|
2005-05-28
|
|
NPDS 4.8 < 5.0 - 'reply.php?image_subject' Cross-Site Scripting
|
4 |
WEB
|
NoSP
|
|
2005-05-28
|
|
NPDS 4.8 < 5.0 - 'reviews.php?title' Cross-Site Scripting
|
4 |
WEB
|
NoSP
|
|
2005-05-28
|
|
NPDS 4.8 /5.0 - 'modules.php?Lettre' Cross-Site Scripting
|
4 |
WEB
|
NoSP
|
|
2005-05-28
|
|
NPDS 4.8 < 5.0 - 'sdv_infos.php?sitename' Cross-Site Scripting
|
4 |
WEB
|
NoSP
|
|
2005-05-28
|
|
NPDS 4.8 < 5.0 - 'powerpack_f.php?language' Cross-Site Scripting
|
4 |
WEB
|
NoSP
|
|
2005-05-28
|
|
NPDS 4.8 < 5.0 - 'admin.php?language' Cross-Site Scripting
|
4 |
WEB
|
NoSP
|
|
2005-05-28
|
|
Invision Power Board 1.x - Unauthorized Access
|
4 |
WEB
|
V[i]RuS
|
|
2005-05-27
|
|
Jaws Glossary 0.4/0.5 - Cross-Site Scripting
|
4 |
WEB
|
Nah
|
|
2005-05-27
|
|
BEA WebLogic 7.0/8.1 - Administration Console Error Page Cross-Site Scripting
|
4 |
WEB
|
Team SHATTER
|
|
2005-05-27
|
|
BEA WebLogic 7.0/8.1 - Administration Console LoginForm.jsp Cross-Site Scripting
|
4 |
WEB
|
Team SHATTER
|
|
2005-05-26
|
|
BookReview 1.0 - 'suggest_review.htm?node' Cross-Site Scripting
|
4 |
WEB
|
Lostmon
|
|
2005-05-26
|
|
BookReview 1.0 - 'add_classification.htm?isbn' Cross-Site Scripting
|
4 |
WEB
|
Lostmon
|
|
2005-05-26
|
|
BookReview 1.0 - 'search.htm?submit string' Cross-Site Scripting
|
4 |
WEB
|
Lostmon
|
|
2005-05-26
|
|
BookReview 1.0 - 'add_url.htm?node' Cross-Site Scripting
|
4 |
WEB
|
Lostmon
|
|
2005-05-26
|
|
BookReview 1.0 - 'add_booklist.htm?node' Cross-Site Scripting
|
3 |
WEB
|
Lostmon
|
|
2005-05-26
|
|
BookReview 1.0 - 'contact.htm?user' Cross-Site Scripting
|
4 |
WEB
|
Lostmon
|
|
2005-05-26
|
|
BookReview 1.0 - 'suggest_category.htm?node' Cross-Site Scripting
|
4 |
WEB
|
Lostmon
|
|
2005-05-26
|
|
BookReview 1.0 - 'add_contents.htm' Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
Lostmon
|
|
2005-05-26
|
|
BookReview 1.0 - 'add_review.htm' Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
Lostmon
|
|
2013-05-26
|
|
RadioCMS 2.2 - 'menager.php?playlist_id' SQL Injection
|
4 |
WEB
|
Rooster(XEKA)
|
|
2013-05-26
|
|
WordPress Plugin Spider Catalog 1.4.6 - Multiple Vulnerabilities
|
4 |
WEB
|
waraxe
|
|
2013-05-26
|
|
WordPress Plugin Spider Event Calendar 1.3.0 - Multiple Vulnerabilities
|
4 |
WEB
|
waraxe
|
|
2013-05-26
|
|
WordPress Plugin User Role Editor 3.12 - Cross-Site Request Forgery
|
4 |
WEB
|
Henry Hoggard
|
|
2013-05-26
|
|
Vanilla Forums 2.0.18.8 - Multiple Vulnerabilities
|
4 |
WEB
|
Henry Hoggard
|
|
2013-05-26
|
|
AVE.CMS 2.09 - 'index.php?module' Blind SQL Injection
|
4 |
WEB
|
mr.pr0n
|
|
2013-05-26
|
|
HP LaserJet Pro P1606dn - Webadmin Password Reset
|
4 |
WEB
|
m3tamantra
|
|
2005-05-25
|
|
FunkyASP AD Systems 1.1 - 'login.asp' SQL Injection
|
4 |
WEB
|
Romty
|
|
2005-05-25
|
|
PHP Poll Creator 1.0.1 - 'Poll_Vote.php' Remote File Inclusion
|
4 |
WEB
|
rash ilusion
|
|
2005-05-24
|
|
Sun JavaMail 1.x - Multiple Information Disclosure Vulnerabilities
|
4 |
WEB
|
Ricky Latt
|
|
2005-05-24
|
|
Spread The Word - Multiple SQL Injections
|
4 |
WEB
|
Lostmon
|
|
2005-05-24
|
|
Spread The Word - Multiple Cross-Site Scripting Vulnerabilities
|
3 |
WEB
|
Lostmon
|
|
2005-05-24
|
|
GForge 3.x - Arbitrary Command Execution
|
4 |
WEB
|
Filippo Spike Morelli
|
|
2005-05-23
|
|
PortailPHP 1.3 - 'ID' SQL Injection
|
3 |
WEB
|
CENSORED Search Vulnerabilities
|
|
2003-05-20
|
|
EJ3 TOPo 2.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
Lostmon
|
|
2005-05-19
|
|
PHP Advanced Transfer Manager 1.21 - Arbitrary File Inclusion
|
4 |
WEB
|
Ingvar Gilbert
|
|
2005-05-19
|
|
Sun JavaMail 1.3 - API MimeMessage Infromation Disclosure
|
4 |
WEB
|
Ricky Latt
|
|
2005-05-24
|
|
HelpCenter Live! 1.0/1.2.x - Multiple Input Validation Vulnerabilities
|
4 |
WEB
|
GulfTech Security
|
|
2005-05-17
|
|
WordPress Core 1.5 - 'post.php' Cross-Site Scripting
|
5 |
WEB
|
Thomas Waldegger
|
|
2005-05-24
|
|
Fusionphp Fusion News 3.3/3.6 - X-Forworded-For PHP Script Code Injection
|
4 |
WEB
|
Network security team
|
|
2005-05-16
|
|
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_sponsor.php?id' SQL Injection
|
3 |
WEB
|
deluxe@security-project.org
|
|
2005-05-16
|
|
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_mitgraf.php?year' SQL Injection
|
4 |
WEB
|
deluxe@security-project.org
|
|
2005-05-16
|
|
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_themengraf.php?year' SQL Injection
|
4 |
WEB
|
deluxe@security-project.org
|
|
2005-05-16
|
|
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_viewsgraf.php?tag' SQL Injection
|
4 |
WEB
|
deluxe@security-project.org
|
|
2005-05-16
|
|
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_beitraggraf.php?year' SQL Injection
|
4 |
WEB
|
deluxe@security-project.org
|
|
2005-05-16
|
|
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal.php?anzahl_beitraege' SQL Injection
|
3 |
WEB
|
deluxe@security-project.org
|
|
2005-05-16
|
|
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_statistik.php?year' SQL Injection
|
4 |
WEB
|
deluxe@security-project.org
|
|
2005-05-16
|
|
NPDS 4.8/5.0 - 'pollcomments.php?thold' SQL Injection
|
3 |
WEB
|
NoSP
|
|
2005-05-16
|
|
NPDS 4.8/5.0 - 'comments.php?thold' SQL Injection
|
4 |
WEB
|
NoSP
|
|
2005-05-16
|
|
Sigma ISP Manager 6.6 - 'Sigmaweb.dll' SQL Injection
|
4 |
WEB
|
mehran gashtasebi
|
|
2005-05-16
|
|
MetaCart E-Shop - 'ProductsByCategory.asp' Cross-Site Scripting
|
4 |
WEB
|
Dedi Dwianto
|
|
2005-05-16
|
|
PServ 3.2 - Source Code Disclosure
|
4 |
WEB
|
Claus R. F. Overbeck
|
|
2005-05-16
|
|
PostNuke 0.75/0.76 Blocks Module - Directory Traversal
|
4 |
WEB
|
pokley
|
|
2005-05-16
|
|
Shop-Script - ProductID SQL Injection
|
4 |
WEB
|
CENSORED Search Vulnerabilities
|
|
2005-05-16
|
|
Shop-Script - categoryId SQL Injection
|
4 |
WEB
|
CENSORED Search Vulnerabilities
|
|
2005-05-14
|
|
Skull-Splitter Guestbook 1.0/2.0/2.2 - Multiple HTML Injection Vulnerabilities
|
4 |
WEB
|
Morinex Eneco
|
|
2005-05-01
|
|
Keyvan1 ImageGallery - Database Disclosure
|
4 |
WEB
|
g0rellazz G0r
|
|
2005-05-13
|
|
PHPHeaven PHPMyChat 0.14.5 - 'Style.CSS.php3' Cross-Site Scripting
|
4 |
WEB
|
Megasky
|
|
2005-05-13
|
|
PHPHeaven PHPMyChat 0.14.5 - 'Start-Page.CSS.php3' Cross-Site Scripting
|
3 |
WEB
|
Megasky
|
|
2005-05-13
|
|
OpenBB 1.0.8 - 'member.php' Cross-Site Scripting
|
4 |
WEB
|
Megasky
|
|
2005-05-13
|
|
OpenBB 1.0.8 - 'Read.php' SQL Injection
|
4 |
WEB
|
Megasky
|
|
2005-05-13
|
|
Ultimate PHP Board 1.8/1.9 - 'viewforum.php' SQL Injection
|
4 |
WEB
|
Morinex Eneco
|
|
2005-05-13
|
|
Ultimate PHP Board 1.8/1.9 - 'viewforum.php' Cross-Site Scripting
|
4 |
WEB
|
Morinex Eneco
|
|
2005-05-12
|
|
DirectTopics 2 - 'topic.php' SQL Injection
|
4 |
WEB
|
Morinex Eneco
|
|
2005-05-11
|
|
Maxwebportal 1.3x - 'post.asp' Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
Zinho
|
|
2005-05-11
|
|
Open Solution Quick.Cart 0.3 - 'index.php' Cross-Site Scripting
|
4 |
WEB
|
Lostmon
|
|
2011-05-11
|
|
showoff! digital media software 1.5.4 - Multiple Vulnerabilities
|
4 |
WEB
|
dr_insane
|
|
2005-05-10
|
|
e107 Website System 0.617 - 'Forum_viewforum.php' SQL Injection
|
4 |
WEB
|
Heintz
|
|
2005-05-10
|
|
e107 Website System 0.617 - 'Request.php' Directory Traversal
|
4 |
WEB
|
Heintz
|
|
2005-05-10
|
|
NukeET 3.0/3.1 - Base64 Codigo Variable Cross-Site Scripting
|
4 |
WEB
|
Suko & Lostmon
|
|
2005-05-10
|
|
WowBB 1.6 - 'View_User.php' SQL Injection
|
5 |
WEB
|
Megasky
|
|
2005-05-09
|
|
PWSPHP 1.1/1.2 - 'Profil.php' SQL Injection
|
4 |
WEB
|
SecuBox fRoGGz
|
|
2005-05-09
|
|
PWSPHP 1.2 - Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
SecuBox fRoGGz
|
|
2005-05-09
|
|
CodeThatShoppingCart 1.3.1 - 'catalog.php?id' SQL Injection
|
4 |
WEB
|
Lostmon
|
|
2005-05-09
|
|
CodeThatShoppingCart 1.3.1 - 'catalog.php?id' Cross-Site Scripting
|
4 |
WEB
|
Lostmon
|
|
2005-05-09
|
|
PHP-Nuke 0-7 - Double Hex Encoded Input Validation
|
4 |
WEB
|
fistfuxxer@gmx.de
|
|
2005-05-09
|
|
Easy Message Board - Remote Command Execution
|
4 |
WEB
|
SoulBlack Group
|
|
2005-05-09
|
|
Easy Message Board - Directory Traversal
|
4 |
WEB
|
SoulBlack Group
|
|
2005-05-09
|
|
Advanced Guestbook 2.3.1/2.4 - 'index.php?Entry' SQL Injection
|
4 |
WEB
|
Spy Hat
|
|
2005-05-09
|
|
phpBB 2.0.x - 'BBCode.php' URL Tag
|
4 |
WEB
|
Papados
|
|
2005-05-06
|
|
CJ Ultra Plus 1.0.3/1.0.4 - 'OUT.php' SQL Injection
|
4 |
WEB
|
Kold
|
|
2005-05-05
|
|
MegaBook 2.0/2.1 - 'Admin.cgi?EntryID' Cross-Site Scripting
|
4 |
WEB
|
Spy Hat
|
|
2005-05-05
|
|
MidiCart PHP - 'Item_List.php?MainGroup' Cross-Site Scripting
|
3 |
WEB
|
Exoduks
|
|
2005-05-05
|
|
MidiCart PHP - 'Item_List.php?SecondGroup' Cross-Site Scripting
|
3 |
WEB
|
Exoduks
|
|
2005-05-05
|
|
MidiCart PHP - 'Search_List.php?SearchString' Cross-Site Scripting
|
4 |
WEB
|
Exoduks
|
|
2005-05-05
|
|
MidiCart PHP - 'Item_Show.php?Code_No' SQL Injection
|
4 |
WEB
|
Exoduks
|
|
2005-05-05
|
|
MidiCart PHP - 'Item_List.php?SecondGroup' SQL Injection
|
4 |
WEB
|
Exoduks
|
|
2005-05-05
|
|
MidiCart PHP - 'Item_List.php?MainGroup' SQL Injection
|
4 |
WEB
|
Exoduks
|
|
2005-05-05
|
|
MidiCart PHP - 'Search_List.php?SearchString' SQL Injection
|
4 |
WEB
|
Exoduks
|
|
2005-05-05
|
|
MyBloggie 2.1 - 'index.php' Cross-Site Scripting
|
4 |
WEB
|
Alberto Trivero
|
|
2013-05-21
|
|
Kimai 0.9.2.1306-3 - SQL Injection
|
4 |
WEB
|
drone
|
|
2013-05-21
|
|
WordPress Plugin ProPlayer 4.7.9.1 - SQL Injection
|
4 |
WEB
|
Ashiyane Digital Security Team
|
|
2005-05-04
|
|
FishCart 3.1 - 'upstnt.php?cartid' SQL Injection
|
4 |
WEB
|
Dcrab
|
|
2005-05-04
|
|
FishCart 3.1 - 'display.php?psku' SQL Injection
|
4 |
WEB
|
Dcrab
|
|
2005-05-04
|
|
FishCart 3.1 - 'upstracking.php' Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
Dcrab
|
|
2005-05-04
|
|
FishCart 3.1 - 'display.php?nlst' Cross-Site Scripting
|
4 |
WEB
|
Dcrab
|
|
2005-05-04
|
|
Interspire articlelive 2005 - Multiple Vulnerabilities
|
4 |
WEB
|
Dcrab
|
|
2005-05-04
|
|
ASP Inline Corporate Calendar 3.6.3 - 'Details.asp' SQL Injection
|
4 |
WEB
|
Zinho
|
|
2005-05-04
|
|
ASP Inline Corporate Calendar 3.6.3 - 'Defer.asp' SQL Injection
|
5 |
WEB
|
Zinho
|
|
2005-05-04
|
|
Gossamer Threads Links 2.x - 'User.cgi' Cross-Site Scripting
|
4 |
WEB
|
Nathan House
|
|
2005-05-03
|
|
Invision Power Board (IP.Board) 2.0.3/2.1 - 'Act' Cross-Site Scripting
|
4 |
WEB
|
arron ward
|
|
2005-05-03
|
|
WebCrossing WebX 5.0 - Cross-Site Scripting
|
4 |
WEB
|
dr_insane
|
|
2005-05-03
|
|
SitePanel2 2.6.1 - Multiple Input Validation Vulnerabilities
|
4 |
WEB
|
GulfTech Security
|
|
2005-05-03
|
|
osTicket 1.2/1.3 - Multiple Input Validation / Remote Code Injection Vulnerabilities
|
4 |
WEB
|
GulfTech Security
|
|
2005-05-02
|
|
Maxwebportal 1.3 - 'custom_link.asp' Multiple SQL Injections
|
3 |
WEB
|
s-dalili
|
|
2005-05-02
|
|
Maxwebportal 1.3 - 'dl_toprated.asp' SQL Injection
|
4 |
WEB
|
s-dalili
|
|
2005-05-02
|
|
Maxwebportal 1.3 - 'pic_popular.asp' SQL Injection
|
4 |
WEB
|
s-dalili
|
|
2005-05-02
|
|
Maxwebportal 1.3 - 'links_popular.asp' SQL Injection
|
4 |
WEB
|
s-dalili
|
|
2005-05-02
|
|
Maxwebportal 1.3 - 'dl_popular.asp' SQL Injection
|
4 |
WEB
|
s-dalili
|
|
2005-05-02
|
|
CodetoSell ViArt Shop Enterprise 2.1.6 - 'news_view.php' Multiple Cross-Site Scripting Vulnerabiliti
|
4 |
WEB
|
Lostmon
|
|
2005-05-02
|
|
CodetoSell ViArt Shop Enterprise 2.1.6 - 'products.php' Multiple Cross-Site Scripting Vulnerabilitie
|
4 |
WEB
|
Lostmon
|
|
2005-05-02
|
|
CodetoSell ViArt Shop Enterprise 2.1.6 - 'product_details.php?category_id' Cross-Site Scripting
|
5 |
WEB
|
Lostmon
|
|
2005-05-02
|
|
CodetoSell ViArt Shop Enterprise 2.1.6 - 'reviews.php' Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
Lostmon
|
|
2005-05-02
|
|
CodetoSell ViArt Shop Enterprise 2.1.6 - 'page.php?page' Cross-Site Scripting
|
4 |
WEB
|
Lostmon
|
|
2005-05-02
|
|
CodetoSell ViArt Shop Enterprise 2.1.6 - 'basket.php' Multiple Cross-Site Scripting Vulnerabilities
|
4 |
WEB
|
Lostmon
|
|
2005-04-30
|
|
JGS-Portal 3.0.1 - 'ID' SQL Injection
|
4 |
WEB
|
admin@batznet.com
|
|
2005-04-28
|
|
phpCOIN 1.2 Pages Module - Multiple SQL Injections
|
4 |
WEB
|
Dcrab
|
|
2005-04-28
|
|
phpCOIN 1.2 - 'login.php?PHPcoinsessid' SQL Injection
|
4 |
WEB
|
Dcrab
|
|
2005-04-28
|
|
Just William's Amazon Webstore - HTTP Response Splitting
|
4 |
WEB
|
Lostmon
|
|
2005-04-28
|
|
Just William's Amazon Webstore - 'CurrentNumber' Cross-Site Scripting
|
4 |
WEB
|
Lostmon
|
|
2005-04-28
|
|
Just William's Amazon Webstore - 'searchFor' Cross-Site Scripting
|
4 |
WEB
|
Lostmon
|
|
2005-04-28
|
|
Just William's Amazon Webstore - 'CurrentIsExpanded' Cross-Site Scripting
|
4 |
WEB
|
Lostmon
|
|
2005-04-28
|
|
Just William's Amazon Webstore - 'Closeup.php?Image' Cross-Site Scripting
|
4 |
WEB
|
Lostmon
|
|
2005-04-28
|
|
phpBB Notes Module - SQL Injection
|
4 |
WEB
|
GulfTech Security
|
|
2005-04-27
|
|
Dream4 Koobi CMS 4.2.3 - 'index.php?Q' SQL Injection
|
4 |
WEB
|
CENSORED Search Vulnerabilities
|
|
2005-04-27
|
|
Dream4 Koobi CMS 4.2.3 - 'index.php?P' SQL Injection
|
4 |
WEB
|
CENSORED Search Vulnerabilities
|
