-16   Binary Board System 0.2.5 - 'reply.pl' Multiple Cross-Site Scripting Vulnerabilities 36 WEB r0t3d3Vil
2005-12-16   PHP Arena PAFileDB Extreme Edition - SQL Injection 36 WEB r0t3d3Vil
2005-12-16   IHTML Merchant 2.0 - SQL Injection 36 WEB r0t3d3Vil
2005-12-16   IHTML Merchant Mall - SQL Injection 36 WEB r0t3d3Vil
2005-12-16   EZDatabase 2.1.2 - 'index.php?db_id' SQL Injection 39 WEB r0t3d3Vil
2005-12-16   EZDatabase 2.1.2 - 'index.php?p' Local File Inclusion 38 WEB r0t3d3Vil
2005-12-15   Dick Copits PDEstore 1.8 - Multiple Cross-Site Scripting Vulnerabilities 38 WEB r0t3d3Vil
2005-12-15   Kryptronic ClickCartPro 5.1/5.2 - 'CP-APP.cgi' Cross-Site Scripting 34 WEB r0t3d3Vil
2005-12-15   PPCal Shopping Cart 3.3 - Cross-Site Scripting 35 WEB r0t3d3Vil
2005-12-15   ECTOOLS Onlineshop 1.0 - Cross-Site Scripting 40 WEB r0t3d3Vil
2005-12-15   Soft4e ECW-Cart 2.0.3 - Multiple Cross-Site Scripting Vulnerabilities 37 WEB r0t3d3Vil
2005-12-15   eDatCat 3.0 - EDCstore.pl Cross-Site Scripting 39 WEB r0t3d3Vil
2005-12-15   AltantForum 4.0.2 - Multiple Cross-Site Scripting Vulnerabilities 37 WEB r0t3d3Vil
2005-12-15   Atlant Pro 8.0.9 - Cross-Site Scripting 36 WEB r0t3d3Vil
2005-12-15   DCForum 1-6 DCBoard Script - 'Page' Cross-Site Scripting 38 WEB r0t3d3Vil
2005-12-15   Sitenet BBS 2.0 - 'search.cgi?cid' Cross-Site Scripting 34 WEB r0t3d3Vil
2005-12-15   Sitenet BBS 2.0 - 'netboardr.cgi' Multiple Cross-Site Scripting Vulnerabilities 34 WEB r0t3d3Vil
2005-12-15   MarmaraWeb E-Commerce - Remote File Inclusion 35 WEB B3g0k
2005-12-15   TML 0.5 - 'index.php?id' SQL Injection 35 WEB X1ngBox
2005-12-15   TML 0.5 - 'index.php?form' Cross-Site Scripting 35 WEB X1ngBox
2005-12-15   MarmaraWeb E-Commerce - 'index.php?page' Cross-Site Scripting 35 WEB B3g0k
2005-12-14   Limbo CMS 1.0.4.2 - 'option' Traversal Arbitrary File Access 36 WEB rgod
2005-12-14   Limbo CMS 1.0.4.2 - 'index.php?_SERVER[REMOTE_ADDR]' Cross-Site Scripting 41 WEB rgod
2005-12-14   QuickPayPro 3.1 - 'sales.view.php?customerid' SQL Injection 34 WEB r0t
2005-12-14   QuickPayPro 3.1 - 'tracking.details.php?trackingid' SQL Injection 35 WEB r0t
2005-12-14   QuickPayPro 3.1 - 'design.php?delete' SQL Injection 35 WEB r0t
2005-12-14   QuickPayPro 3.1 - 'subscribers.tracking.edit.php?subtrackingid' SQL Injection 34 WEB r0t
2005-12-14   QuickPayPro 3.1 - 'customer.tickets.view.php' Multiple SQL Injections 35 WEB r0t
2005-12-14   QuickPayPro 3.1 - 'popups.edit.php?popupid' SQL Injection 34 WEB r0t
2005-12-14   Netref 3.0 - 'index.php' SQL Injection 38 WEB syst3m_f4ult
2005-12-14   WikkaWiki 1.1.6 - 'TextSearch.php' Cross-Site Scripting 35 WEB r0t
2005-12-14   ASPBB 0.4 - 'profile.asp?PROFILE_ID' SQL Injection 37 WEB Dj_Eyes
2005-12-14   ASPBB 0.4 - 'forum.asp?FORUM_ID' SQL Injection 39 WEB Dj_Eyes
2005-12-14   ASPBB 0.4 - 'topic.asp?TID' SQL Injection 35 WEB Dj_Eyes
2005-12-14   ASP-DEV XM Forum - 'forum.asp' Cross-Site Scripting 38 WEB Dj_Eyes
2005-12-14   News Module for Envolution - 'modules.php' Multiple SQL Injections 36 WEB X1ngBox
2005-12-14   News Module for Envolution - 'modules.php' Multiple Cross-Site Scripting Vulnerabilities 35 WEB X1ngBox
2005-12-14   PHP-Nuke 7.x - Content Filtering Bypass 38 WEB Maksymilian Arciemowicz
2005-12-14   CourseForum Technologies ProjectForum 4.7 - Multiple Cross-Site Scripting Vulnerabilities 37 WEB r0t3d3Vil
2005-12-14   DreamLevels Dream Poll 3.0 - 'View_Results.php' SQL Injection 36 WEB r0t3d3Vil
2005-12-14   Jamit Job Board 2.4.1 - 'index.php' SQL Injection 35 WEB r0t3d3Vil
2005-12-14   PHP Web Scripts Ad Manager Pro 2.0 - 'Advertiser_statistic.php' SQL Injection 35 WEB r0t3d3Vil
2005-12-13   McGallery 1.0/1.1/2.2 - 'index.php?album' SQL Injection 34 WEB r0t
2005-12-13   McGallery 1.0/1.1/2.2 - 'show.php' Multiple SQL Injections 34 WEB r0t
2005-12-13   McGallery 1.0/1.1/2.2 - 'index.php?language' Traversal Local File Inclusion 39 WEB r0t
2013-07-13   McAfee ePO 4.6.6 - Multiple Vulnerabilities 36 WEB Nuri Fattah
2013-07-13   BMC Service Desk Express 10.2.1.95 - Multiple Vulnerabilities 35 WEB Nuri Fattah
2013-07-13   WordPress Plugin Spicy Blogroll - Local File Inclusion 36 WEB Ahlspiess
2005-12-13   Snipe Gallery 3.1.4 - 'search.php?keyword' Cross-Site Scripting 36 WEB r0t
2005-12-13   Snipe Gallery 3.1.4 - 'image.php?image_id' SQL Injection 37 WEB r0t
2005-12-13   Snipe Gallery 3.1.4 - 'view.php?gallery_id' SQL Injection 35 WEB r0t
2005-12-13   Mantis Bug Tracker 0.x/1.0 - 'View_filters_page.php' Cross-Site Scripting 35 WEB r0t
2005-12-13   PHP JackKnife 2.21 - Cross-Site Scripting 37 WEB r0t3d3Vil