Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2013-05-06   Social Site Generator 2.2 - Cross-Site Request Forgery (Add Admin) 9 WEB Fallaga
2005-03-21   CzarNews 1.13/1.14 - 'headlines.php' Remote File Inclusion 10 WEB brOmstar
2005-03-21   TRG News 3.0 Script - Remote File Inclusion 9 WEB Frank_Reiner
2005-03-19   Ciamos 0.9.2 - 'Highlight.php' File Disclosure 9 WEB Majid NT
2005-03-19   PHP-Fusion 4/5 - 'Setuser.php' HTML Injection 8 WEB PersianHacker Team
2005-03-19   CoolForum 0.5/0.7/0.8 - 'register.php?login' SQL Injection 10 WEB Romano
2005-03-19   CoolForum 0.5/0.7/0.8 - 'avatar.php?img' Cross-Site Scripting 11 WEB Romano
2005-03-18   RunCMS 1.1 - Database Configuration Information Disclosure 10 WEB Majid NT
2005-03-18   PHPOpenChat 3.0.1 - Multiple HTML Injection Vulnerabilities 11 WEB PersianHacker Team
2005-03-18   Subdreamer 1.0 - SQL Injection 10 WEB GHC team
2005-03-17   ACS Blog 0.8/0.9/1.0/1.1 - 'search.asp' Cross-Site Scripting 10 WEB farhad koosha
2005-03-17   McNews 1.x - 'install.php' Arbitrary File Inclusion 11 WEB Jonathan Whiteley
2005-03-16   PunBB 1.2.3 - Multiple HTML Injection Vulnerabilities 10 WEB benji lemien
2005-03-15   PHPOpenChat 2.3.4/3.0.1 - 'ENGLISH_poc.php' Remote File Inclusion 10 WEB Albania Security Clan
2005-03-15   PHPOpenChat 2.3.4/3.0.1 - 'poc.php' Remote File Inclusion 9 WEB Albania Security Clan
2005-03-15   PHPOpenChat 2.3.4/3.0.1 - 'poc_loginform.php?phpbb_root_path' Remote File Inclusion 12 WEB Albania Security Clan
2005-03-14   VoteBox 2.0 - 'Votebox.php' Remote File Inclusion 10 WEB SmOk3
2005-03-14   PHPAdsNew 2.0.4 - 'AdFrame.php' Cross-Site Scripting 13 WEB Maksymilian Arciemowicz
2005-03-14   SimpGB 1.0 - 'Guestbook.php' SQL Injection 11 WEB visus
2005-03-14   Phorum 5.0.14 - Multiple Subject and Attachment HTML Injection Vulnerabilities 11 WEB Jon Oberheide
2005-03-13   HolaCMS 1.2.x/1.4.x Voting Module - Directory Traversal Remote File Corruption 11 WEB Virginity Security
2005-03-14   PABox 2.0 - Post Icon HTML Injection 10 WEB Rift_XT
2005-03-12   HolaCMS 1.2/1.4.x Voting Module - Remote File Corruption 11 WEB Virginity Security
2005-03-12   PAFileDB 1.1.3/2.1.1/3.0/3.1 - 'category.php?start' Cross-Site Scripting 10 WEB sp3x@securityreason.com
2005-03-12   PAFileDB 1.1.3/2.1.1/3.0/3.1 - 'viewall.php?start' Cross-Site Scripting 10 WEB sp3x@securityreason.com
2005-03-12   PAFileDB 1.1.3/2.1.1/3.0/3.1 - 'category.php?start' SQL Injection 10 WEB sp3x@securityreason.com
2005-03-12   PAFileDB 1.1.3/2.1.1/3.0/3.1 - 'viewall.php?start' SQL Injection 11 WEB sp3x@securityreason.com
2005-03-11   UBBCentral UBB.Threads 6.0 - 'editpost.php' SQL Injection 11 WEB ADZ Security Team
2005-03-10   All Enthusiast PhotoPost PHP Pro 5.0 - 'adm-photo.php' Arbitrary Image Manipulation 10 WEB Igor Franchuk
2005-03-10   phpoutsourcing zorum 3.5 - Multiple Vulnerabilities 10 WEB benjilenoob
2005-03-08   Newsscript - Access Validation 11 WEB adrianc23@gmail.com
2005-03-08   PHP Arena PAFileDB 3.1 - Multiple Cross-Site Scripting Vulnerabilities 11 WEB sp3x@securityreason.com
2005-03-08   YaBB 2.0 - Remote UsersRecentPosts Cross-Site Scripting 10 WEB trueend5
2005-03-08   OutStart Participate Enterprise 3 - Multiple Access Validation Vulnerabilities 10 WEB Altrus
2005-03-08   PHP-Fusion 5.0 - BBCode IMG Tag Script Injection 11 WEB FireSt0rm
2005-03-07   Jason Hines PHPWebLog 0.4/0.5 - Remote File Inclusion 11 WEB Filip Groszynski
2005-03-05   Stadtaus.Com PHP Form Mail Script 2.3 - Remote File Inclusion 10 WEB mozako
2005-03-04   Stadtaus.Com Download Center Lite 1.5 - PHP Remote File Inclusion 11 WEB Filip Groszynski
2005-03-03   Typo3 CMW_Linklist 1.4.1 Extension - SQL Injection 10 WEB Fabian Becker
2005-03-03   D-Forum 1.11 - 'Nav.php3' Cross-Site Scripting 10 WEB benjilenoob
2005-03-02   ProjectBB 0.4.5.1 - Multiple SQL Injections 9 WEB benji lemien
2005-03-02   ProjectBB 0.4.5.1 - Multiple Cross-Site Scripting Vulnerabilities 9 WEB benji lemien
2005-03-01   PHPNews 1.2.3/1.2.4 - 'auth.php' Remote File Inclusion 10 WEB mozako
2005-03-01   PBLang Bulletin Board System 4.x - 'DelPM.php' Arbitrary Personal Message Deletion 10 WEB Raven
2005-03-01   427BB 2.x - Multiple Remote HTML Injection Vulnerabilities 9 WEB Hackerlounge Research Group
2005-03-01   CutePHP CuteNews 1.3.6 - 'x-forwarded-for' Script Injection 9 WEB FraMe
2005-03-01   PBLang Bulletin Board System 4.x - 'SendPM.php' Directory Traversal 10 WEB Raven
2005-03-01   PHPCOIN 1.2 - 'login.php' Multiple Cross-Site Scripting Vulnerabilities 10 WEB Lostmon
2005-03-01   PHPCOIN 1.2 - 'mod.php' Multiple Cross-Site Scripting Vulnerabilities 9 WEB Lostmon
2005-02-28   PostNuke Phoenix 0.7x - 'SHOW' SQL Injection 10 WEB Maksymilian Arciemowicz
2005-02-28   PostNuke Phoenix 0.7x - 'CATID' SQL Injection 10 WEB Maksymilian Arciemowicz
2005-02-28   phpBB 2.0.x - Authentication Bypass (3) 9 WEB overdose
2005-02-28   phpBB 2.0.x - Authentication Bypass (2) 10 WEB phuket
2005-02-28   phpBB 2.0.x - Authentication Bypass (1) 11 WEB Paisterist
2005-02-25   CubeCart 2.0.x - Multiple Cross-Site Scripting Vulnerabilities 9 WEB Lostmon
2005-02-24   phpWebSite 0.x - Image File Processing Arbitrary '.PHP' File Upload 10 WEB tjomka
2005-02-24   PunBB 3.0/3.1 - Multiple Remote Input Validation Vulnerabilities 9 WEB John Gumbel
2005-02-24   cyclades alterpath manager 1.1 - Multiple Vulnerabilities 11 WEB sullo@cirt.net
2005-02-24   OOApp Guestbook - Multiple HTML Injection Vulnerabilities 10 WEB m1o1d1
2005-02-24   phpMyAdmin 2.6 - Multiple Local File Inclusions 10 WEB Maksymilian Arciemowicz
2005-02-24   phpMyAdmin 2.6 - 'theme_right.css.php' Multiple Cross-Site Scripting Vulnerabilities 9 WEB Maksymilian Arciemowicz
2005-02-24   phpMyAdmin 2.6 - 'theme_left.css.php' Multiple Cross-Site Scripting Vulnerabilities 8 WEB Maksymilian Arciemowicz
2005-02-24   phpMyAdmin 2.6 - 'display_tbl_links.lib.php' Multiple Cross-Site Scripting Vulnerabilities 8 WEB Maksymilian Arciemowicz
2005-02-24   phpMyAdmin 2.6 - 'select_server.lib.php' Multiple Cross-Site Scripting Vulnerabilities 8 WEB Maksymilian Arciemowicz
2005-02-23   PBLang Bulletin Board System 4.6 - 'search.php' Cross-Site Scripting 8 WEB Hackerlounge Research Group
2005-02-22   iGeneric iG Shop 1.x - Multiple SQL Injections 10 WEB John Cobb
2005-02-22   Mono 1.0.5 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities 9 WEB Andrey Rusyaev
2005-02-22   Biz Mail Form 2.x - Unauthorized Mail Relay 9 WEB Jason Frisvold
2005-02-21   PANews 2.0 - PHP Remote Code Execution 11 WEB tjomka
2005-02-21   Invision Power Board (IP.Board) 1.x/2.0.3 - SML Code Script Injection 10 WEB Daniel A.
2013-05-02   D-Link DNS-323 - Multiple Vulnerabilities 10 WEB sghctoma
2013-05-01   Vivotek IP Cameras - Multiple Vulnerabilities 9 WEB Core Security
2013-05-01   D-Link IP Cameras - Multiple Vulnerabilities 10 WEB Core Security
2005-02-19   PMachine Pro 2.4 - Remote File Inclusion 9 WEB kc
2013-05-01   EggBlog 4.1.2 - Arbitrary File Upload 9 WEB Pokk3rs
2005-02-19   ZeroBoard 4.1 - Multiple Cross-Site Scripting Vulnerabilities 9 WEB albanian haxorz
2005-02-18   TrackerCam 5.12 - 'ComGetLogFile.php3?fm' Traversal Arbitrary File Access 10 WEB Luigi Auriemma
2005-02-17   BibORB 1.3.2 Login Module - Multiple SQL Injections 10 WEB Patrick Hof
2005-02-17   BibORB 1.3.2 - 'index.php' Traversal Arbitrary File Manipulation 9 WEB Patrick Hof
2005-02-17   BibORB 1.3.2 - Add Database 'Description' Cross-Site Scripting 10 WEB Patrick Hof
2005-02-17   BibORB 1.3.2 - 'bibindex.php?search' Cross-Site Scripting 11 WEB Patrick Hof
2005-02-17   paFaq beta4 - 'comment.php' Multiple SQL Injections 11 WEB pi3ch
2005-02-17   paFaq beta4 - 'search.php?search_item' SQL Injection 9 WEB pi3ch
2005-02-17   paFaq beta4 - 'answer.php?offset' SQL Injection 10 WEB pi3ch
2005-02-17   paFaq beta4 - 'question.php' Multiple SQL Injections 10 WEB pi3ch
2005-02-17   WebCalendar 0.9.45 - SQL Injection 10 WEB Michael Scovetta
2005-02-16   MercuryBoard Forum 1.0/1.1 - Cross-Site Scripting 9 WEB Lostmon
2005-02-16   PaNews 2.0 - Cross-Site Scripting 9 WEB pi3ch
2005-02-16   Microsoft ASP.NET 1.0/1.1 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabiliti 9 WEB Andrey Rusyaev
2005-02-16   DCP-Portal 6.1.1 - Multiple SQL Injections 9 WEB Exoduks
2005-02-16   AWStats 5.x/6.x - 'Logfile' Remote Command Execution 8 WEB newbug@chroot.org
2005-02-15   osCommerce 2.2 - 'Contact_us.php' Cross-Site Scripting 10 WEB John Cobb
2005-02-15   CitrusDB 0.3.6 - Arbitrary Local PHP File Inclusion 10 WEB RedTeam Pentesting
2005-02-15   PHP-Nuke 6.x/7.x - Multiple Cross-Site Scripting Vulnerabilities 9 WEB waraxe
2004-02-15   CitrusDB 0.3.6 - Remote Authentication Bypass 10 WEB RedTeam Pentesting
2005-02-15   CitrusDB 0.3.6 - 'importcc.php' CSV File SQL Injection 10 WEB RedTeam Pentesting
2005-02-15   CitrusDB 0.3.6 - 'uploadcc.php' Arbitrary Database Injection 10 WEB RedTeam Pentesting
2005-02-15   CitrusDB 0.3.6 - 'importcc.php' Arbitrary Database Injection 10 WEB RedTeam Pentesting
2005-02-14   Brooky CubeCart 2.0.1/2.0.4 - 'index.php?language' Traversal Arbitrary File Access 10 WEB John Cobb
2005-02-14   Brooky CubeCart 2.0.1/2.0.4 - 'index.php?language' Cross-Site Scripting 10 WEB John Cobb
2005-02-14   AWStats 5.x/6.x - Debug Remote Information Disclosure 9 WEB GHC
2005-02-09   MercuryBoard 1.1 - 'index.php' SQL Injection 10 WEB Zeelock
2005-02-08   XGB 2.0 - Authentication Bypass 10 WEB Albania Security Clan
2005-02-08   PHP-Fusion 4.0 - 'Viewthread.php' Information Disclosure 10 WEB TheGreatOne2176
2013-04-29   Foe CMS 1.6.5 - Multiple Vulnerabilities 10 WEB flux77
2013-04-26   Joomla! 3.0.3 - 'remember.php' PHP Object Injection 9 WEB EgiX
2013-04-29   Ipswitch IMail 11.01 - Cross-Site Scripting 9 WEB DaOne
2005-02-07   Microsoft Outlook 2003 - Web Access Login Form Remote URI redirection 11 WEB Morning Wood
2005-02-02   Eurofull E-Commerce - 'Mensresp.asp' Cross-Site Scripting 11 WEB Yani-ari
2005-01-28   XOOPS Module module 3.0 - Directory Traversal 8 WEB Lostmon
2005-01-29   Captaris Infinite Mobile Delivery Webmail 2.6 - Full Path Disclosure 9 WEB steven@lovebug.org
2005-01-28   IceWarp Web Mail 5.3 - 'accountsettings_add.html?accountid' Cross-Site Scripting 9 WEB ShineShadow
2005-01-28   IceWarp Web Mail 5.3 - login.html 'Username' Cross-Site Scripting 10 WEB ShineShadow
2005-01-28   alt-n WebAdmin 3.0.2 - Multiple Vulnerabilities 9 WEB David A. P?rez
2005-01-27   Magic Winmail Server 4.0 (Build 1112) - 'upload.php' Traversal Arbitrary File Upload 10 WEB Tan Chew Keong
2005-01-27   Magic Winmail Server 4.0 (Build 1112) - 'download.php' Traversal Arbitrary File Access 10 WEB Tan Chew Keong
2005-01-25   Comdev eCommerce 3.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 8 WEB SmOk3
2005-01-25   Comersus Cart 5.0/6.0 - Multiple Vulnerabilities 9 WEB raf somers
2005-01-25   MercuryBoard 1.1 - Multiple Input Validation Vulnerabilities 9 WEB Alberto Trivero
2005-12-25   Exponent CMS 0.95 - Multiple Cross-Site Scripting Vulnerabilities 9 WEB y3dips
2005-01-19   Siteman 1.1 - User Database Privilege Escalation (2) 10 WEB amironline452
2005-01-19   Siteman 1.1 - User Database Privilege Escalation (1) 10 WEB Noam Rathaus
2004-12-23   Wirtualna Polska WPKontakt 3.0.1 - Remote Script Execution 9 WEB Poznan Supercomputing
2004-12-22   2BGal 2.5.1 - SQL Injection 9 WEB zib
2004-01-27   phpGroupWare 0.9.x - 'index.php' HTML Injection 9 WEB Cedric Cochin