Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2005-02-28   phpBB 2.0.x - Authentication Bypass (3) 23 WEB overdose
2005-02-28   phpBB 2.0.x - Authentication Bypass (2) 26 WEB phuket
2005-02-28   phpBB 2.0.x - Authentication Bypass (1) 27 WEB Paisterist
2005-02-25   CubeCart 2.0.x - Multiple Cross-Site Scripting Vulnerabilities 23 WEB Lostmon
2005-02-24   phpWebSite 0.x - Image File Processing Arbitrary '.PHP' File Upload 27 WEB tjomka
2005-02-24   PunBB 3.0/3.1 - Multiple Remote Input Validation Vulnerabilities 24 WEB John Gumbel
2005-02-24   cyclades alterpath manager 1.1 - Multiple Vulnerabilities 28 WEB sullo@cirt.net
2005-02-24   OOApp Guestbook - Multiple HTML Injection Vulnerabilities 23 WEB m1o1d1
2005-02-24   phpMyAdmin 2.6 - Multiple Local File Inclusions 25 WEB Maksymilian Arciemowicz
2005-02-24   phpMyAdmin 2.6 - 'theme_right.css.php' Multiple Cross-Site Scripting Vulnerabilities 24 WEB Maksymilian Arciemowicz
2005-02-24   phpMyAdmin 2.6 - 'theme_left.css.php' Multiple Cross-Site Scripting Vulnerabilities 24 WEB Maksymilian Arciemowicz
2005-02-24   phpMyAdmin 2.6 - 'display_tbl_links.lib.php' Multiple Cross-Site Scripting Vulnerabilities 23 WEB Maksymilian Arciemowicz
2005-02-24   phpMyAdmin 2.6 - 'select_server.lib.php' Multiple Cross-Site Scripting Vulnerabilities 21 WEB Maksymilian Arciemowicz
2005-02-23   PBLang Bulletin Board System 4.6 - 'search.php' Cross-Site Scripting 24 WEB Hackerlounge Research Group
2005-02-22   iGeneric iG Shop 1.x - Multiple SQL Injections 26 WEB John Cobb
2005-02-22   Mono 1.0.5 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities 24 WEB Andrey Rusyaev
2005-02-22   Biz Mail Form 2.x - Unauthorized Mail Relay 24 WEB Jason Frisvold
2005-02-21   PANews 2.0 - PHP Remote Code Execution 25 WEB tjomka
2005-02-21   Invision Power Board (IP.Board) 1.x/2.0.3 - SML Code Script Injection 35 WEB Daniel A.
2013-05-02   D-Link DNS-323 - Multiple Vulnerabilities 26 WEB sghctoma
2013-05-01   Vivotek IP Cameras - Multiple Vulnerabilities 23 WEB Core Security
2013-05-01   D-Link IP Cameras - Multiple Vulnerabilities 24 WEB Core Security
2005-02-19   PMachine Pro 2.4 - Remote File Inclusion 25 WEB kc
2013-05-01   EggBlog 4.1.2 - Arbitrary File Upload 26 WEB Pokk3rs
2005-02-19   ZeroBoard 4.1 - Multiple Cross-Site Scripting Vulnerabilities 25 WEB albanian haxorz
2005-02-18   TrackerCam 5.12 - 'ComGetLogFile.php3?fm' Traversal Arbitrary File Access 25 WEB Luigi Auriemma
2005-02-17   BibORB 1.3.2 Login Module - Multiple SQL Injections 27 WEB Patrick Hof
2005-02-17   BibORB 1.3.2 - 'index.php' Traversal Arbitrary File Manipulation 26 WEB Patrick Hof
2005-02-17   BibORB 1.3.2 - Add Database 'Description' Cross-Site Scripting 27 WEB Patrick Hof
2005-02-17   BibORB 1.3.2 - 'bibindex.php?search' Cross-Site Scripting 25 WEB Patrick Hof
2005-02-17   paFaq beta4 - 'comment.php' Multiple SQL Injections 29 WEB pi3ch
2005-02-17   paFaq beta4 - 'search.php?search_item' SQL Injection 23 WEB pi3ch
2005-02-17   paFaq beta4 - 'answer.php?offset' SQL Injection 25 WEB pi3ch
2005-02-17   paFaq beta4 - 'question.php' Multiple SQL Injections 25 WEB pi3ch
2005-02-17   WebCalendar 0.9.45 - SQL Injection 28 WEB Michael Scovetta
2005-02-16   MercuryBoard Forum 1.0/1.1 - Cross-Site Scripting 26 WEB Lostmon
2005-02-16   PaNews 2.0 - Cross-Site Scripting 25 WEB pi3ch
2005-02-16   Microsoft ASP.NET 1.0/1.1 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabiliti 23 WEB Andrey Rusyaev
2005-02-16   DCP-Portal 6.1.1 - Multiple SQL Injections 24 WEB Exoduks
2005-02-16   AWStats 5.x/6.x - 'Logfile' Remote Command Execution 21 WEB newbug@chroot.org
2005-02-15   osCommerce 2.2 - 'Contact_us.php' Cross-Site Scripting 23 WEB John Cobb
2005-02-15   CitrusDB 0.3.6 - Arbitrary Local PHP File Inclusion 24 WEB RedTeam Pentesting
2005-02-15   PHP-Nuke 6.x/7.x - Multiple Cross-Site Scripting Vulnerabilities 23 WEB waraxe
2004-02-15   CitrusDB 0.3.6 - Remote Authentication Bypass 25 WEB RedTeam Pentesting
2005-02-15   CitrusDB 0.3.6 - 'importcc.php' CSV File SQL Injection 26 WEB RedTeam Pentesting
2005-02-15   CitrusDB 0.3.6 - 'uploadcc.php' Arbitrary Database Injection 24 WEB RedTeam Pentesting
2005-02-15   CitrusDB 0.3.6 - 'importcc.php' Arbitrary Database Injection 26 WEB RedTeam Pentesting
2005-02-14   Brooky CubeCart 2.0.1/2.0.4 - 'index.php?language' Traversal Arbitrary File Access 25 WEB John Cobb
2005-02-14   Brooky CubeCart 2.0.1/2.0.4 - 'index.php?language' Cross-Site Scripting 22 WEB John Cobb
2005-02-14   AWStats 5.x/6.x - Debug Remote Information Disclosure 27 WEB GHC
2005-02-09   MercuryBoard 1.1 - 'index.php' SQL Injection 25 WEB Zeelock
2005-02-08   XGB 2.0 - Authentication Bypass 24 WEB Albania Security Clan
2005-02-08   PHP-Fusion 4.0 - 'Viewthread.php' Information Disclosure 28 WEB TheGreatOne2176
2013-04-29   Foe CMS 1.6.5 - Multiple Vulnerabilities 30 WEB flux77
2013-04-26   Joomla! 3.0.3 - 'remember.php' PHP Object Injection 20 WEB EgiX
2013-04-29   Ipswitch IMail 11.01 - Cross-Site Scripting 23 WEB DaOne
2005-02-07   Microsoft Outlook 2003 - Web Access Login Form Remote URI redirection 28 WEB Morning Wood
2005-02-02   Eurofull E-Commerce - 'Mensresp.asp' Cross-Site Scripting 26 WEB Yani-ari
2005-01-28   XOOPS Module module 3.0 - Directory Traversal 25 WEB Lostmon
2005-01-29   Captaris Infinite Mobile Delivery Webmail 2.6 - Full Path Disclosure 24 WEB steven@lovebug.org
2005-01-28   IceWarp Web Mail 5.3 - 'accountsettings_add.html?accountid' Cross-Site Scripting 24 WEB ShineShadow
2005-01-28   IceWarp Web Mail 5.3 - login.html 'Username' Cross-Site Scripting 24 WEB ShineShadow
2005-01-28   alt-n WebAdmin 3.0.2 - Multiple Vulnerabilities 25 WEB David A. P?rez
2005-01-27   Magic Winmail Server 4.0 (Build 1112) - 'upload.php' Traversal Arbitrary File Upload 26 WEB Tan Chew Keong
2005-01-27   Magic Winmail Server 4.0 (Build 1112) - 'download.php' Traversal Arbitrary File Access 26 WEB Tan Chew Keong
2005-01-25   Comdev eCommerce 3.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 21 WEB SmOk3
2005-01-25   Comersus Cart 5.0/6.0 - Multiple Vulnerabilities 24 WEB raf somers
2005-01-25   MercuryBoard 1.1 - Multiple Input Validation Vulnerabilities 22 WEB Alberto Trivero
2005-12-25   Exponent CMS 0.95 - Multiple Cross-Site Scripting Vulnerabilities 25 WEB y3dips
2005-01-19   Siteman 1.1 - User Database Privilege Escalation (2) 27 WEB amironline452
2005-01-19   Siteman 1.1 - User Database Privilege Escalation (1) 26 WEB Noam Rathaus
2004-12-23   Wirtualna Polska WPKontakt 3.0.1 - Remote Script Execution 26 WEB Poznan Supercomputing
2004-12-22   2BGal 2.5.1 - SQL Injection 24 WEB zib
2004-01-27   phpGroupWare 0.9.x - 'index.php' HTML Injection 24 WEB Cedric Cochin
2004-01-27   phpGroupWare 0.9.14 - 'Tables_Update.Inc.php' Remote File Inclusion 24 WEB Cedric Cochin
2004-12-20   Tlen.pl 5.23.4.1 - Instant Messenger Remote Script Execution 24 WEB Jaroslaw Sajko
2004-12-20   escripts software e_board 4.0 - Directory Traversal 25 WEB white_e@nogimmick.org
2004-12-18   Kayako eSupport 2.x - Ticket System Multiple SQL Injections 25 WEB GulfTech Security
2004-12-18   Kayako eSupport 2.x - 'index.php' Knowledgebase Cross-Site Scripting 26 WEB GulfTech Security
2013-04-26   D-Link DIR-635 - Multiple Vulnerabilities 27 WEB m-1-k-3
2004-12-17   WorkBoard 1.2 - Multiple Cross-Site Scripting Vulnerabilities 24 WEB Lostmon
2013-04-25   phpMyAdmin 3.5.8/4.0.0-RC2 - Multiple Vulnerabilities 26 WEB waraxe
2013-04-25   Hornbill Supportworks ITSM 1.0.0 - SQL Injection 27 WEB Joseph Sheridan
2004-12-16   MediaWiki 1.3.x - Arbitrary Script Upload 24 WEB Jeremy Bae
2004-12-16   WordPress Core 1.2.1/1.2.2 - 'moderation.php?item_approved' Cross-Site Scripting 25 WEB Thomas Waldegger
2004-12-16   WordPress Core 1.2.1/1.2.2 - 'link-manager.php' Multiple Cross-Site Scripting Vulnerabilities 31 WEB Thomas Waldegger
2004-12-16   WordPress Core 1.2.1/1.2.2 - 'link-categories.php?cat_id' Cross-Site Scripting 25 WEB Thomas Waldegger
2004-12-16   WordPress Core 1.2.1/1.2.2 - 'link-add.php' Multiple Cross-Site Scripting Vulnerabilities 21 WEB Thomas Waldegger
2004-12-16   WordPress Core 1.2.1/1.2.2 - '/wp-admin/templates.php?file' Cross-Site Scripting 25 WEB Thomas Waldegger
2004-12-16   WordPress Core 1.2.1/1.2.2 - '/wp-admin/post.php?content' Cross-Site Scripting 23 WEB Thomas Waldegger
2004-12-16   JSBoard 2.0.x - Arbitrary Script Upload 24 WEB Jeremy Bae
2004-12-16   IkonBoard 3.x - Multiple SQL Injections 22 WEB anonymous
2013-04-23   D-Link DIR-615 Rev D3 / DIR-300 Rev A - Multiple Vulnerabilities 24 WEB m-1-k-3
2013-04-22   VoipNow 2.5 - Local File Inclusion 26 WEB i-Hmx
2013-04-22   Joomla! Component com_civicrm 4.2.2 - Remote Code Injection 24 WEB iskorpitx
2013-04-19   Nginx 0.6.x - Arbitrary Code Execution NullByte Injection 23 WEB Neal Poole
2013-04-18   KrisonAV CMS 3.0.1 - Multiple Vulnerabilities 25 WEB High-Tech Bridge SA
2013-04-18   Oracle WebCenter Sites Satellite Server - HTTP Header Injection 25 WEB SEC Consult
2013-04-15   phpVms Virtual Airline Administration 2.1.934/2.1.935 - SQL Injection 25 WEB NoGe
2013-04-15   CMSLogik 1.2.1 - Multiple Vulnerabilities 25 WEB LiquidWorm
2013-04-15   Vanilla Forums Van2Shout Plugin 1.0.51 - Multiple Cross-Site Request Forgery Vulnerabilities 27 WEB Henry Hoggard
2013-04-12   Simple HRM System 2.3 - Multiple Vulnerabilities 22 WEB Doraemon
2013-04-12   Free Monthly Websites 2.0 - Admin Password Change 25 WEB Yassin Aboukir
2013-04-09   ZAPms 1.41 - SQL Injection 32 WEB NoGe
2013-04-08   WHMCompleteSolution (WHMCS) Group Pay Plugin 1.5 - 'grouppay.php?hash' SQL Injection 24 WEB HJauditing Employee Tim
2013-04-08   Sophos Web Protection Appliance 3.7.8.1 - Multiple Vulnerabilities 25 WEB SEC Consult
2013-04-08   TP-Link TD-8817 6.0.1 Build 111128 Rel.26763 - Cross-Site Request Forgery 27 WEB Un0wn_X
2013-04-08   Vanilla Forums 2-0-18-4 - SQL Injection 23 WEB bl4ckw0rm
2013-04-08   D-Link - Multiple Vulnerabilities 26 WEB m-1-k-3
2013-04-08   Belkin Wemo - Arbitrary Firmware Upload 23 WEB Daniel Buentello
2013-04-08   OTRS 3.x - FAQ Module Persistent Cross-Site Scripting 26 WEB Luigi Vezzoso
2013-04-08   OpenCart - Cross-Site Request Forgery (Change User Password) 27 WEB Saadi Siddiqui
2013-04-02   Netgear WNR1000 - Authentication Bypass 22 WEB Roberto Paleari
2013-04-02   Aspen 0.8 - Directory Traversal 24 WEB Daniel Ricardo dos Santos
2013-04-02   WordPress Plugin FuneralPress 1.1.6 - Persistent Cross-Site Scripting 24 WEB Rob Armstrong
2013-04-02   Network Weathermap 0.97a - 'editor.php' Persistent Cross-Site Scripting 23 WEB Daniel Ricardo dos Santos
2013-04-02   Pollen CMS 0.6 - 'index.php?p' Paramete' Local File Disclosure 23 WEB MizoZ
2013-03-29   AWS Xms 2.5 - 'importer.php?what' Directory Traversal 24 WEB High-Tech Bridge SA
2013-03-29   MailOrderWorks 5.907 - Multiple Vulnerabilities 26 WEB Vulnerability-Lab
2013-03-29   SynConnect Pms - 'index.php?loginid' SQL Injection 26 WEB Bhadresh Patel
2013-03-27   ClipShare 4.1.1 - Multiples Vulnerabilities 27 WEB Esac
2013-03-27   PsychoStats 3.2.2b - 'awards.php' Blind SQL Injection 25 WEB Mohamed from ALG
2013-03-26   WordPress Plugin Mathjax Latex 1.1 - Cross-Site Request Forgery 24 WEB Junaid Hussain
2013-03-25   Ra1NX PHP Bot - pubcall Authentication Bypass Remote Code Execution (Metasploit) 24 WEB bwall
2013-03-25   vBulletin 5.0.0 Beta 11 < 5.0.0 Beta 28 - SQL Injection 25 WEB Orestis Kourides