|
2005-11-07
|
|
PHPList Mailing List Manager 2.x - '/admin/eventlog.php' Multiple Cross-Site Scripting Vulnerabiliti
|
35 |
WEB
|
Tobias Klein
|
|
2005-11-07
|
|
PHPList Mailing List Manager 2.x - '/admin/editattributes.php?id' SQL Injection
|
35 |
WEB
|
Tobias Klein
|
|
2005-11-07
|
|
PHPList Mailing List Manager 2.x - '/admin/admin.php?id' SQL Injection
|
38 |
WEB
|
Tobias Klein
|
|
2005-11-07
|
|
ToendaCMS 0.6.1 - 'admin.php' Directory Traversal
|
37 |
WEB
|
Bernhard Mueller
|
|
2005-11-07
|
|
Invision Power Board (IP.Board) 2.1 - 'admin.php' Multiple Cross-Site Scripting Vulnerabilities
|
39 |
WEB
|
benjilenoob
|
|
2005-11-07
|
|
XMB Forum 1.9.3 - 'u2u.php' Cross-Site Scripting
|
35 |
WEB
|
HACKERS PAL
|
|
2005-11-07
|
|
OSTE 1.0 - Remote File Inclusion
|
35 |
WEB
|
khc@bsdmail.org
|
|
2005-11-07
|
|
Asterisk 0.x/1.0/1.2 Voicemail - Unauthorized Access
|
34 |
WEB
|
Adam Pointon
|
|
2005-11-07
|
|
PHPFM - Arbitrary File Upload
|
37 |
WEB
|
rUnViRuS
|
|
2005-11-04
|
|
Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass
|
34 |
WEB
|
syst3m_f4ult
|
|
2005-11-04
|
|
JPortal Web Portal 2.2.1/2.3.1 - 'news.php' SQL Injection
|
37 |
WEB
|
Mousehack
|
|
2005-11-04
|
|
JPortal Web Portal 2.2.1/2.3.1 - 'comment.php' SQL Injection
|
35 |
WEB
|
Mousehack
|
|
2005-11-03
|
|
Galerie 2.4 - 'showgallery.php' SQL Injection
|
32 |
WEB
|
abducter_minds@yahoo.com
|
|
2005-11-03
|
|
PHP Handicapper (2005) - 'Process_signup.php' HTTP Response Splitting
|
36 |
WEB
|
BiPi_HaCk
|
|
2005-11-02
|
|
CuteNews 1.4.1 - 'template' Traversal Arbitrary File Access
|
37 |
WEB
|
retrogod@aliceposta.it
|
|
2005-11-02
|
|
CuteNews 1.4.1 - 'show_archives.php' Traversal Arbitrary File Access
|
34 |
WEB
|
retrogod@aliceposta.it
|
|
2005-11-02
|
|
Simple PHP Blog 0.4 - 'colors.php' Multiple Cross-Site Scripting Vulnerabilities
|
39 |
WEB
|
enji@infosys.tuwien.ac.at
|
|
2005-11-02
|
|
Simple PHP Blog 0.4 - 'preview_static_cgi.php' Multiple Cross-Site Scripting Vulnerabilities
|
37 |
WEB
|
enji@infosys.tuwien.ac.at
|
|
2005-11-02
|
|
Simple PHP Blog 0.4 - 'preview_cgi.php' Multiple Cross-Site Scripting Vulnerabilities
|
34 |
WEB
|
enji@infosys.tuwien.ac.at
|
|
2005-11-02
|
|
PHPWebThings 0.4.4 - 'forum.php' Cross-Site Scripting
|
37 |
WEB
|
Linux_Drox
|
|
2005-11-02
|
|
News2Net 3.0 - 'index.php' SQL Injection
|
36 |
WEB
|
Mousehack
|
|
2005-11-01
|
|
XMB Forum 1.9.3 - 'post.php' SQL Injection
|
36 |
WEB
|
almaster
|
|
2005-11-01
|
|
VUBB - 'index.php' Cross-Site Scripting
|
33 |
WEB
|
Alireza Hassani
|
|
2013-06-26
|
|
PHP-Charts 1.0 - 'index.php?type' Remote Code Execution
|
37 |
WEB
|
infodox
|
|
2013-06-26
|
|
e107 Advanced Medal System Plugin - SQL Injection
|
38 |
WEB
|
Life Wasted
|
|
2005-11-01
|
|
Elite Forum 1.0 - HTML Injection
|
35 |
WEB
|
gladiator
|
|
2005-11-01
|
|
Belchior Foundry vCard Pro 3.1 - 'Addrbook.php' SQL Injection
|
37 |
WEB
|
almaster
|
|
2005-10-31
|
|
Comersus Backoffice 4.x/5.0/6.0 - '/comersus/database/comersus.mdb' Direct Request Database Disclosu
|
38 |
WEB
|
_6mO_HaCk
|
|
2005-10-31
|
|
Comersus Backoffice 4.x/5.0/6.0 - 'comersus_Backoffice_supportError.asp?error' Cross-Site Scripting
|
36 |
WEB
|
_6mO_HaCk
|
|
2005-10-31
|
|
PHP 4.x - PHPInfo Cross-Site Scripting
|
37 |
WEB
|
Stefan Esser
|
|
2005-10-31
|
|
OaBoard 1.0 - 'forum.php' Multiple SQL Injections
|
37 |
WEB
|
abducter_minds@yahoo.com
|
|
2005-10-31
|
|
PHPCafe Tutorial Manager - 'index.php' SQL Injection
|
37 |
WEB
|
almaster
|
|
2005-10-31
|
|
Snitz Forum 2000 - 'post.asp' Cross-Site Scripting
|
34 |
WEB
|
h4xorcrew
|
|
2005-10-31
|
|
Invision Gallery 2.0.3 - 'index.php' SQL Injection
|
36 |
WEB
|
almaster
|
|
2005-10-29
|
|
PHP Advanced Transfer Manager 1.30 - Remote Unauthorized Access
|
33 |
WEB
|
Zeelock
|
|
2005-10-29
|
|
MG2 0.5.1 - Authentication Bypass
|
34 |
WEB
|
Preben Nylokken
|
|
2005-10-27
|
|
ASP Fast Forum - 'error.asp' Cross-Site Scripting
|
35 |
WEB
|
syst3m_f4ult
|
|
2005-10-27
|
|
PBLang 4.65 - Multiple Cross-Site Scripting Vulnerabilities
|
34 |
WEB
|
abducter
|
|
2005-10-27
|
|
ATutor 1.x - 'print.php?section' Remote File Inclusion
|
36 |
WEB
|
Andreas Sandblad
|
|
2005-10-27
|
|
ATutor 1.x - 'body_header.inc.php?section' Local File Inclusion
|
39 |
WEB
|
Andreas Sandblad
|
|
2005-10-27
|
|
ATutor 1.x - 'forum.inc.php' Arbitrary Command Execution
|
36 |
WEB
|
Andreas Sandblad
|
|
2005-10-27
|
|
Novell ZENworks Patch Management 6.0.52 - '/reports/default.asp' Multiple SQL Injections
|
34 |
WEB
|
Dennis Rand
|
|
2005-10-27
|
|
Novell ZENworks Patch Management 6.0.52 - '/computers/default.asp?Direction' SQL Injection
|
37 |
WEB
|
Dennis Rand
|
|
2005-10-26
|
|
PHP-Nuke Search Enhanced Module 1.1/2.0 - HTML Injection
|
37 |
WEB
|
bhfh01
|
|
2005-10-26
|
|
GCards 1.43 - 'news.php' SQL Injection
|
39 |
WEB
|
svsecurity
|
|
2005-10-26
|
|
Techno Dreams (Multiple Scripts) - Multiple SQL Injections
|
36 |
WEB
|
farhad koosha
|
|
2005-10-26
|
|
Woltlab 1.1/2.x - 'Info-DB Info_db.php' Multiple SQL Injections
|
37 |
WEB
|
admin@batznet.com
|
|
2005-10-26
|
|
Mantis Bug Tracker 0.19.2/1.0 - 'Bug_sponsorship_list_view_inc.php' File Inclusion
|
41 |
WEB
|
Andreas Sandblad
|
|
2013-06-24
|
|
Elemata CMS RC3.0 - 'global.php?id' SQL Injection
|
38 |
WEB
|
CWH Underground
|
|
2013-06-24
|
|
Linksys X3000 1.0.03 build 001 - Multiple Vulnerabilities
|
37 |
WEB
|
m-1-k-3
|
|
2013-06-24
|
|
PodHawk 1.85 - Arbitrary File Upload
|
36 |
WEB
|
CWH Underground
|
|
2013-06-24
|
|
Collabtive 1.0 - 'manageuser.php' SQL Injection
|
38 |
WEB
|
drone
|
|
2013-06-24
|
|
phpEventCalendar 0.2.3 - Multiple Vulnerabilities
|
40 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2013-06-24
|
|
Alienvault Open Source SIEM (OSSIM) 4.1 - Multiple SQL Injection Vulnerabilities
|
38 |
WEB
|
Glafkos Charalambous
|
|
2013-06-24
|
|
Top Games Script 1.2 - 'play.php?gid' SQL Injection
|
38 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2013-06-24
|
|
TRENDnet TE100-P1U Print Server Firmware 4.11 - Authentication Bypass
|
38 |
WEB
|
Chako
|
|
2005-10-26
|
|
Flyspray 0.9 - Multiple Cross-Site Scripting Vulnerabilities
|
36 |
WEB
|
Lostmon
|
|
2005-10-26
|
|
Belchior Foundry VCard 2.9 - Remote File Inclusion
|
36 |
WEB
|
X
|
|
2005-10-26
|
|
RSA ACE Agent 5.x - Image Cross-Site Scripting
|
33 |
WEB
|
Bernhard Mueller
|
|
2005-10-26
|
|
IPBProArcade 2.5.2 - 'GameID' SQL Injection
|
34 |
WEB
|
almaster
|
|
2005-10-26
|
|
MyBulletinBoard (MyBB) 1.0 - 'usercp.php' SQL Injection
|
35 |
WEB
|
Animal
|
|
2005-10-25
|
|
Basic Analysis and Security Engine (BASE) 1.2 - 'Base_qry_main.php' SQL Injection
|
34 |
WEB
|
Remco Verhoef
|
|
2005-05-21
|
|
MWChat 6.8 - 'chat.php' SQL Injection
|
37 |
WEB
|
rgod
|
|
2005-05-20
|
|
phpMyAdmin 2.x - 'server_databases.php' Cross-Site Scripting
|
33 |
WEB
|
Tobias Klein
|
|
2005-05-20
|
|
phpMyAdmin 2.x - 'queryframe.php' Cross-Site Scripting
|
34 |
WEB
|
Tobias Klein
|
|
2005-10-24
|
|
SiteTurn Domain Manager Pro - Admin Panel Cross-Site Scripting
|
33 |
WEB
|
farhad koosha
|
|
2005-10-26
|
|
saPHP Lesson - 'add.php?forumid' SQL Injection
|
32 |
WEB
|
almaster
|
|
2005-10-24
|
|
Nuked-klaN 1.7 Links Module - 'link_id' SQL Injection
|
36 |
WEB
|
papipsycho
|
|
2005-10-24
|
|
Nuked-klaN 1.7 Download Module - 'dl_id' SQL Injection
|
36 |
WEB
|
papipsycho
|
|
2005-10-24
|
|
Nuked-klaN 1.7 Sections Module - 'artid' SQL Injection
|
35 |
WEB
|
papipsycho
|
|
2005-10-24
|
|
Nuked-klaN 1.7 Forum Module - Multiple SQL Injections
|
36 |
WEB
|
papipsycho
|
|
2005-10-26
|
|
FlatNuke 2.5.x - 'index.php' Cross-Site Scripting
|
33 |
WEB
|
alex@aleksanet.com
|
|
2005-10-22
|
|
FlatNuke 2.5.x - 'index.php' Multiple Remote File Inclusions
|
37 |
WEB
|
abducter_minds@yahoo.com
|
|
2005-10-22
|
|
Zomplog 3.3/3.4 - 'detail.php' HTML Injection
|
33 |
WEB
|
sikikmail
|
|
2005-10-20
|
|
Chipmunk Directory - 'recommend.php?entryID' Cross-Site Scripting
|
33 |
WEB
|
Alireza Hassani
|
|
2005-10-20
|
|
Chipmunk Forum - 'recommend.php?ID' Cross-Site Scripting
|
37 |
WEB
|
Alireza Hassani
|
|
2005-10-20
|
|
Chipmunk Forum - 'quote.php?forumID' Cross-Site Scripting
|
35 |
WEB
|
Alireza Hassani
|
|
2005-10-20
|
|
Chipmunk Forum - 'newtopic.php?forumID' Cross-Site Scripting
|
35 |
WEB
|
Alireza Hassani
|
|
2005-10-19
|
|
PHP-Nuke Search Module - 'modules.php' Directory Traversal
|
36 |
WEB
|
sp3x@securityreason.com
|
|
2005-10-18
|
|
MySource 2.14 - 'mime.php?PEAR_PATH' Remote File Inclusion
|
34 |
WEB
|
Secunia Research
|
|
2005-10-18
|
|
MySource 2.14 - 'mimeDecode.php?PEAR_PATH' Remote File Inclusion
|
35 |
WEB
|
Secunia Research
|
|
2005-10-18
|
|
MySource 2.14 - 'Span.php?PEAR_PATH' Remote File Inclusion
|
34 |
WEB
|
Secunia Research
|
|
2005-10-18
|
|
MySource 2.14 - 'Date.php?PEAR_PATH' Remote File Inclusion
|
33 |
WEB
|
Secunia Research
|
|
2005-10-18
|
|
MySource 2.14 - 'mail.php?PEAR_PATH' Remote File Inclusion
|
39 |
WEB
|
Secunia Research
|
|
2013-06-21
|
|
GLPI 0.83.8 - Multiple Vulnerabilities
|
33 |
WEB
|
LiquidWorm
|
|
2005-10-18
|
|
MySource 2.14 - 'Request.php?PEAR_PATH' Remote File Inclusion
|
37 |
WEB
|
Secunia Research
|
|
2005-10-18
|
|
MySource 2.14 - 'Socket.php?PEAR_PATH' Remote File Inclusion
|
36 |
WEB
|
Secunia Research
|
|
2005-10-18
|
|
MySource 2.14 - 'init_mysource.php?INCLUDE_PATH' Remote File Inclusion
|
31 |
WEB
|
Secunia Research
|
|
2005-10-18
|
|
MySource 2.14 - 'new_upgrade_functions.php' Multiple Remote File Inclusions
|
38 |
WEB
|
Secunia Research
|
|
2005-10-18
|
|
MySource 2.14 - 'edit_table_cell_type_wysiwyg.php?Stylesheet' Cross-Site Scripting
|
35 |
WEB
|
Secunia Research
|
|
2005-10-18
|
|
MySource 2.14 - 'edit_table_props.php?bgcolor' Cross-Site Scripting
|
35 |
WEB
|
Secunia Research
|
|
2005-10-18
|
|
MySource 2.14 - 'edit_table_row_props.php?bgcolor' Cross-Site Scripting
|
36 |
WEB
|
Secunia Research
|
|
2005-10-18
|
|
MySource 2.14 - 'header.php?bgcolor' Cross-Site Scripting
|
34 |
WEB
|
Secunia Research
|
|
2005-10-18
|
|
MySource 2.14 - 'edit_table_cell_props.php?bgcolor' Cross-Site Scripting
|
33 |
WEB
|
Secunia Research
|
|
2005-10-18
|
|
MySource 2.14 - 'insert_table.php?bgcolor' Cross-Site Scripting
|
37 |
WEB
|
Secunia Research
|
|
2005-10-18
|
|
MySource 2.14 - 'upgrade_in_progress_backend.php?target_url' Cross-Site Scripting
|
37 |
WEB
|
Secunia Research
|
|
2005-10-18
|
|
NetFlow Analyzer 4 - Cross-Site Scripting
|
35 |
WEB
|
why@nsfocus.com
|
|
2005-10-17
|
|
Comersus Backoffice Plus - Multiple Cross-Site Scripting Vulnerabilities
|
37 |
WEB
|
Lostmon
|
|
2005-10-15
|
|
PunBB 1.2.x - 'search.php' SQL Injection
|
35 |
WEB
|
Devil_box
|
|
2005-10-14
|
|
Complete PHP - Counter Cross-Site Scripting
|
34 |
WEB
|
BiPi_HaCk
|
|
2005-10-14
|
|
Complete PHP Counter - SQL Injection
|
38 |
WEB
|
BiPi_HaCk
|
|
2005-10-14
|
|
Gallery 2.0 - 'main.php' Directory Traversal
|
38 |
WEB
|
Michael Dipper
|
|
2005-10-13
|
|
Accelerated Mortgage Manager - 'Password' SQL Injection
|
34 |
WEB
|
imready4chillin
|
|
2005-10-13
|
|
YaPiG 0.95b - 'view.php?img_size' Cross-Site Scripting
|
39 |
WEB
|
enji@infosys.tuwien.ac.at
|
|
2005-10-12
|
|
WebGUI 6.x - Arbitrary Command Execution
|
34 |
WEB
|
David Maciejak
|
|
2005-10-11
|
|
Accelerated E Solutions - SQL Injection
|
36 |
WEB
|
Andysheh Soltani
|
|
2005-10-08
|
|
Cyphor 0.19 - 'footer.php?t_login' Cross-Site Scripting
|
34 |
WEB
|
retrogod@aliceposta.it
|
|
2005-10-08
|
|
Cyphor 0.19 - 'newmsg.php?fid' SQL Injection
|
35 |
WEB
|
retrogod@aliceposta.it
|
|
2005-10-08
|
|
Cyphor 0.19 - 'lostpwd.php?nick' SQL Injection
|
37 |
WEB
|
rgod
|
|
2005-10-07
|
|
Aenovo - Multiple Cross-Site Scripting Vulnerabilities
|
37 |
WEB
|
farhad koosha
|
|
2005-10-07
|
|
Aenovo - '/incs/searchdisplay.asp?strSQL' SQL Injection
|
33 |
WEB
|
farhad koosha
|
|
2005-10-07
|
|
Aenovo - '/Password/default.asp?Password' SQL Injection
|
37 |
WEB
|
farhad koosha
|
|
2005-10-07
|
|
Utopia News Pro 1.1.3 - 'footer.php' Multiple Cross-Site Scripting Vulnerabilities
|
36 |
WEB
|
rgod
|
|
2005-10-07
|
|
Utopia News Pro 1.1.3 - 'header.php?sitetitle' Cross-Site Scripting
|
35 |
WEB
|
rgod
|
|
2005-10-05
|
|
TellMe 1.2 - Multiple Cross-Site Scripting Vulnerabilities
|
42 |
WEB
|
Donnie Werner
|
|
2013-06-19
|
|
Monkey CMS - Multiple Vulnerabilities
|
37 |
WEB
|
Yashar shahinzadeh_ Mormoroth
|
|
2013-06-19
|
|
imacs CMS 0.3.0 - Unrestricted Arbitrary File Upload
|
35 |
WEB
|
CWH Underground
|
|
2005-09-30
|
|
Merak Mail Server 8.2.4 r - Arbitrary File Deletion
|
36 |
WEB
|
ShineShadow
|
|
2005-09-30
|
|
EasyGuppy 4.5.4/4.5.5 - 'Printfaq.php' Directory Traversal
|
35 |
WEB
|
Josh Zlatin-Amishav
|
|
2005-09-30
|
|
IceWarp Web Mail 5.5.1 - 'calendar_w.html?createdataCX' Cross-Site Scripting
|
35 |
WEB
|
ss_contacts
|
|
2005-09-30
|
|
IceWarp Web Mail 5.5.1 - 'calendar_m.html?createdataCX' Cross-Site Scripting
|
33 |
WEB
|
ss_contacts
|
|
2005-09-30
|
|
IceWarp Web Mail 5.5.1 - 'calendar_d.html?createdataCX' Cross-Site Scripting
|
36 |
WEB
|
ss_contacts
|
|
2005-09-30
|
|
IceWarp Web Mail 5.5.1 - 'blank.html?id' Cross-Site Scripting
|
36 |
WEB
|
ss_contacts
|
|
2005-09-29
|
|
LucidCMS 2.0 - Login SQL Injection
|
36 |
WEB
|
rgod
|
|
2005-09-29
|
|
SquirrelMail 1.4.2 Address Add Plugin - 'add.php' Cross-Site Scripting
|
37 |
WEB
|
anonymous
|
