|
2013-02-17
|
|
Scripts Genie Domain Trader - 'catalog.php?id' SQL Injection
|
14 |
WEB
|
3spi0n
|
|
2013-02-17
|
|
Scripts Genie Games Site Script - 'index.php?id' SQL Injection
|
13 |
WEB
|
3spi0n
|
|
2013-02-17
|
|
Scripts Genie Gallery Personals - 'gallery.php?L' SQL Injection
|
14 |
WEB
|
3spi0n
|
|
2013-02-15
|
|
ChillyCMS 1.3.0 - Multiple Vulnerabilities
|
12 |
WEB
|
Abhi M Balakrishnan
|
|
2013-02-15
|
|
Cometchat - Multiple Vulnerabilities
|
13 |
WEB
|
B127Y
|
|
2013-02-15
|
|
TP-Link TL-WA701N / TL-WA701ND - Multiple Vulnerabilities
|
13 |
WEB
|
m-1-k-3
|
|
2013-02-15
|
|
Edimax EW-7206-APg and EW-7209APg - Multiple Vulnerabilities
|
17 |
WEB
|
m-1-k-3
|
|
2013-02-14
|
|
Ultra Light Forum - Persistent Cross-Site Scripting
|
13 |
WEB
|
cr4wl3r
|
|
2013-02-14
|
|
SonicWALL OEM Scrutinizer 9.5.2 - Multiple Vulnerabilities
|
13 |
WEB
|
Vulnerability-Lab
|
|
2013-02-14
|
|
Raidsonic IB-NAS5220 and IB-NAS4220-B - Multiple Vulnerabilities
|
12 |
WEB
|
m-1-k-3
|
|
2013-02-14
|
|
OpenPLI 3.0 Beta (OpenPLi-beta-dm7000-20130127-272) - Multiple Vulnerabilities
|
11 |
WEB
|
m-1-k-3
|
|
2013-02-14
|
|
Transferable Remote 1.1 iPad iPhone - Multiple Vulnerabilities
|
11 |
WEB
|
Vulnerability-Lab
|
|
2013-02-14
|
|
SonicWALL Scrutinizer 9.5.2 - SQL Injection
|
11 |
WEB
|
Vulnerability-Lab
|
|
2013-02-13
|
|
OpenEMR 4.1.1 - 'ofc_upload_image.php' Arbitrary File Upload
|
16 |
WEB
|
LiquidWorm
|
|
2013-02-11
|
|
Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities
|
12 |
WEB
|
Vulnerability-Lab
|
|
2013-02-11
|
|
TP-Link - Admin Panel Multiple Cross-Site Request Forgery Vulnerabilities
|
11 |
WEB
|
CYBSEC Labs
|
|
2013-02-11
|
|
IP.Gallery 4.2.x/5.0.x - Persistent Cross-Site Scripting
|
11 |
WEB
|
Mohamed Ramadan
|
|
2013-02-11
|
|
IRIS Citations Management Tool - (Authenticated) Remote Command Execution
|
15 |
WEB
|
aeon
|
|
2013-02-11
|
|
Linksys WRT160N - Multiple Vulnerabilities
|
15 |
WEB
|
m-1-k-3
|
|
2013-02-11
|
|
D-Link DIR-615 Rev H - Multiple Vulnerabilities
|
12 |
WEB
|
m-1-k-3
|
|
2013-02-11
|
|
Linksys WAG200G - Multiple Vulnerabilities
|
12 |
WEB
|
m-1-k-3
|
|
2013-02-11
|
|
Linksys E1500/E2500 - Multiple Vulnerabilities
|
12 |
WEB
|
m-1-k-3
|
|
2013-02-10
|
|
Easy Live Shop System - SQL Injection
|
12 |
WEB
|
Ramdan Yantu
|
|
2013-02-07
|
|
WirelessFiles 1.1 iPad iPhone - Multiple Vulnerabilities
|
12 |
WEB
|
Vulnerability-Lab
|
|
2013-02-07
|
|
CubeCart 5.2.0 - 'cubecart.class.php' PHP Object Injection
|
12 |
WEB
|
EgiX
|
|
2013-02-07
|
|
Netgear DGN1000B - Multiple Vulnerabilities
|
15 |
WEB
|
m-1-k-3
|
|
2013-02-06
|
|
Hiverr 2.2 - Multiple Vulnerabilities
|
12 |
WEB
|
xStarCode
|
|
2013-02-05
|
|
Glossword 1.8.3 - SQL Injection
|
11 |
WEB
|
AkaStep
|
|
2013-02-05
|
|
glossword 1.8.12 - Multiple Vulnerabilities
|
14 |
WEB
|
AkaStep
|
|
2013-02-05
|
|
Free Monthly Websites 2.0 - Multiple Vulnerabilities
|
11 |
WEB
|
X-Cisadane
|
|
2013-02-05
|
|
D-Link DIR-600 / DIR-300 (Rev B) - Multiple Vulnerabilities
|
12 |
WEB
|
m-1-k-3
|
|
2013-02-05
|
|
AdaptCMS 2.0.4 - 'config.php?question' SQL Injection
|
12 |
WEB
|
kallimero
|
|
2013-02-05
|
|
ArrowChat 1.5.61 - Multiple Vulnerabilities
|
14 |
WEB
|
kallimero
|
|
2013-02-05
|
|
Cisco Unity Express - Multiple Vulnerabilities
|
15 |
WEB
|
Jacob Holcomb
|
|
2013-02-04
|
|
Simple Machine Forum 2.0.x < 2.0.4 - File Disclosure / Directory Traversal
|
16 |
WEB
|
NightlyDev
|
|
2013-01-31
|
|
Buffalo TeraStation TS-Series - Multiple Vulnerabilities
|
12 |
WEB
|
Andrea Fabrizi
|
|
2013-01-31
|
|
D-Link DCS Cameras - Multiple Vulnerabilities
|
11 |
WEB
|
Roberto Paleari
|
|
2013-01-31
|
|
Netgear SPH200D - Multiple Vulnerabilities
|
12 |
WEB
|
m-1-k-3
|
|
2013-01-29
|
|
pfSense UTM Platform 2.0.1 - Cross-Site Scripting
|
14 |
WEB
|
Dimitris Strevinas
|
|
2013-01-28
|
|
DataLife Engine 9.7 - 'preview.php' PHP Code Injection
|
17 |
WEB
|
EgiX
|
|
2013-01-29
|
|
Kohana Framework 2.3.3 - Directory Traversal
|
12 |
WEB
|
Vulnerability-Lab
|
|
2013-01-29
|
|
Fortinet FortiMail 400 IBE - Multiple Vulnerabilities
|
14 |
WEB
|
Vulnerability-Lab
|
|
2013-01-28
|
|
PHP weby directory software 1.2 - Multiple Vulnerabilities
|
16 |
WEB
|
AkaStep
|
|
2013-01-28
|
|
Microsoft Internet Explorer 8/9 - Steal Any Cookie
|
12 |
WEB
|
Christian Haider
|
|
2004-09-01
|
|
phpWebSite 0.7.3/0.8.x/0.9.x Comment Module - 'CM_pid' Cross-Site Scripting
|
16 |
WEB
|
GulfTech Security
|
|
2004-09-01
|
|
Newtelligence DasBlog 1.x - Request Log HTML Injection
|
13 |
WEB
|
Dominick Baier
|
|
2004-09-01
|
|
Comersus Cart 5.0 - HTTP Response Splitting
|
15 |
WEB
|
Maestro De-Seguridad
|
|
2004-08-31
|
|
Web Animations Password Protect - Multiple Input Validation Vulnerabilities
|
17 |
WEB
|
Criolabs
|
|
2004-08-28
|
|
Nagl XOOPS Dictionary Module 1.0 - Multiple Cross-Site Scripting Vulnerabilities
|
13 |
WEB
|
CyruxNET
|
|
2004-08-24
|
|
PHP Code Snippet Library 0.8 - Multiple Cross-Site Scripting Vulnerabilities
|
16 |
WEB
|
Nikyt0x Argentina
|
|
2004-08-24
|
|
Web-APP.Org WebAPP 0.8/0.9.x - Directory Traversal
|
12 |
WEB
|
Jerome Athias
|
|
2004-08-24
|
|
SWsoft Plesk Reloaded 7.1 - 'Login_name' Cross-Site Scripting
|
15 |
WEB
|
sourvivor
|
|
2004-08-23
|
|
eGroupWare 1.0 Calendar Module - 'date' Cross-Site Scripting
|
12 |
WEB
|
Joxean Koret
|
|
2004-08-23
|
|
Axis Network Camera 2.x And Video Server 1-3 - HTTP Authentication Bypass
|
12 |
WEB
|
bashis
|
|
2004-08-23
|
|
Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal
|
14 |
WEB
|
bashis
|
|
2004-08-23
|
|
Axis Network Camera 2.x And Video Server 1-3 - 'virtualinput.cgi' Arbitrary Command Execution
|
17 |
WEB
|
bashis
|
|
2004-08-23
|
|
PhotoADay - 'Pad_selected' Cross-Site Scripting
|
16 |
WEB
|
King Of Love
|
|
2004-08-23
|
|
Compulsive Media CNU5 - 'News.mdb' Database Disclosure
|
14 |
WEB
|
Security .Net Information
|
|
2004-08-21
|
|
MyDms 1.4 - SQL Injection / Directory Traversal
|
16 |
WEB
|
Jose Antonio
|
|
2004-08-21
|
|
Mantis Bug Tracker 0.x - New Account Signup Mass Emailing
|
18 |
WEB
|
Jose Antonio
|
|
2004-08-21
|
|
Mantis Bug Tracker 0.x - Multiple Cross-Site Scripting Vulnerabilities
|
14 |
WEB
|
Jose Antonio
|
|
2004-08-21
|
|
Mantis Bug Tracker 0.19 - Remote Server-Side Script Execution
|
13 |
WEB
|
Jose Antonio
|
|
2004-08-21
|
|
Sympa 4.x - New List HTML Injection
|
18 |
WEB
|
Jose Antonio
|
|
2004-07-19
|
|
Zixforum - ZixForum.mdb Database Disclosure
|
14 |
WEB
|
Security .Net Information
|
|
2004-07-18
|
|
PHP-Fusion Database Backup - Information Disclosure
|
17 |
WEB
|
Ahmad Muammar
|
|
2004-07-17
|
|
Gallery 1.4.4 - Remote Server-Side Script Execution
|
15 |
WEB
|
aCiDBiTS
|
|
2004-07-17
|
|
Merak Mail Server 7.4.5 - 'calendar.html?schedule' SQL Injection
|
16 |
WEB
|
Criolabs
|
|
2004-07-17
|
|
Merak Mail Server 7.4.5 - address.html Full Path Disclosure
|
12 |
WEB
|
Criolabs
|
|
2004-07-17
|
|
Merak Mail Server 7.4.5 - HTML Message Body Cross-Site Scripting
|
13 |
WEB
|
Criolabs
|
|
2004-07-17
|
|
Merak Mail Server 7.4.5 - 'attachment.html?attachmentpage_text_error' Cross-Site Scripting
|
12 |
WEB
|
Criolabs
|
|
2004-07-17
|
|
Merak Mail Server 7.4.5 - 'settings.html' Multiple Cross-Site Scripting Vulnerabilities
|
11 |
WEB
|
Criolabs
|
|
2004-07-17
|
|
Merak Mail Server 7.4.5 - 'address.html' Multiple Cross-Site Scripting Vulnerabilities
|
15 |
WEB
|
Criolabs
|
|
2004-07-16
|
|
RaXnet Cacti 0.6.x/0.8.x - 'Auth_Login.php' SQL Injection
|
16 |
WEB
|
Fernando Quintero
|
|
2004-07-16
|
|
PScript PForum 1.24/1.25 - User Profile HTML Injection
|
15 |
WEB
|
Christoph Jeschke
|
|
2004-07-16
|
|
CuteNews 1.3.1 - 'show_archives.php' Cross-Site Scripting
|
12 |
WEB
|
Debasis Mohanty
|
|
2004-07-15
|
|
MapInfo Discovery 1.0/1.1 - Administrative Authentication Bypass
|
11 |
WEB
|
anonymous
|
|
2004-07-15
|
|
MapInfo Discovery 1.0/1.1 - Cleartext Transmission Credential Disclosure
|
15 |
WEB
|
anonymous
|
|
2004-07-15
|
|
MapInfo Discovery 1.0/1.1 - 'MapFrame.asp?mapname' Cross-Site Scripting
|
11 |
WEB
|
anonymous
|
|
2004-07-15
|
|
MapInfo Discovery 1.0/1.1 - Remote Log File Access Information Disclosure
|
14 |
WEB
|
anonymous
|
|
2004-08-11
|
|
IceWarp Web Mail 3.3.2/5.2.7 - Multiple Remote Input Validation Vulnerabilities
|
13 |
WEB
|
ShineShadow
|
|
2013-01-25
|
|
ImageCMS 4.0.0b - Multiple Vulnerabilities
|
17 |
WEB
|
High-Tech Bridge SA
|
|
2013-01-25
|
|
WordPress Plugin SolveMedia 1.1.0 - Cross-Site Request Forgery
|
15 |
WEB
|
Junaid Hussain
|
|
2004-07-07
|
|
YaPiG 0.92 - Remote Server-Side Script Execution
|
15 |
WEB
|
aCiDBiTS
|
|
2004-08-07
|
|
PluggedOut Blog 1.51/1.60 - 'Blog_Exec.php' Cross-Site Scripting
|
12 |
WEB
|
befcake beefy
|
|
2004-08-16
|
|
Moodle 1.x - 'post.php' Cross-Site Scripting
|
17 |
WEB
|
Javier Ubilla
|
|
2004-08-04
|
|
PHP-Nuke 0-7 - Delete God Admin Access Control Bypass
|
15 |
WEB
|
Ahmad Muammar
|
|
2004-08-04
|
|
eNdonesia 8.3 - Search Form Cross-Site Scripting
|
14 |
WEB
|
Ahmad Muammar
|
|
2004-08-04
|
|
Pete Stein GoScript 2.0 - Remote Command Execution
|
16 |
WEB
|
Francisco Alisson
|
|
2004-07-30
|
|
Fusionphp Fusion News 3.3/3.6 - Administrator Command Execution
|
15 |
WEB
|
Joseph Moniz
|
|
2004-07-30
|
|
PowerPortal 1.1/1.3 - Private Message HTML Injection
|
13 |
WEB
|
vampz
|
|
2004-07-29
|
|
Jaws 0.2/0.3/0.4 - 'ControlPanel.php' SQL Injection
|
13 |
WEB
|
Fernando Quintero
|
|
2004-07-29
|
|
Verylost LostBook 1.1 - Message Entry HTML Injection
|
16 |
WEB
|
Joseph Moniz
|
|
2004-07-29
|
|
Comersus Cart 5.0 - SQL Injection
|
17 |
WEB
|
evol@ruiner.halo.nu
|
|
2004-07-28
|
|
Phorum 5.0.7 - Search Script Cross-Site Scripting
|
20 |
WEB
|
vampz
|
|
2004-07-28
|
|
AntiBoard 0.6/0.7 - 'antiboard.php?feedback' Cross-Site Scripting
|
14 |
WEB
|
Josh Gilmour
|
|
2004-07-28
|
|
AntiBoard 0.6/0.7 - 'antiboard.php' Multiple SQL Injections
|
12 |
WEB
|
Josh Gilmour
|
|
2004-07-26
|
|
PostNuke 0.72/0.75 Reviews Module - Cross-Site Scripting
|
13 |
WEB
|
DarkBicho
|
|
2013-01-24
|
|
SQLiteManager 1.2.4 - Remote PHP Code Injection
|
14 |
WEB
|
RealGame
|
|
2004-07-26
|
|
XLineSoft ASPRunner 1.0/2.x - Database Direct Request Information Disclosure
|
11 |
WEB
|
Ferruh Mavituna
|
|
2004-07-26
|
|
XLineSoft ASPRunner 1.0/2.x - 'export.asp?SQL' Cross-Site Scripting
|
10 |
WEB
|
Ferruh Mavituna
|
|
2004-07-26
|
|
XLineSoft ASPRunner 1.0/2.x - '[TABLE]_list.asp?searchFor' Cross-Site Scripting
|
10 |
WEB
|
Ferruh Mavituna
|
|
2004-07-26
|
|
XLineSoft ASPRunner 1.0/2.x - '[TABLE-NAME]_edit.asp?SQL' Cross-Site Scripting
|
25 |
WEB
|
Ferruh Mavituna
|
|
2004-07-26
|
|
XLineSoft ASPRunner 1.0/2.x - '[TABLE-NAME]_search.asp?Typeen' Cross-Site Scripting
|
12 |
WEB
|
Ferruh Mavituna
|
|
2004-07-24
|
|
EasyIns Stadtportal 4.0 - 'Site' Remote File Inclusion
|
13 |
WEB
|
Francisco Alisson
|
|
2004-07-24
|
|
PostNuke 0.7x - Install Script Administrator Password Disclosure
|
13 |
WEB
|
hellsink
|
|
2004-07-23
|
|
EasyWeb 1.0 FileManager Module - Directory Traversal
|
10 |
WEB
|
sullo@cirt.net
|
|
2004-07-21
|
|
Layton Technology HelpBox 3.0.1 - Multiple SQL Injections
|
12 |
WEB
|
Noam Rathaus
|
|
2004-07-21
|
|
Polar Helpdesk 3.0 - Cookie Based Authentication Bypass
|
12 |
WEB
|
Noam Rathaus
|
|
2004-07-21
|
|
Mensajeitor Tag Board 1.x - Authentication Bypass
|
14 |
WEB
|
Jordi Corrales
|
|
2004-07-21
|
|
Leigh Business Enterprises Web HelpDesk 4.0 - SQL Injection
|
14 |
WEB
|
Noam Rathaus
|
|
2004-07-21
|
|
NetSupport DNA HelpDesk 1.0 Problist Script - SQL Injection
|
18 |
WEB
|
Noam Rathaus
|
|
2004-07-21
|
|
Internet Software Sciences Web+Center 4.0.1 - Cookie Object SQL Injection
|
14 |
WEB
|
Noam Rathaus
|
|
2004-07-20
|
|
Nucleus CMS 3.0 / Blog:CMS 3 / PunBB 1.x - 'Common.php' Remote File Inclusion
|
12 |
WEB
|
Radek Hulan
|
|
2013-01-22
|
|
Adult WebMaster Script - Password Disclosure
|
16 |
WEB
|
Dshellnoi Unix
|
|
2013-01-22
|
|
WordPress Plugin Developer Formatter - Cross-Site Request Forgery
|
13 |
WEB
|
Junaid Hussain
|
|
2004-07-19
|
|
Adam Ismay Print Topic Mod 1.0 - SQL Injection
|
12 |
WEB
|
Bartek Nowotarski
|
|
2004-07-19
|
|
Outblaze Webmail - HTML Injection
|
16 |
WEB
|
DarkBicho
|
|
2004-07-19
|
|
CuteNews 1.3 - Comment HTML Injection
|
12 |
WEB
|
DarkBicho
|
|
2004-07-19
|
|
Artmedic Webdesign Kleinanzeigen Script - Remote File Inclusion
|
14 |
WEB
|
Adam Simuntis
|
|
2004-07-15
|
|
BoardPower Forum - 'ICQ.cgi' Cross-Site Scripting
|
14 |
WEB
|
Alexander Antipov
|
|
2004-07-15
|
|
Gattaca Server 2003 - Cross-Site Scripting
|
11 |
WEB
|
dr_insane
|
|
2004-07-15
|
|
Gattaca Server 2003 - 'Language' Path Exposure
|
12 |
WEB
|
dr_insane
|
|
2004-07-15
|
|
Gattaca Server 2003 - Null Byte Full Path Disclosure
|
12 |
WEB
|
dr_insane
|
|
2004-07-13
|
|
Moodle Help Script 1.x - Cross-Site Scripting
|
11 |
WEB
|
morpheus[bd]
|
|
2004-07-12
|
|
phpBB 2.0.x - 'viewtopic.php' PHP Script Injection
|
12 |
WEB
|
sasan hezarkhani
|
