Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2005-05-04   Interspire articlelive 2005 - Multiple Vulnerabilities 7 WEB Dcrab
2005-05-04   ASP Inline Corporate Calendar 3.6.3 - 'Details.asp' SQL Injection 7 WEB Zinho
2005-05-04   ASP Inline Corporate Calendar 3.6.3 - 'Defer.asp' SQL Injection 8 WEB Zinho
2005-05-04   Gossamer Threads Links 2.x - 'User.cgi' Cross-Site Scripting 7 WEB Nathan House
2005-05-03   Invision Power Board (IP.Board) 2.0.3/2.1 - 'Act' Cross-Site Scripting 7 WEB arron ward
2005-05-03   WebCrossing WebX 5.0 - Cross-Site Scripting 7 WEB dr_insane
2005-05-03   SitePanel2 2.6.1 - Multiple Input Validation Vulnerabilities 7 WEB GulfTech Security
2005-05-03   osTicket 1.2/1.3 - Multiple Input Validation / Remote Code Injection Vulnerabilities 7 WEB GulfTech Security
2005-05-02   Maxwebportal 1.3 - 'custom_link.asp' Multiple SQL Injections 6 WEB s-dalili
2005-05-02   Maxwebportal 1.3 - 'dl_toprated.asp' SQL Injection 7 WEB s-dalili
2005-05-02   Maxwebportal 1.3 - 'pic_popular.asp' SQL Injection 7 WEB s-dalili
2005-05-02   Maxwebportal 1.3 - 'links_popular.asp' SQL Injection 7 WEB s-dalili
2005-05-02   Maxwebportal 1.3 - 'dl_popular.asp' SQL Injection 7 WEB s-dalili
2005-05-02   CodetoSell ViArt Shop Enterprise 2.1.6 - 'news_view.php' Multiple Cross-Site Scripting Vulnerabiliti 7 WEB Lostmon
2005-05-02   CodetoSell ViArt Shop Enterprise 2.1.6 - 'products.php' Multiple Cross-Site Scripting Vulnerabilitie 7 WEB Lostmon
2005-05-02   CodetoSell ViArt Shop Enterprise 2.1.6 - 'product_details.php?category_id' Cross-Site Scripting 8 WEB Lostmon
2005-05-02   CodetoSell ViArt Shop Enterprise 2.1.6 - 'reviews.php' Multiple Cross-Site Scripting Vulnerabilities 7 WEB Lostmon
2005-05-02   CodetoSell ViArt Shop Enterprise 2.1.6 - 'page.php?page' Cross-Site Scripting 7 WEB Lostmon
2005-05-02   CodetoSell ViArt Shop Enterprise 2.1.6 - 'basket.php' Multiple Cross-Site Scripting Vulnerabilities 7 WEB Lostmon
2005-04-30   JGS-Portal 3.0.1 - 'ID' SQL Injection 9 WEB admin@batznet.com
2005-04-28   phpCOIN 1.2 Pages Module - Multiple SQL Injections 9 WEB Dcrab
2005-04-28   phpCOIN 1.2 - 'login.php?PHPcoinsessid' SQL Injection 9 WEB Dcrab
2005-04-28   Just William's Amazon Webstore - HTTP Response Splitting 8 WEB Lostmon
2005-04-28   Just William's Amazon Webstore - 'CurrentNumber' Cross-Site Scripting 9 WEB Lostmon
2005-04-28   Just William's Amazon Webstore - 'searchFor' Cross-Site Scripting 9 WEB Lostmon
2005-04-28   Just William's Amazon Webstore - 'CurrentIsExpanded' Cross-Site Scripting 9 WEB Lostmon
2005-04-28   Just William's Amazon Webstore - 'Closeup.php?Image' Cross-Site Scripting 8 WEB Lostmon
2005-04-28   phpBB Notes Module - SQL Injection 8 WEB GulfTech Security
2005-04-27   Dream4 Koobi CMS 4.2.3 - 'index.php?Q' SQL Injection 8 WEB CENSORED Search Vulnerabilities
2005-04-27   Dream4 Koobi CMS 4.2.3 - 'index.php?P' SQL Injection 9 WEB CENSORED Search Vulnerabilities
2005-04-27   Claroline E-Learning 1.5/1.6 - 'exercises_details.php?exo_id' SQL Injection 8 WEB Sieg Fried
2005-04-27   Claroline E-Learning 1.5/1.6 - 'userInfo.php' Multiple SQL Injections 8 WEB Sieg Fried
2005-04-27   Claroline 1.5/1.6 - 'myagenda.php?coursePath' Cross-Site Scripting 8 WEB Sieg Fried
2005-04-27   Claroline 1.5/1.6 - 'user_access_details.php?data' Cross-Site Scripting 9 WEB Sieg Fried
2005-04-27   Claroline 1.5/1.6 - 'toolaccess_details.php?tool' Cross-Site Scripting 9 WEB Sieg Fried
2005-04-27   PHPCart - Input Validation 9 WEB Lostmon
2004-04-26   BBlog 0.7.4 - 'PostID' SQL Injection 8 WEB jericho+bblog@attrition.org
2005-04-26   MetaBid Auctions - 'intAuctionID' SQL Injection 9 WEB Dcrab
2005-04-26   MetaCart2 - 'SearchAction.asp' Multiple SQL Injections 9 WEB Dcrab
2005-04-26   MetaCart2 - 'strSubCatalog_NAME' SQL Injection 9 WEB Dcrab
2005-04-26   MetaCart2 - 'CurCatalogID' SQL Injection 9 WEB Dcrab
2005-04-26   MetaCart2 - 'StrSubCatalogID' SQL Injection 8 WEB Dcrab
2005-04-26   MetaCart2 - 'IntCatalogID' SQL Injection 9 WEB Dcrab
2005-04-26   GrayCMS 1.1 - 'error.php' Remote File Inclusion 8 WEB Kold
2005-04-26   MetaCart E-Shop V-8 - 'StrCatalog_NAME' SQL Injection 8 WEB Dcrab
2005-04-26   MetaCart E-Shop V-8 - 'IntProdID' SQL Injection 9 WEB Dcrab
2005-04-26   Invision Power Board 2.0.1 - 'QPid' SQL Injection 8 WEB SVT
2005-04-15   SqWebMail 3.x/4.0 - HTTP Response Splitting 8 WEB Zinho
2005-04-24   Yappa-ng 1.x/2.x - Cross-Site Scripting 9 WEB GulfTech Security
2005-04-24   Yappa-ng 1.x/2.x - Remote File Inclusion 9 WEB GulfTech Security
2005-04-26   PHPMyVisites 1.3 - 'Set_Lang' File Inclusion 8 WEB Max Cerny
2005-04-25   OneWorldStore - IDOrder Information Disclosure 9 WEB Lostmon
2005-04-25   StorePortal 2.63 - 'default.asp' Multiple SQL Injections 9 WEB Dcrab
2005-04-25   WoltLab Burning Board 2.3.1 - 'PMS.php' Cross-Site Scripting 10 WEB deluxe89
2005-04-23   phpBB 2.0.x - 'viewtopic.php' Cross-Site Scripting 8 WEB HaCkZaTaN
2005-04-23   phpBB 2.0.x - 'profile.php' Cross-Site Scripting 7 WEB HaCkZaTaN
2005-04-23   CartWIZ 1.10 - 'searchresults.asp' Name Argument Cross-Site Scripting 8 WEB Dcrab
2005-04-23   CartWIZ 1.10 - 'searchresults.asp' SKU Argument Cross-Site Scripting 8 WEB Dcrab
2005-04-23   CartWIZ 1.10 - 'login.asp' Message Argument Cross-Site Scripting 8 WEB Dcrab
2013-04-16   ZPanel - 'templateparser.class.php' Crafted Template Remote Command Execution 7 WEB Sven Slootweg
2013-05-17   Exponent CMS 2.2.0 Beta 3 - Multiple Vulnerabilities 7 WEB High-Tech Bridge SA
2005-04-23   CartWIZ 1.10 - 'login.asp' Redirect Argument Cross-Site Scripting 9 WEB Dcrab
2005-04-23   CartWIZ 1.10 - 'error.asp' Cross-Site Scripting 8 WEB Dcrab
2005-04-23   CartWIZ 1.10 - 'Access.asp' Cross-Site Scripting 9 WEB Dcrab
2005-04-23   CartWIZ 1.10 - 'AddToWishlist.asp' Cross-Site Scripting 20 WEB Dcrab
2005-04-23   CartWIZ 1.10 - 'TellAFriend.asp' Cross-Site Scripting 6 WEB Dcrab
2005-04-23   CartWIZ 1.10 - 'searchresults.asp' idcategory Argument SQL Injection 9 WEB Dcrab
2005-04-23   CartWIZ 1.10 - 'searchresults.asp' PriceFrom Argument SQL Injection 9 WEB Dcrab
2005-04-23   CartWIZ 1.10 - 'searchresults.asp' PriceTo Argument SQL Injection 7 WEB Dcrab
2005-04-23   CartWIZ 1.10 - 'ProductDetails.asp' SQL Injection 8 WEB Dcrab
2005-04-23   CartWIZ 1.10 - 'ProductCatalogSubCats.asp' SQL Injection 9 WEB Dcrab
2005-04-23   CartWIZ 1.10 - 'AddToCart.asp' SQL Injection 7 WEB Dcrab
2005-04-23   Black Knight Forum 4.0 - 'forum.asp' SQL Injection 9 WEB Dcrab
2005-04-23   Black Knight Forum 4.0 - 'Member.asp' SQL Injection 7 WEB Dcrab
2005-04-22   WoltLab Burning Board 2.3.1 - 'thread.php' Cross-Site Scripting 8 WEB deluxe89
2005-04-22   ASPNuke 0.80 - 'Select.asp' Cross-Site Scripting 7 WEB Dcrab
2005-04-22   ASPNuke 0.80 - 'profile.asp' Cross-Site Scripting 7 WEB Dcrab
2005-04-22   ASPNuke 0.80 - 'detail.asp' SQL Injection 8 WEB Dcrab
2005-04-22   ASPNuke 0.80 - 'Comments.asp' SQL Injection 9 WEB Dcrab
2013-05-17   PHP-Charts 1.0 - Code Execution 11 WEB fizzle stick
2005-04-21   ProfitCode Software PayProCart 3.0 - AdminShop MMActionComm Cross-Site Scripting 9 WEB Lostmon
2005-04-21   ProfitCode Software PayProCart 3.0 - AdminShop ProMod Cross-Site Scripting 11 WEB Lostmon
2013-05-17   Drupal Module CKEditor < 4.1WYSIWYG (Drupal 6.x/7.x) - Persistent Cross-Site Scripting 12 WEB r0ng
2004-04-21   ProfitCode Software PayProCart 3.0 - AdminShop TaskID Cross-Site Scripting 10 WEB Lostmon
2005-04-21   ProfitCode Software PayProCart 3.0 - AdminShop ModID Cross-Site Scripting 10 WEB Lostmon
2005-04-21   ProfitCode Software PayProCart 3.0 - AdminShop HDoc Cross-Site Scripting 8 WEB Lostmon
2005-04-21   ProfitCode Software PayProCart 3.0 - Ckprvd Cross-Site Scripting 9 WEB Lostmon
2005-04-21   ProfitCode Software PayProCart 3.0 - 'Username' Cross-Site Scripting 8 WEB Lostmon
2005-04-20   DUportal 3.1.2 - 'type.asp?iCat' SQL Injection 8 WEB Dcrab
2005-04-20   DUportal 3.1.2 - 'inc_rating.asp' Multiple SQL Injections 8 WEB Dcrab
2005-04-20   DUportal 3.1.2 - 'inc_poll_voting.asp?DAT_PARENT' SQL Injection 9 WEB Dcrab
2005-04-20   DUportal 3.1.2 - 'channel.asp?iChannel' SQL Injection 9 WEB Dcrab
2005-04-20   DUportal Pro 3.4 - 'detail.asp' Multiple SQL Injections 8 WEB Dcrab
2005-04-20   DUportal Pro 3.4 - 'cat.asp' Multiple SQL Injections 8 WEB Dcrab
2005-04-20   DUportal Pro 3.4 - 'result.asp' Multiple SQL Injections 8 WEB Dcrab
2005-04-20   DUportal Pro 3.4 - 'inc_vote.asp' Multiple SQL Injections 8 WEB Dcrab
2005-04-20   DUportal Pro 3.4 - 'search.asp?iChannel' SQL Injection 8 WEB Dcrab
2005-04-20   DUportal Pro 3.4 - 'default.asp' Multiple SQL Injections 9 WEB Dcrab
2005-04-20   phpBB-Auction Module 1.0/1.2 - 'Auction_Offer.php' SQL Injection 8 WEB sNKenjoi
2005-04-20   phpBB-Auction Module 1.0/1.2 - 'Auction_Rating.php' SQL Injection 9 WEB sNKenjoi
2005-04-20   PHP Labs - '.proFile' File URI Cross-Site Scripting 9 WEB sNKenjoi
2005-04-20   Ocean12 Calendar Manager 1.0 - Admin Form SQL Injection 10 WEB Zinho
2005-04-20   PHP Labs - '.proFile' Dir URI Cross-Site Scripting 9 WEB sNKenjoi
2005-04-20   Netref 4.2 - 'Cat_for_gen.php' Remote PHP Script Injection 9 WEB jaguar
2005-04-20   ECommPro 3.0 - 'Admin/login.asp' SQL Injection 9 WEB c0d3r
2005-04-19   CityPost Simple PHP Upload - 'Simple-upload-53.php' Cross-Site Scripting 9 WEB Thom
2005-04-19   CityPost PHP Image Editor M1/M2/M3/Imgsrc/M4 - 'URI' Cross-Site Scripting 8 WEB Thom
2005-04-19   CityPost PHP LNKX 52.0 - 'message.php' Cross-Site Scripting 8 WEB Thom
2005-03-11   UBBCentral UBB.Threads 6.0 - 'Printthread.php' SQL Injection 8 WEB HLL
2005-04-19   OneWorldStore - 'DisplayResults.asp' Cross-Site Scripting 7 WEB Lostmon
2005-04-19   OneWorldStore - 'DisplayResults.asp' SQL Injection 8 WEB Lostmon
2005-04-13   phpBB 1.x/2.0.x - Knowledge Base Module 'KB.php' SQL Injection 9 WEB deluxe@security-project.org
2013-05-14   UMI CMS 2.9 - Cross-Site Request Forgery 8 WEB High-Tech Bridge SA
2013-05-14   Alienvault Open Source SIEM (OSSIM) 4.1.2 - Multiple SQL Injections 8 WEB RunRunLevel
2013-05-14   WHMCS 4.x - 'invoicefunctions.php?id' SQL Injection 9 WEB Ahmed Aboul-Ela
2013-05-14   Invision Power Board 1.x?/2.x/3.x - Admin Takeover 8 WEB John JEAN
2013-05-14   WordPress Plugin wp-FileManager - Arbitrary File Download 9 WEB ByEge
2005-04-18   MVNForum 1.0 - Search Cross-Site Scripting 8 WEB hoang yen
2005-04-18   eGroupWare 1.0 - 'index.php?cats_app' SQL Injection 8 WEB GulfTech Security
2005-04-18   eGroupWare 1.0 - '/tts/index.php?filter' SQL Injection 9 WEB GulfTech Security
2005-04-18   eGroupWare 1.0 - '/sitemgr-site/index.php?category_id' Cross-Site Scripting 8 WEB GulfTech Security
2005-04-18   eGroupWare 1.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 8 WEB GulfTech Security
2005-04-16   Datenbank Module For phpBB - 'Remote mod.php' Cross-Site Scripting 9 WEB tom cruise
2005-04-16   phpBB Remote - 'mod.php' SQL Injection 9 WEB tom cruise
2006-10-19   Ariadne CMS 2.4 - Remote File Inclusion 8 WEB Fidel Costa